Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
File: i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft (raw, json)
Hash identifier: /v0dkbSsFCLfDtcnKtMyw+M8ThgY1ZnzrQO5zGniy50=
Subject key identifier: 5B:CB:F1:9B:67:70:48:EF:89:97:84:C4:17:AC:D2:90:5D:E0:D9:FA
Authority key identifier: 8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
Certificate issuer: /CN=8bdd303c2458c3649ad5684e16e209603515f6f9
Certificate serial: 01A0BFC39E761DFA256D491B39BB8AE02687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
Manifest number: 5E
Signing time: Sun 20 Sep 2026 17:01:03 +0000
Manifest this update: Sun 20 Sep 2026 17:01:03 +0000
Manifest next update: Mon 21 Sep 2026 17:01:03 +0000
Files and hashes: 1: KmNxzz7eij2vc69C4M9P6FeRw94.asa (hash: VXXdojaYOsWRnPXAdxFZSw+zRwZOX8i3XwGDi9HlnWY=)
2: i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl (hash: iZRQXpi2z58SeDVnr85kXhqMtfR+BuVsY/pVLOZ45Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:9e:76:1d:fa:25:6d:49:1b:39:bb:8a:e0:26:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd303c2458c3649ad5684e16e209603515f6f9
Validity
Not Before: Sep 20 17:01:03 2026 GMT
Not After : Sep 21 17:01:03 2026 GMT
Subject: CN=5bcbf19b677048ef899784c417acd2905de0d9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:80:f5:6c:39:87:ac:da:69:9f:1f:2e:03:
ee:6f:e9:b9:a4:cc:11:a1:62:75:1d:02:43:94:7b:
5c:8c:6d:2d:79:bd:36:68:a0:ea:e1:1f:9d:df:8d:
8b:f8:fd:5b:7c:f9:85:b3:56:fe:0b:03:d6:51:d4:
07:54:99:d9:b5:18:f5:93:72:9d:39:ea:76:a9:ea:
31:3e:d3:16:a0:e2:32:46:42:5e:86:c0:8d:d5:8b:
85:47:7b:54:1f:b6:03:b4:06:f2:77:53:1d:8f:d2:
f1:3d:af:6c:43:c5:0a:4b:20:9a:60:f3:b3:86:93:
7e:23:2e:9f:77:26:6b:b2:c8:4f:92:d0:f9:b9:34:
6e:97:dc:fe:e0:4b:7d:26:be:a4:6c:e2:55:21:9c:
fa:c0:84:c0:e1:1b:38:29:4b:79:e8:b2:e5:d8:1a:
22:e8:de:8a:60:3a:ba:86:26:3a:d5:e0:77:ae:c7:
6d:d8:68:a8:01:4b:06:f2:d0:59:cc:fb:49:11:4d:
ba:da:49:a1:b7:4e:f0:58:e9:7c:68:37:16:d9:8c:
47:59:1e:3d:c9:49:29:ca:7e:25:a5:03:d9:8d:9b:
41:11:87:73:39:a1:d3:56:9b:f0:d5:46:dd:c2:0e:
31:88:c7:03:19:1d:d5:d4:6b:3d:15:27:8e:10:b3:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CB:F1:9B:67:70:48:EF:89:97:84:C4:17:AC:D2:90:5D:E0:D9:FA
X509v3 Authority Key Identifier:
keyid:8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cc:d6:14:bf:00:b9:12:c8:c5:e8:a3:03:28:f0:bb:2e:5f:
f3:58:22:91:e2:86:12:2f:78:6e:f6:79:29:ec:39:70:29:9e:
93:35:90:63:c5:f4:03:30:e0:50:8a:48:06:01:c6:69:20:5b:
84:2c:c4:ec:1f:83:a1:47:22:68:87:fc:2a:db:ab:40:f9:1a:
12:53:bc:8e:f7:df:74:26:f7:38:7d:45:10:99:ab:9c:8c:2a:
82:0e:36:04:d2:3d:73:9e:b7:0a:c6:59:3f:47:81:72:0c:1a:
97:0e:7b:a0:16:e7:65:3b:9b:18:ce:10:4b:32:43:f1:35:a5:
61:dc:ab:bb:18:79:4d:ee:e3:82:39:1a:8e:7f:92:2c:8f:7f:
8d:ff:20:78:ac:59:b5:43:bd:b6:05:38:7f:99:08:9c:66:8f:
99:85:35:6f:17:0c:9d:69:93:63:d9:71:5a:b9:34:68:5c:e6:
93:8a:51:6b:b5:cd:b2:15:5b:08:ae:6e:ae:05:80:1d:ae:49:
b5:3d:91:9a:a0:45:2f:cc:46:8f:7c:0f:c2:92:cc:bd:d0:c0:
95:25:1a:fa:9d:65:34:d1:13:78:51:f8:35:a3:a7:4a:ae:27:
50:62:9a:46:bc:2a:ff:d3:54:9e:c1:4d:a7:cb:ab:bf:d1:98:
7d:62:21:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:02:36 2026 by rpki-client