Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
File: i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft (raw, json)
Hash identifier: TLPcrJa80Vj50SDuXsBZYMrhEHAy00YtlPAm/f7ngok=
Subject key identifier: 90:BD:A4:A0:BE:5E:D9:93:8F:04:33:D6:98:AE:51:A2:51:4A:B6:74
Authority key identifier: 8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
Certificate issuer: /CN=8bdd303c2458c3649ad5684e16e209603515f6f9
Certificate serial: 01A1A97087D703C358CE70A9CB95D4863801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
Manifest number: D7
Signing time: Thu 05 Nov 2026 02:01:26 +0000
Manifest this update: Thu 05 Nov 2026 02:01:26 +0000
Manifest next update: Fri 06 Nov 2026 02:01:26 +0000
Files and hashes: 1: KmNxzz7eij2vc69C4M9P6FeRw94.asa (hash: VXXdojaYOsWRnPXAdxFZSw+zRwZOX8i3XwGDi9HlnWY=)
2: i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl (hash: qNMA6XWxdWX/8vW4xG4FvRU37nZvhAbTT5nsfperhVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:70:87:d7:03:c3:58:ce:70:a9:cb:95:d4:86:38:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd303c2458c3649ad5684e16e209603515f6f9
Validity
Not Before: Nov 5 02:01:26 2026 GMT
Not After : Nov 6 02:01:26 2026 GMT
Subject: CN=90bda4a0be5ed9938f0433d698ae51a2514ab674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:06:f3:67:f9:76:da:08:0f:ba:db:b3:c1:
90:3f:92:5a:6d:41:76:6c:61:5a:73:5e:c4:50:3e:
50:28:b1:e9:fc:a2:8e:c4:23:e7:f7:d3:e0:d4:a2:
b0:3a:64:12:f9:5a:b1:55:b4:29:57:bd:56:5e:0f:
33:c4:8c:6e:f3:bb:bf:53:93:45:b9:66:8a:7e:fc:
98:50:86:49:86:53:45:a4:d7:4c:64:ba:81:fa:12:
a7:f3:21:4f:01:9a:3d:fc:db:a3:39:fc:74:18:df:
0c:eb:7b:60:c4:71:2c:9b:ec:6d:51:f1:7d:0b:c4:
57:24:ea:99:11:0f:7b:4a:cc:3c:c6:59:58:c0:ea:
5b:7c:97:8b:4f:61:2a:5f:45:8f:ca:a4:ff:4d:ad:
4f:c6:78:54:e6:9c:cd:5b:1b:6b:49:51:7c:23:01:
6c:fd:08:33:66:b4:73:a3:55:87:b1:32:ff:89:c6:
c1:31:58:8a:72:1e:8c:f6:a4:2f:ee:5f:0e:be:30:
7f:51:8d:25:d9:95:21:24:00:6f:5b:00:1b:ce:ba:
ab:f7:84:91:01:f5:6c:05:a5:a2:16:5c:65:a9:74:
45:eb:2b:3e:62:6c:e5:ca:d8:58:45:9b:1f:fa:ee:
70:48:0e:0c:f3:39:ed:fc:b9:3b:b2:0c:1f:5d:51:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BD:A4:A0:BE:5E:D9:93:8F:04:33:D6:98:AE:51:A2:51:4A:B6:74
X509v3 Authority Key Identifier:
keyid:8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0c:b0:3c:41:e0:2e:0e:35:50:c9:3c:77:61:31:64:7f:75:
bf:5a:06:9c:f9:56:8d:1d:7b:f2:b8:16:f8:4f:ba:3e:16:e6:
ad:1b:a6:1b:1f:41:66:c4:df:46:c9:bd:d8:1c:7d:31:73:3f:
5c:33:85:26:fc:6d:ff:9b:51:fb:5a:21:df:ae:55:59:25:1b:
77:cc:55:a6:e8:15:14:62:68:e4:22:99:a9:26:f3:b5:0e:24:
51:61:a9:a9:42:34:e9:01:d0:d2:5f:e8:28:2f:50:e2:17:d3:
1f:4f:fe:14:5c:fa:93:bf:2e:65:f4:e9:86:a8:ee:22:fb:28:
b3:cd:68:8b:12:2a:ae:e7:d2:c9:35:ec:76:f4:66:3e:c1:56:
24:39:64:a0:f9:c6:a4:95:cd:e2:78:46:fd:60:ce:66:f6:db:
6e:18:fc:bf:b6:f3:3e:17:d5:81:d4:55:77:b6:22:a6:e0:12:
02:76:37:71:b1:04:14:a8:ac:e8:65:b5:65:42:6e:73:4d:f4:
bc:a6:88:99:94:97:60:dd:59:27:05:ae:d2:8c:d4:43:5f:84:
1d:69:b3:13:b5:6b:56:32:37:a0:17:0b:51:72:5b:7a:67:37:
fe:7c:ef:0e:03:ba:2a:82:ef:ef:53:d9:31:79:07:e3:08:33:
c3:d2:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:11:45 2026 by rpki-client