Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: hUuKPTtD+tDXDMgAkDYDVD2Z8MCySJBqArIgr5cREr4=
Subject key identifier: CA:FC:7E:C2:48:79:66:35:D2:B3:E3:1C:95:5D:F1:68:67:22:3E:53
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 01A17E8612BCC4C3EA53471C628B7F630D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 0BDB
Signing time: Tue 27 Oct 2026 18:01:18 +0000
Manifest this update: Tue 27 Oct 2026 18:01:18 +0000
Manifest next update: Wed 28 Oct 2026 18:01:18 +0000
Files and hashes: 1: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (hash: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA=)
2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: Ovl+N0iHe5/gJvLXVf9WucP8hBwFFy9JtfCFEX9ZR7g=)
3: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (hash: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw=)
4: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (hash: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:86:12:bc:c4:c3:ea:53:47:1c:62:8b:7f:63:0d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Oct 27 18:01:18 2026 GMT
Not After : Oct 28 18:01:18 2026 GMT
Subject: CN=cafc7ec248796635d2b3e31c955df16867223e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:2a:b9:47:c6:2d:16:6c:1a:fa:09:e0:92:
5e:36:fb:0b:86:ff:09:60:7f:2d:fa:6c:ff:a8:7e:
f8:28:21:84:94:83:5d:4d:d1:49:3c:07:97:ca:3e:
45:f5:ed:f2:18:8a:5b:92:98:9c:c1:fa:c9:3e:3d:
5a:57:46:ef:5e:32:af:a7:4d:0f:6f:65:e3:3e:6a:
13:47:55:25:a4:20:6b:e0:86:e3:ed:8b:36:d9:c2:
e6:bc:d9:ca:28:65:f5:e0:1c:d8:cb:83:26:01:cb:
04:cf:3f:1f:1d:17:63:66:0d:ef:f6:e6:6b:85:2d:
2e:0b:e7:03:cb:ba:14:35:37:d6:37:f3:ab:f7:22:
54:31:36:45:6b:8f:dc:ea:15:11:b3:24:0c:03:a6:
05:39:25:9c:90:b4:0b:75:8f:fd:b5:13:ff:28:4a:
22:e0:ba:15:1c:7b:5d:7e:fc:2a:da:61:4e:6f:4e:
f4:5b:35:ff:98:7f:f8:01:3d:8e:25:c1:a0:a9:66:
0a:c6:a3:d2:5b:41:e1:21:5c:4c:bf:13:8a:bf:d9:
a8:a7:c8:94:e4:54:58:50:37:6c:a2:47:85:53:2b:
39:cb:04:bd:ed:a4:4c:43:27:10:6e:f3:69:db:87:
8e:10:41:88:91:95:f8:16:80:5e:02:d8:da:31:d1:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FC:7E:C2:48:79:66:35:D2:B3:E3:1C:95:5D:F1:68:67:22:3E:53
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fb:86:6e:15:c0:7b:d6:4c:80:a6:96:58:b8:e9:c1:27:39:
e4:e8:f2:d5:5d:36:25:f3:b1:75:dd:38:a9:6d:35:f8:d9:aa:
bb:16:e6:51:8b:e8:ff:9a:e0:3e:e7:8e:15:93:d4:8e:86:d8:
cc:78:ba:85:b9:87:a2:32:52:fa:d2:24:71:66:d9:56:f5:e9:
9c:5e:8c:b0:02:49:7c:cf:97:ee:87:c5:cc:21:cb:42:a8:bb:
84:b2:06:2a:2f:1b:63:c3:f7:9f:9d:bc:54:87:17:2f:e1:a9:
b8:1f:9f:2d:2d:e5:95:08:82:cd:6e:cb:5b:60:35:31:d2:1b:
26:7d:a3:41:e8:c0:86:b7:f9:0b:27:dd:68:b1:2b:bb:13:44:
08:f9:79:3a:3b:d2:58:7b:73:85:2c:70:93:38:18:db:a2:5b:
d8:75:35:a7:c0:46:8c:2c:83:b0:62:ae:d4:46:f4:cb:bf:19:
e1:6b:43:ec:7a:4c:14:de:53:10:b1:7e:3e:8b:4a:32:d3:91:
88:2f:ac:8d:83:cf:e3:50:82:77:10:d4:cf:3a:2b:d9:d3:83:
fb:6f:c9:b7:c2:6d:30:e8:ad:05:71:9f:23:74:38:0f:98:cf:
5c:7f:e5:bc:88:00:17:24:cc:a7:34:fb:b6:4c:b7:f8:37:6f:
e6:4f:75:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:16:52 2026 by rpki-client