
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: xvRDZH73u0J77kotwOz7Phh6Cj+2oibcEWa0dV4HhOU=
Subject key identifier: 86:FF:ED:AF:98:CD:9F:D5:09:64:04:A1:1A:78:22:FB:2D:E3:01:04
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 019E762F56B2B294615E5046F72DB4F97331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 0A49
Signing time: Sat 30 May 2026 00:01:14 +0000
Manifest this update: Sat 30 May 2026 00:01:14 +0000
Manifest next update: Sun 31 May 2026 00:01:14 +0000
Files and hashes: 1: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (hash: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA=)
2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: GfYULhumARMZ6jLZsx+81BIOb1S69yTZmIyLOp83RQU=)
3: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (hash: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw=)
4: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (hash: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 May 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:76:2f:56:b2:b2:94:61:5e:50:46:f7:2d:b4:f9:73:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: May 30 00:01:14 2026 GMT
Not After : May 31 00:01:14 2026 GMT
Subject: CN=86ffedaf98cd9fd5096404a11a7822fb2de30104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:cf:13:8f:32:3d:80:70:f4:50:65:a4:3a:
6d:3f:d7:07:2f:78:5b:c7:04:84:e7:0a:ca:0a:9e:
27:a8:d4:40:83:ae:55:bd:95:c0:ac:5f:24:bb:4f:
b9:2f:0c:d8:d9:b2:9a:fe:5c:0c:07:13:f5:96:83:
45:38:5d:78:19:ec:d4:c6:53:48:f4:46:6e:c9:84:
93:9d:b4:af:06:b5:68:2b:08:f9:db:57:ff:3d:d6:
5c:ab:52:95:5a:74:80:76:fa:73:6a:86:be:1b:6a:
ec:4d:8e:1a:ea:ec:23:9f:83:53:bc:2e:5b:3f:51:
35:3c:e1:33:9e:3c:a5:69:a9:ad:4a:45:f4:4f:a2:
bb:6a:fe:a4:51:79:a9:2b:44:17:e4:77:44:de:ce:
a5:d3:a1:32:48:f4:74:e3:93:11:c5:e5:aa:0b:a7:
6b:dd:d5:73:12:2a:fe:15:75:41:6b:c3:e8:ba:5f:
a7:6c:26:47:ca:c8:42:44:1d:3a:39:ec:0f:6f:ef:
f0:d1:00:af:51:1a:73:02:b4:c2:bb:ac:28:86:2b:
c7:6d:55:c5:44:7a:37:4b:e5:47:0b:5e:b4:ca:4f:
1c:93:b8:3f:57:d6:ef:9f:72:e3:36:84:4b:f5:34:
71:9e:a8:41:89:7c:7f:c8:1e:ad:f0:a2:53:76:e5:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FF:ED:AF:98:CD:9F:D5:09:64:04:A1:1A:78:22:FB:2D:E3:01:04
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:62:84:60:b9:d0:fc:18:b8:33:2c:48:b5:fb:77:95:76:de:
52:70:08:2b:53:79:b4:b4:85:83:ac:de:32:eb:06:e9:1b:80:
10:df:c6:88:ab:13:01:96:cf:57:b5:ff:98:ea:d9:43:42:47:
a8:98:08:3e:dc:67:5b:57:a5:40:fb:92:e7:0c:77:e2:2b:6e:
2c:14:95:b4:6f:c5:5f:58:44:44:5f:f7:86:f4:e2:04:ec:eb:
58:6a:71:fd:27:15:82:0b:50:7e:a1:e1:a4:8d:de:55:68:c1:
49:b5:ee:53:6d:c0:b9:78:03:05:da:9e:a0:12:aa:20:e4:d4:
08:7e:c5:70:d8:ec:1c:a2:0d:03:d7:b5:d5:36:2d:2c:51:4f:
f0:db:f9:71:52:b1:37:2d:38:a0:ec:7d:3b:5a:95:a5:26:8d:
94:a8:36:e6:d7:88:c9:43:ce:ef:f4:a9:33:ea:70:0a:51:d8:
4c:d5:e1:a9:a0:72:e9:94:c3:40:29:0c:80:f8:a8:0e:ce:97:
ab:55:6b:35:4a:f0:c2:aa:80:94:07:06:dd:a2:fe:f0:17:c2:
7d:79:5f:33:6c:1c:68:50:e6:e4:6b:6c:55:d3:b2:a3:7a:ba:
80:f2:15:a1:ea:4a:34:9c:75:a4:7e:47:23:46:dc:13:97:0d:
23:cf:0d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 03:10:03 2026 by rpki-client