Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: N1O3/b4k4IpNYwuGFHeRrHkSdx55PQJ1onJK1ELMFVQ=
Subject key identifier: F9:12:88:E6:75:9A:97:4F:B6:F2:18:0F:32:B2:DD:4F:5F:27:EA:7C
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 71308986D0610CCBF6AFDF3B3159A38A3EB5BCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 030D
Signing time: Sat 28 Mar 2026 19:51:21 +0000
Manifest this update: Sat 28 Mar 2026 19:46:19 +0000
Manifest next update: Sun 29 Mar 2026 20:57:19 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: feRuvesTdDpLKj6gAalmk5dbSAcehQNF0O6QwC0br60=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 20:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:30:89:86:d0:61:0c:cb:f6:af:df:3b:31:59:a3:8a:3e:b5:bc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Mar 28 19:46:19 2026 GMT
Not After : Mar 29 20:57:19 2026 GMT
Subject: CN=F91288E6759A974FB6F2180F32B2DD4F5F27EA7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:a2:a3:86:5c:cd:42:73:a6:d7:66:ca:85:
09:cd:9e:2c:e9:5e:d1:67:69:92:be:c4:57:a6:53:
42:5a:3d:99:c1:5a:5e:51:b9:8a:bc:f3:44:86:05:
84:17:47:5b:c4:51:12:d1:55:b0:c5:5a:08:9e:d4:
85:74:85:05:ef:d5:a4:d1:e4:d4:27:d7:41:fe:e6:
01:2d:0d:b8:fc:f4:64:f0:c8:e7:bc:7a:7c:7b:c0:
5b:dd:fb:80:60:79:7c:4f:ef:e4:9f:06:37:68:12:
ef:b8:17:5d:72:f7:db:9e:14:d6:0e:55:10:81:b4:
cf:c8:18:af:25:4c:17:2a:0a:6c:4a:f6:e5:bf:51:
76:11:11:07:ce:f9:8a:f6:32:e8:99:9c:bf:2d:e0:
bd:27:02:82:ae:1d:db:45:8a:da:b4:11:8b:83:09:
72:91:b3:48:95:05:fd:75:f4:18:af:3d:46:16:a1:
05:b1:0e:8a:ed:c8:04:1e:8b:4b:79:4e:1f:8a:ee:
63:1c:49:97:af:59:c7:55:c4:f5:d5:d6:a1:c9:f8:
73:3c:ab:ba:68:97:3e:8a:0e:74:a0:8d:ea:88:55:
69:3f:76:62:c3:d9:31:12:54:8c:65:c2:45:ac:95:
77:9b:c8:11:48:82:82:51:e4:09:67:21:aa:2b:b8:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:12:88:E6:75:9A:97:4F:B6:F2:18:0F:32:B2:DD:4F:5F:27:EA:7C
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:50:34:d6:ce:f1:e6:26:b9:51:7d:77:91:f0:f5:6e:06:2d:
b6:bd:90:d6:50:d5:c3:ef:a5:74:07:a6:e3:bc:b9:09:e1:87:
7e:10:bd:70:21:72:e9:46:f0:54:57:6f:dc:ab:16:86:57:fc:
a4:fe:cc:9f:74:b7:b0:49:37:d1:cc:19:e1:96:7a:94:e8:f8:
59:2c:fc:11:61:ee:2f:4a:69:42:f6:b5:4e:8c:2e:3f:54:ad:
d0:f5:69:01:ef:73:f1:fc:c5:07:3e:af:25:d2:d9:53:b3:86:
74:84:71:45:33:4e:4a:02:fd:a0:5f:97:79:cc:74:63:2c:d3:
13:3b:33:b1:06:48:f1:78:4a:ef:11:4d:f6:b8:4d:22:be:28:
af:89:62:0a:01:6a:e5:34:e5:b6:b7:7f:93:53:9a:b7:6e:cc:
c4:6a:dd:52:2b:63:18:cf:f9:e9:d8:9b:4e:e8:d2:16:45:84:
90:ec:df:ae:5e:66:ca:70:34:8a:6e:81:03:f3:74:01:ab:6e:
f7:3f:2d:66:43:b2:0b:e7:15:1e:80:50:0e:cd:1f:ae:14:32:
63:7c:eb:0d:a5:f1:d7:50:2d:1b:d9:01:0a:30:51:ea:eb:93:
c4:1a:a7:07:1f:6e:91:a1:81:5a:b5:cc:95:8b:df:ca:9d:fc:
19:5b:70:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:55 2026 by rpki-client