Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: InajBiB3y/FHU4nW410+ytMywDIkNb5wREs1DwzK3iQ=
Subject key identifier: 2E:F7:82:3C:C5:06:9B:53:E0:F6:5E:34:FC:16:86:67:48:C7:C6:4F
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 019D39776BCE1D8A93E967999BA7B5F2D51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 09A5
Signing time: Sun 29 Mar 2026 12:00:20 +0000
Manifest this update: Sun 29 Mar 2026 12:00:20 +0000
Manifest next update: Mon 30 Mar 2026 12:00:20 +0000
Files and hashes: 1: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (hash: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA=)
2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: 2ACtKktvJDAAEkFM7Q7+DDkxJNFvxD+J/1123Utbpio=)
3: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (hash: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw=)
4: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (hash: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:6b:ce:1d:8a:93:e9:67:99:9b:a7:b5:f2:d5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Mar 29 12:00:20 2026 GMT
Not After : Mar 30 12:00:20 2026 GMT
Subject: CN=2ef7823cc5069b53e0f65e34fc16866748c7c64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:43:5d:ed:11:3a:61:4b:eb:ad:62:10:79:
4b:8f:da:88:55:3b:47:49:e6:e7:f0:13:62:2f:cf:
ba:ea:53:3a:5e:f0:04:8f:b1:65:51:9d:b7:11:eb:
da:96:9a:15:52:8f:bb:ea:ec:f2:9d:ed:da:d6:2f:
7b:f1:bb:30:f4:cd:75:d9:3f:c9:0b:c8:a3:db:4c:
1f:e1:c8:51:ee:a8:61:e3:5c:f1:c3:7f:5e:23:39:
f5:74:79:40:82:d1:08:49:7a:ae:0e:54:53:94:53:
a7:5d:15:28:52:32:80:30:ae:12:66:42:6d:e7:e8:
98:5c:89:47:6d:dd:d1:cf:43:6c:ab:db:4c:fc:e5:
ff:2b:f0:2c:98:13:31:16:16:41:93:6c:f8:b4:5a:
40:e0:7c:f9:b5:25:bc:23:a2:c1:6e:3b:c6:da:16:
35:f9:55:a9:20:45:fa:d5:01:d5:08:be:0e:49:d1:
57:df:bb:8e:33:5a:6c:a9:f7:d9:aa:6e:b2:b5:bd:
ed:75:00:2d:e4:63:9b:6d:a2:c6:ee:70:ad:31:fd:
70:d2:cf:fe:1b:00:24:01:1f:13:e8:bf:c7:32:52:
64:b9:fb:5e:39:2e:24:ff:30:74:b9:05:b5:9c:43:
43:71:b4:0f:54:37:a5:8c:cc:ff:ae:f9:c9:10:60:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F7:82:3C:C5:06:9B:53:E0:F6:5E:34:FC:16:86:67:48:C7:C6:4F
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5f:4c:92:dd:e4:36:72:39:2f:a4:99:21:7a:22:92:be:b8:
5e:ac:ae:56:86:82:ce:75:cb:b4:dc:ef:49:3d:9c:cb:f0:81:
15:f0:e1:b9:4c:69:f3:49:3e:8d:99:60:f9:7e:e3:78:b3:0e:
30:23:2b:01:aa:95:ca:83:d2:46:0b:b2:c2:8c:0d:28:dc:8d:
11:76:6a:cf:15:57:c3:80:d3:20:0c:c0:bf:a8:62:cb:97:7a:
32:9d:90:97:c6:0c:b9:2d:48:56:f6:3c:d2:49:e5:20:92:92:
ea:40:73:61:b1:76:ea:1d:4e:9a:55:df:fe:0e:9a:4f:a4:71:
2d:37:f4:48:4f:57:7e:1a:6d:9c:18:5f:10:f1:88:ae:b9:06:
c2:7e:da:b2:36:34:80:31:5d:2f:33:8e:90:ad:4d:7d:42:77:
ae:76:1f:f6:82:4c:a8:7b:09:c9:fe:dd:7f:e5:5b:4d:94:c9:
26:b3:d3:b2:4e:4f:ed:26:64:b1:14:13:f5:8f:4c:72:0b:bb:
e3:ce:e0:31:7c:f2:20:4a:98:8e:5f:c1:75:6e:91:63:f2:50:
7b:65:c2:a5:4c:3b:87:fe:3b:3f:a7:00:42:00:3b:69:79:8c:
bc:76:07:61:1f:84:da:7f:a3:12:b1:d5:44:80:01:bd:a9:93:
1c:78:3a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:52 2026 by rpki-client