
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: nc6b1kBYvESuyft+NjrUuLkWdhpCJeKqEc0MHbHN/8c=
Subject key identifier: 65:16:1C:EC:62:87:60:FC:0D:0A:F7:99:4A:F1:D5:E6:97:A2:DA:38
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 019E2C276681B0E512755827B69906DA36CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 1911
Signing time: Fri 15 May 2026 15:00:39 +0000
Manifest this update: Fri 15 May 2026 15:00:39 +0000
Manifest next update: Sat 16 May 2026 15:00:39 +0000
Files and hashes: 1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: nAGB7TuCGhWftLHN9SUIeJ1l4oIBTjQlnQnvIOYFvyI=)
2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:27:66:81:b0:e5:12:75:58:27:b6:99:06:da:36:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: May 15 15:00:39 2026 GMT
Not After : May 16 15:00:39 2026 GMT
Subject: CN=65161cec628760fc0d0af7994af1d5e697a2da38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:00:01:89:d4:1d:c7:a8:90:38:8f:a7:44:
dd:6f:e2:54:5b:bd:df:c7:04:3c:e7:e3:39:f2:24:
a0:25:9d:4f:b2:1a:8d:98:37:3e:91:08:97:05:9e:
70:6e:45:60:65:c8:60:7d:5c:17:e3:36:1d:a4:d2:
48:42:c5:82:14:20:e1:02:d2:3e:8e:8f:ae:27:39:
83:97:34:c5:c7:8b:36:92:2c:af:b3:a2:b0:cc:b1:
00:ef:a7:14:ff:8a:6c:9b:5a:e4:06:6f:98:d7:01:
44:77:3b:e3:16:fc:63:b1:5e:8b:7d:6b:1a:16:3c:
e8:31:14:c5:79:32:48:16:84:35:fa:d6:2a:e8:8c:
41:12:3e:0c:c2:e9:a0:b8:2d:b2:c9:21:55:81:13:
c7:6e:17:b2:92:e8:77:75:a6:86:4e:6d:df:40:96:
f9:09:cb:ee:bf:39:96:4e:4e:5e:40:f7:8c:56:68:
11:6a:4d:48:05:6e:61:0d:a1:a7:4c:e5:63:ff:ee:
f3:b9:0a:fa:15:14:19:30:29:85:72:76:b6:65:3d:
b1:e2:20:06:ff:da:99:0a:68:e9:2b:80:78:8d:ea:
cd:89:27:dc:41:cf:01:c6:39:42:56:e4:9d:91:2c:
66:07:9a:73:e0:7a:f4:9c:8c:b8:fe:0d:fe:4d:e6:
cd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:1C:EC:62:87:60:FC:0D:0A:F7:99:4A:F1:D5:E6:97:A2:DA:38
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ee:57:43:76:0d:99:68:84:7a:f1:aa:22:1b:b8:ae:76:19:
39:26:d4:62:91:60:8c:ae:c2:5a:8a:af:d6:7b:ae:0d:be:f1:
17:4b:ac:51:01:48:5a:f4:06:70:38:34:47:73:d3:90:9c:36:
75:61:8f:40:92:24:71:dc:a2:4c:4d:27:a4:8d:ae:c5:89:42:
a6:21:ea:51:4e:8e:84:08:65:1d:87:13:dd:15:94:80:5b:2e:
0b:08:c3:7b:97:df:98:d2:a2:df:19:ef:cd:6a:d8:79:18:05:
e0:ec:2e:3b:31:0d:08:c1:55:d5:6e:e4:57:58:27:54:68:ae:
ec:07:23:d3:c6:15:1a:3e:d0:8f:6f:7a:c4:e1:c1:77:2a:cd:
60:90:ff:c6:41:9b:d6:c9:98:ac:9a:05:f2:58:2d:b7:2f:a7:
7f:13:f9:38:fb:2e:a3:13:86:12:3c:2f:c3:e2:56:68:f0:f6:
24:f3:83:3e:f2:5e:a5:dc:59:2f:bd:58:f7:37:ce:b9:0b:3e:
ee:62:bc:52:93:49:27:3a:59:7f:3d:8f:b4:81:b0:dd:27:7d:
a8:b7:15:f5:82:7e:92:e8:47:40:05:ba:94:0b:19:e9:a0:9c:
40:91:21:fb:55:39:d8:52:78:c8:15:3b:cb:dc:05:a3:50:cd:
68:91:8c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 23:08:08 2026 by rpki-client