Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: 3NZ7NbL0m+IM28lm6+/OIqoiuVC52AXKtq+xNUzvpkY=
Subject key identifier: DF:B6:A2:A8:C7:A0:18:85:EA:AD:CD:1C:41:3B:4C:2D:A6:7D:B4:15
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 019F17C2929772FF0ADC01956BD29BF5952A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 09:00:55 +0000
Manifest this update: Tue 30 Jun 2026 09:00:55 +0000
Manifest next update: Wed 01 Jul 2026 09:00:55 +0000
Files and hashes: 1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: vFVWKYfSrMpWYVQdfqp7T5XJb1wrB+G73IaV0i0Z/6s=)
2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:92:97:72:ff:0a:dc:01:95:6b:d2:9b:f5:95:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Jun 30 09:00:55 2026 GMT
Not After : Jul 1 09:00:55 2026 GMT
Subject: CN=dfb6a2a8c7a01885eaadcd1c413b4c2da67db415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b1:cf:f7:2b:82:82:a7:f4:25:1d:7c:66:84:
55:8a:52:90:ff:61:71:51:22:e8:ee:cd:72:d2:a3:
46:2d:e7:1f:e0:10:98:20:cf:a2:e4:df:da:56:14:
84:18:97:f5:fa:80:ce:22:2f:56:1f:ac:3b:1a:2a:
96:6a:68:6a:68:dc:a7:98:4f:c0:4f:ed:42:6c:ff:
b4:9f:0a:47:30:28:75:31:c8:40:bf:e4:03:f9:13:
a3:5e:4e:d0:50:c4:84:d0:03:e1:e3:42:80:d8:e6:
3b:90:d5:73:77:2c:41:e9:68:ac:3e:6e:c4:d3:65:
7f:85:76:b5:c7:cb:f4:d1:ba:9e:d4:80:79:38:9f:
2e:00:c7:7c:58:6b:41:ec:ce:fd:31:cf:1d:c9:78:
f2:61:b2:33:f3:6d:86:28:77:9d:12:78:4c:1e:1a:
14:80:82:79:fe:77:2a:a0:8e:1f:12:9a:99:74:21:
2f:f5:03:98:49:bc:4e:e1:cc:5f:ff:12:21:0e:78:
f0:7b:e7:9d:6e:97:1d:17:7e:1b:aa:c4:75:33:95:
48:7b:7d:9c:92:09:00:1f:c3:e7:a1:d3:41:24:c7:
f9:08:e6:11:eb:44:b4:9b:aa:da:66:88:09:c1:ab:
92:cd:57:ec:66:96:fb:ee:a7:0d:cc:d5:3f:10:0e:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B6:A2:A8:C7:A0:18:85:EA:AD:CD:1C:41:3B:4C:2D:A6:7D:B4:15
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:41:49:a8:ad:6e:2e:72:d4:06:47:48:00:2e:d6:b9:fe:ac:
3d:4e:7a:4e:17:c2:4a:d3:44:a2:57:82:91:2c:de:a1:c6:c5:
28:97:ca:43:0f:dd:b3:53:e8:66:84:e0:9f:cd:61:d0:6e:af:
02:db:32:67:f7:95:d8:a0:33:2f:49:4f:4b:f5:02:a4:7c:8a:
a8:20:5c:5f:74:65:2f:23:27:0e:cc:23:fd:ff:e5:1c:1e:92:
06:46:dd:2e:9a:e8:eb:d4:9e:8c:83:b2:f0:c3:3e:62:76:3e:
7a:eb:85:c3:d4:b8:c2:93:b2:f6:04:f8:52:37:e9:10:e4:fc:
71:03:74:8f:28:99:57:ea:36:a6:50:0e:0b:45:e4:be:75:5a:
86:3b:63:64:3a:d2:58:d3:1d:40:33:b1:0b:3e:a5:6f:ec:a8:
5e:b9:90:96:5d:bd:e2:95:45:0e:cb:ff:3e:c1:a7:a0:04:28:
78:bb:fc:ec:55:96:4f:a4:99:58:f5:51:30:72:f4:75:f9:0d:
cd:53:9a:64:8b:2d:82:a3:ac:30:5a:b5:22:7a:13:2e:bb:46:
97:5b:2f:0a:6d:4c:93:20:39:15:78:3f:56:cc:54:a0:d8:73:
c9:83:47:cf:c2:20:4f:28:84:ac:36:79:5e:2b:5f:d7:76:80:
dd:f0:77:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:45 2026 by rpki-client