Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: JwG2My3s3pL/+l2NZsR4ceZIYzppqZD55pYbOZfMmk4=
Subject key identifier: E2:E9:6B:4A:90:ED:79:B3:9F:B5:D5:18:AE:6B:84:B9:BB:D4:CB:32
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 019D2D3CA982551E55EEC9C08E2CC04ABDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 188D
Signing time: Fri 27 Mar 2026 03:00:43 +0000
Manifest this update: Fri 27 Mar 2026 03:00:43 +0000
Manifest next update: Sat 28 Mar 2026 03:00:43 +0000
Files and hashes: 1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: RmYF5kbpCJtchYv8zrqqCaUHA2N055ib7VJ9HjKCSGA=)
2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:3c:a9:82:55:1e:55:ee:c9:c0:8e:2c:c0:4a:bd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Mar 27 03:00:43 2026 GMT
Not After : Mar 28 03:00:43 2026 GMT
Subject: CN=e2e96b4a90ed79b39fb5d518ae6b84b9bbd4cb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:62:c6:2d:82:7e:4d:22:8a:b9:fd:93:02:
e5:1a:85:75:33:dc:3e:c0:a1:25:b0:d3:29:82:e0:
55:61:cd:83:bf:2b:34:56:f1:90:d7:a2:50:8b:b4:
cb:6a:a0:1c:c6:01:82:32:6f:7f:69:b0:b3:08:9b:
d6:cf:1f:84:ee:c1:5d:b1:8a:17:4e:81:31:b2:06:
72:bc:08:cc:ac:86:74:a1:f7:af:54:ab:1e:47:bf:
a3:f4:c3:c3:39:ce:a5:bd:dc:be:eb:19:90:8b:f3:
9a:fd:18:c3:09:00:d6:2a:1a:97:27:3c:3e:db:c6:
5a:6a:47:08:6c:39:61:8a:02:2d:59:f3:94:de:92:
55:b0:35:c5:6b:10:63:aa:d4:69:f2:be:51:49:80:
1f:86:e6:18:56:2d:96:cb:00:99:03:77:55:7b:00:
41:6d:71:bb:b5:76:6a:91:c4:04:21:a3:03:ac:04:
14:ff:ff:3f:ca:d2:0c:d0:ce:03:1e:35:a3:64:b2:
f8:2c:be:58:f6:97:43:d3:08:a7:26:b2:99:90:76:
ce:10:c4:60:52:46:4e:3a:69:5c:1f:a6:c7:c7:a0:
de:ce:2c:96:70:96:f0:ee:94:fe:07:7f:c9:d4:a8:
eb:26:cb:ba:1e:3b:0b:00:64:85:19:4f:eb:3c:06:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E9:6B:4A:90:ED:79:B3:9F:B5:D5:18:AE:6B:84:B9:BB:D4:CB:32
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d0:d8:59:d2:87:68:60:8b:d2:a5:4f:23:dd:6b:c3:a7:53:
70:f0:e3:e8:ae:31:ca:99:ea:64:7c:50:c8:cd:fb:8c:e6:62:
e9:43:8a:43:df:95:02:8e:b0:f4:38:86:38:e7:0c:64:02:91:
79:cc:6b:8c:46:bd:41:7c:2f:5f:77:b4:81:62:ad:d4:30:5d:
36:ac:3e:c7:55:a9:08:62:61:ae:8e:17:db:56:c3:a4:fb:dc:
e6:95:8b:91:5a:96:d5:71:ef:56:f7:1b:74:eb:04:d3:cd:ba:
03:d4:7a:ae:2f:a9:fb:81:4d:09:d9:91:2e:1d:d6:40:b4:a9:
c8:17:8a:63:b0:c4:76:e5:0b:56:11:cd:42:29:38:2c:a8:88:
0e:0c:22:38:88:56:c7:b9:d0:06:ab:d8:5f:6b:2f:52:f5:6c:
70:75:d4:7e:d2:40:8e:7e:97:ab:36:8e:01:4d:53:1f:a6:ee:
ea:25:19:9e:64:f4:4e:02:68:f9:f1:45:35:be:b9:7e:8c:19:
2e:28:4a:a7:78:a8:55:c0:64:ce:1c:bd:40:df:14:73:f1:86:
39:3b:cc:b3:64:fd:db:0e:a5:b6:c4:e3:61:7c:1e:7d:e0:73:
99:3f:9e:4b:49:ce:dd:40:44:a3:9e:94:7b:63:f3:38:1d:69:
7a:11:7f:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0tPKmCVR5V7snAjizASr37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZDQ5NGI4YjI3MWFmYjdjNjJmMTM5N2Y3MTJjZjJkY2Qz
NjQxODUwHhcNMjYwMzI3MDMwMDQzWhcNMjYwMzI4MDMwMDQzWjAzMTEwLwYDVQQD
EyhlMmU5NmI0YTkwZWQ3OWIzOWZiNWQ1MThhZTZiODRiOWJiZDRjYjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnFixi2Cfk0iirn9kwLlGoV1M9w+
wKElsNMpguBVYc2Dvys0VvGQ16JQi7TLaqAcxgGCMm9/abCzCJvWzx+E7sFdsYoX
ToExsgZyvAjMrIZ0ofevVKseR7+j9MPDOc6lvdy+6xmQi/Oa/RjDCQDWKhqXJzw+
28ZaakcIbDlhigItWfOU3pJVsDXFaxBjqtRp8r5RSYAfhuYYVi2WywCZA3dVewBB
bXG7tXZqkcQEIaMDrAQU//8/ytIM0M4DHjWjZLL4LL5Y9pdD0winJrKZkHbOEMRg
UkZOOmlcH6bHx6DeziyWcJbw7pT+B3/J1KjrJsu6HjsLAGSFGU/rPAat9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLpa0qQ7Xmzn7XVGK5rhLm71MsyMB8GA1UdIwQY
MBaAFPPUlLiyca+3xi8Tl/cSzy3NNkGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2Mt
Zjc5YWQ4MTIyZWY1LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2MtZjc5YWQ4MTIyZWY1
LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINDYWdKH
aGCL0qVPI91rw6dTcPDj6K4xypnqZHxQyM37jOZi6UOKQ9+VAo6w9DiGOOcMZAKR
ecxrjEa9QXwvX3e0gWKt1DBdNqw+x1WpCGJhro4X21bDpPvc5pWLkVqW1XHvVvcb
dOsE0826A9R6ri+p+4FNCdmRLh3WQLSpyBeKY7DEduULVhHNQik4LKiIDgwiOIhW
x7nQBqvYX2svUvVscHXUftJAjn6XqzaOAU1TH6bu6iUZnmT0TgJo+fFFNb65fowZ
LihKp3ioVcBkzhy9QN8Uc/GGOTvMs2T92w6ltsTjYXwefeBzmT+eS0nO3UBEo56U
e2PzOB1pehF/Pg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 13:57:37 2026 by rpki-client