Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier: iWU18yceoA1TLH2S3uzh8CGv/8tKuDp/GSGKN0OaCZE=
Subject key identifier: EC:81:36:69:A0:AC:41:37:20:05:27:E0:31:74:3E:B0:65:4D:C9:61
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 019F17FA02617CC173852F09A158BF5F7346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number: 0EF5
Signing time: Tue 30 Jun 2026 10:01:28 +0000
Manifest this update: Tue 30 Jun 2026 10:01:28 +0000
Manifest next update: Wed 01 Jul 2026 10:01:28 +0000
Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: KWTRKCyAPuHEkymBWxPJ8/Ewt0H/iKC2BfQ5QGqzYL0=)
2: GJT01x6wwyCftHtrWIvsmyjBIms.roa (hash: ASc7SzAK6h3bsHuxvUa3vat9chLP4lA8Av0u9oM1Qs4=)
3: Mw9HiEEZk3waBmzFCokJoCJYeHU.roa (hash: 6sGwg0qogzNM4BdNuwLNu3Z3ohroqmMT+szTSBMU2DE=)
4: X3mascigLmZbak7QiDBSbbs3vrA.roa (hash: IylgO/sA2hsrQIbGafFY3tsGMHKTB8LlFvuICdNIo44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:fa:02:61:7c:c1:73:85:2f:09:a1:58:bf:5f:73:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Jun 30 10:01:28 2026 GMT
Not After : Jul 1 10:01:28 2026 GMT
Subject: CN=ec813669a0ac4137200527e031743eb0654dc961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:c5:6c:64:1e:33:f8:ed:40:2d:21:ad:8d:
0f:92:3a:77:4b:e5:28:73:8b:c9:df:65:e5:15:ce:
65:40:98:6a:a8:62:1e:b6:64:fd:cd:0d:58:29:d3:
46:08:93:ab:0e:08:45:72:21:fd:d9:70:73:1c:cd:
e3:d9:b1:31:f7:db:50:1e:41:2e:06:3e:99:a4:08:
88:40:ee:7b:37:98:bd:d1:dc:37:10:93:e9:5c:a9:
c8:eb:5e:d8:77:06:68:f9:5b:c0:43:0f:60:36:d2:
21:84:ee:53:91:63:8e:5a:48:fe:73:42:04:e8:e0:
24:f7:a2:b0:4e:13:3c:a8:bd:fa:71:04:aa:83:b7:
e5:b4:09:d9:1d:f9:ff:9c:16:e0:13:81:1c:75:09:
67:25:3f:31:d1:00:fb:a1:00:07:16:40:a1:48:a0:
76:6b:c4:82:58:25:9e:6b:83:fb:52:5e:8e:19:a8:
dc:f7:8f:53:f9:a4:05:22:5e:3b:49:3e:48:3c:25:
3c:b3:54:ab:55:56:71:0b:8c:90:f1:56:18:4a:3a:
cb:3c:ae:d3:8d:33:6d:94:ad:f5:16:b7:e0:83:04:
14:13:22:74:5d:ee:a9:a5:93:3a:b3:52:24:7d:15:
c8:37:da:ba:31:4a:41:d0:24:3b:26:40:4c:b9:85:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:81:36:69:A0:AC:41:37:20:05:27:E0:31:74:3E:B0:65:4D:C9:61
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7b:c1:f7:8c:34:04:5e:3a:20:be:0c:bb:b0:ae:8b:86:08:
e2:a9:1a:44:dc:f3:bc:f8:41:34:fb:57:c3:85:3c:d2:3d:49:
3f:ae:5e:60:51:a6:b8:91:0c:bf:bf:82:bf:61:9a:54:66:26:
a5:29:d8:93:50:a8:24:db:51:08:3e:a5:88:ff:25:a7:57:c5:
62:cf:c0:14:b7:fa:81:be:f1:ee:53:ec:dc:d2:a5:77:fe:72:
3c:12:8b:f7:e1:67:46:9b:0a:3f:c2:c0:d5:bc:84:50:43:07:
bc:6d:c1:8b:67:2c:7a:90:71:7b:04:34:5d:f5:84:6f:dc:2d:
4a:3a:de:fe:b4:49:fb:fd:06:41:57:55:bc:27:6d:b0:54:3e:
33:c5:0f:74:b0:c5:7c:85:f3:82:51:0e:c7:98:d6:98:a2:75:
04:49:53:ad:d1:42:ab:ca:f2:37:56:24:45:5f:cf:31:a5:46:
78:37:9e:c2:0f:dc:61:80:26:83:b0:f0:54:f1:0d:09:74:fb:
9c:39:a7:e7:e6:64:07:11:da:10:30:78:9a:82:61:38:7b:17:
20:5e:78:a1:22:a5:48:5f:5d:0f:fe:cf:d9:0e:4a:96:a4:58:
b6:ff:a5:32:1d:a0:0f:6a:61:43:8f:33:48:32:98:b7:33:eb:
3f:c1:6f:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+gJhfMFzhS8JoVi/X3NGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZDg1YzQ3ZDBiN2Q2ZGM1ZGRkYTA4NTcyYjY0NTRjMTA1
OTUxMmMwHhcNMjYwNjMwMTAwMTI4WhcNMjYwNzAxMTAwMTI4WjAzMTEwLwYDVQQD
EyhlYzgxMzY2OWEwYWM0MTM3MjAwNTI3ZTAzMTc0M2ViMDY1NGRjOTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFDFbGQeM/jtQC0hrY0Pkjp3S+Uo
c4vJ32XlFc5lQJhqqGIetmT9zQ1YKdNGCJOrDghFciH92XBzHM3j2bEx99tQHkEu
Bj6ZpAiIQO57N5i90dw3EJPpXKnI617YdwZo+VvAQw9gNtIhhO5TkWOOWkj+c0IE
6OAk96KwThM8qL36cQSqg7fltAnZHfn/nBbgE4EcdQlnJT8x0QD7oQAHFkChSKB2
a8SCWCWea4P7Ul6OGajc949T+aQFIl47ST5IPCU8s1SrVVZxC4yQ8VYYSjrLPK7T
jTNtlK31FrfggwQUEyJ0Xe6ppZM6s1IkfRXIN9q6MUpB0CQ7JkBMuYWdMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyBNmmgrEE3IAUn4DF0PrBlTclhMB8GA1UdIwQY
MBaAFPPYXEfQt9bcXd2ghXK2RUwQWVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTct
NTIxMmRiOTc1NGY0LzEvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTctNTIxMmRiOTc1NGY0
LzEvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHvB94w0
BF46IL4Mu7Cui4YI4qkaRNzzvPhBNPtXw4U80j1JP65eYFGmuJEMv7+Cv2GaVGYm
pSnYk1CoJNtRCD6liP8lp1fFYs/AFLf6gb7x7lPs3NKld/5yPBKL9+FnRpsKP8LA
1byEUEMHvG3Bi2csepBxewQ0XfWEb9wtSjre/rRJ+/0GQVdVvCdtsFQ+M8UPdLDF
fIXzglEOx5jWmKJ1BElTrdFCq8ryN1YkRV/PMaVGeDeewg/cYYAmg7DwVPENCXT7
nDmn5+ZkBxHaEDB4moJhOHsXIF54oSKlSF9dD/7P2Q5KlqRYtv+lMh2gD2phQ48z
SDKYtzPrP8Fv2w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:13 2026 by rpki-client