Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier: zlK/5ejNlQbPwqkADD4QlBnzPUi48HiBp8xDF9cae28=
Subject key identifier: CC:7A:61:46:B2:84:D5:2B:45:8A:00:FE:D9:BC:39:B6:6C:51:6D:23
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 019D371B2571DB867F13D3A31BC2779C95CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number: 0DFC
Signing time: Sun 29 Mar 2026 01:00:19 +0000
Manifest this update: Sun 29 Mar 2026 01:00:19 +0000
Manifest next update: Mon 30 Mar 2026 01:00:19 +0000
Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: f2L6YS68byysvPmqioMEP3HQZ3sZ8b35DOsixheD4CE=)
2: GJT01x6wwyCftHtrWIvsmyjBIms.roa (hash: ASc7SzAK6h3bsHuxvUa3vat9chLP4lA8Av0u9oM1Qs4=)
3: Mw9HiEEZk3waBmzFCokJoCJYeHU.roa (hash: 6sGwg0qogzNM4BdNuwLNu3Z3ohroqmMT+szTSBMU2DE=)
4: X3mascigLmZbak7QiDBSbbs3vrA.roa (hash: IylgO/sA2hsrQIbGafFY3tsGMHKTB8LlFvuICdNIo44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:25:71:db:86:7f:13:d3:a3:1b:c2:77:9c:95:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Mar 29 01:00:19 2026 GMT
Not After : Mar 30 01:00:19 2026 GMT
Subject: CN=cc7a6146b284d52b458a00fed9bc39b66c516d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:e8:10:23:52:d3:f6:29:bd:bc:b9:63:54:
0e:cc:15:69:cf:87:1c:37:ca:d2:8c:6b:aa:79:35:
ec:5e:10:47:83:96:69:2a:a2:20:af:be:ce:48:4c:
40:45:b9:ad:db:a9:05:67:b2:26:3f:a6:ac:e6:37:
a3:e8:ac:a3:85:83:8d:02:78:83:81:52:8b:bb:f0:
81:73:d0:0e:3d:ba:48:fa:bb:f1:71:39:d6:f7:49:
38:aa:d4:50:7d:5d:2d:53:8a:91:b3:e1:56:b3:66:
46:7a:d7:5d:f3:ce:e1:ca:a4:2d:04:30:7a:b9:06:
68:88:c4:80:d8:f9:a6:ae:aa:05:b6:80:d3:9b:fe:
95:b7:ab:0a:00:bd:1d:92:a8:57:5f:c0:97:b9:56:
b5:71:2a:ea:db:dc:dd:cd:6f:25:44:fc:fe:48:e9:
5e:ff:23:97:96:4f:b5:25:01:d6:16:05:ab:2d:57:
d9:f1:a1:6a:91:e6:46:8c:dd:a3:5d:0e:67:6a:7b:
22:4d:33:ae:11:8b:cc:cf:09:39:c2:44:8b:d1:83:
ba:53:68:63:7c:ff:21:28:2d:db:2e:c2:df:16:69:
06:86:e0:bc:b8:10:cc:ce:14:4a:d0:ad:ca:67:fd:
35:f4:08:e9:b1:07:21:b9:ec:be:ad:15:59:3f:ce:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7A:61:46:B2:84:D5:2B:45:8A:00:FE:D9:BC:39:B6:6C:51:6D:23
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d0:4a:c9:f6:2d:c0:88:d5:30:ca:97:63:8e:e1:86:e8:63:
bd:25:57:e0:53:0d:62:16:2b:c3:dc:31:02:99:b5:a2:f4:82:
db:6f:0e:3d:2f:35:d8:6d:a8:fc:b4:7b:fa:17:9b:f5:05:ee:
62:6c:02:13:38:62:85:16:d6:50:53:a1:cf:92:51:20:ab:39:
a9:7e:85:4b:1d:8e:07:56:e1:44:f5:34:c0:65:59:7b:5c:c3:
3e:16:47:90:86:67:83:45:d4:45:52:5e:f5:2e:8e:13:fc:e1:
b9:69:69:e1:75:6e:9b:49:4f:23:c3:78:be:c2:ce:0d:4d:44:
b2:8d:63:0f:a0:d7:d2:fb:9a:5e:bd:a5:d8:25:59:43:f0:82:
be:4e:17:ea:d4:da:a1:97:33:e1:c4:e7:0d:f6:72:f8:b8:01:
b2:c5:4a:db:53:fb:e3:2a:99:dc:6c:c4:87:7b:95:75:4e:26:
d5:27:fe:17:23:4e:cb:33:60:cc:26:42:7c:27:0f:25:1f:c0:
d1:fc:8a:d7:91:30:a4:b5:66:cb:d4:60:eb:9f:0c:01:6a:e6:
12:22:e6:97:b7:3b:5c:80:90:d3:dc:44:26:a4:e3:51:ff:96:
d6:2e:ae:b2:30:dd:46:08:97:fd:63:75:bc:8c:74:ff:8e:ff:
f7:13:24:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:22 2026 by rpki-client