Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json)
Hash identifier: MVyXLCKep+COqKW+qIOEPml6eNl4eltmtaJbmbQn2w4=
Subject key identifier: 08:5B:23:63:23:FC:CD:35:B3:15:C5:A9:08:64:86:73:7F:B3:12:EC
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 019D38D2BDCD33174F5865C909604DF90DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
Manifest number: 094F
Signing time: Sun 29 Mar 2026 09:00:28 +0000
Manifest this update: Sun 29 Mar 2026 09:00:28 +0000
Manifest next update: Mon 30 Mar 2026 09:00:28 +0000
Files and hashes: 1: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: h7lhdALwN7DO7FSuHWs0R1stCv0fj4SQ37NE5q1Ln/A=)
2: uRy6lNHq57rdX7_VPdepBDiNmnc.roa (hash: 65Rm9CIooU3CDnzNITl4VhD3i1B6DOi7f6KdO4ec990=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:bd:cd:33:17:4f:58:65:c9:09:60:4d:f9:0d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Mar 29 09:00:28 2026 GMT
Not After : Mar 30 09:00:28 2026 GMT
Subject: CN=085b236323fccd35b315c5a9086486737fb312ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:77:6a:f4:e2:41:17:b7:fd:06:45:83:2d:
77:f6:48:bb:e9:c3:f2:15:a5:73:f6:3a:03:d2:48:
75:d0:e0:d3:eb:64:8b:2f:d5:9f:48:46:59:de:52:
6f:eb:98:f8:2b:af:e6:a3:2f:4d:89:1f:a7:71:ff:
bd:ce:46:c3:83:3a:5c:e8:0c:b4:e2:9c:f2:15:32:
05:ed:fb:5f:c8:d2:be:02:7d:db:49:2d:60:5a:6e:
de:27:37:02:0b:19:be:55:40:f3:c3:a1:73:c0:71:
21:c1:74:19:93:36:0a:f6:c6:9c:f1:32:a1:b8:4f:
4b:1c:b1:18:c4:b2:8e:2d:a3:47:13:b5:33:49:75:
b7:7a:62:22:73:88:80:2a:bc:72:b9:55:3b:61:17:
80:59:33:9e:27:e8:08:a1:f4:18:d4:60:c2:66:87:
65:ff:18:2b:7d:e3:bb:2b:c3:43:03:56:45:bb:5e:
02:04:fa:6c:e3:34:c9:57:13:02:ca:f9:e3:01:47:
6e:ca:40:76:fe:d2:b2:7f:26:63:26:9d:2e:20:bb:
47:f2:49:65:57:32:23:1d:d1:6d:2d:fc:41:bf:01:
44:21:06:b8:55:75:6c:0b:3c:8b:7e:15:b3:97:f6:
fc:f3:fd:a1:fd:ba:5b:a0:95:cb:5c:7c:9b:37:14:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5B:23:63:23:FC:CD:35:B3:15:C5:A9:08:64:86:73:7F:B3:12:EC
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:40:8b:4c:a2:80:aa:37:dd:90:e7:04:f3:c7:ed:f1:cb:77:
a0:e8:cc:74:58:61:bc:8b:39:b1:86:d4:4e:14:dd:38:f5:32:
03:ba:f7:aa:aa:9c:6f:48:b2:5c:1e:05:bf:b5:7e:cd:37:50:
eb:22:2f:c5:22:e2:68:4d:cb:7c:31:7e:a9:85:fb:ee:3f:23:
74:5e:39:8d:44:a4:7c:73:23:11:ce:c1:15:f7:7d:40:5f:22:
a8:63:a0:42:77:85:3b:66:09:e5:8f:e6:ac:1e:d4:17:73:81:
fb:45:c1:7b:cb:1a:6e:5c:df:2c:e4:fa:63:fa:9a:f8:9f:dc:
d2:6c:7b:c2:55:f3:9d:7b:7a:0c:80:3b:97:a5:00:81:f7:76:
3e:2d:0e:20:2e:67:cd:9c:ca:f7:e1:00:30:6c:df:e7:5b:a1:
14:6f:32:24:2f:50:5c:a9:94:47:68:79:c7:97:e1:93:63:6a:
5c:c2:79:e0:82:91:f7:8c:4b:f3:ca:c9:1e:24:11:8f:64:aa:
ff:f9:da:2d:a3:67:bd:f1:ad:3c:db:26:31:b5:1a:63:2c:4d:
18:ae:ab:4c:2b:a2:57:ca:49:0e:c3:c2:e2:f3:cc:b5:c3:31:
79:3d:1c:c5:f5:4d:c5:c7:d0:38:6f:3d:1a:1a:a7:17:df:27:
1b:5c:89:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:11 2026 by rpki-client