Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
File: 89KYmJtPzgv8PBec7_anqgxN8Qc.mft (raw, json)
Hash identifier: 7r1hL+5ytLC/plY5kkVzCW49h8ow2xHH9dghjxGBI50=
Subject key identifier: 3D:6C:21:27:76:96:41:43:9D:F3:76:31:A9:8D:28:28:DA:65:08:E8
Authority key identifier: F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
Certificate issuer: /CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Certificate serial: 01A06D947CED205FE7E04D2540A5671BD470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
Manifest number: 01B7
Signing time: Fri 04 Sep 2026 18:00:42 +0000
Manifest this update: Fri 04 Sep 2026 18:00:42 +0000
Manifest next update: Sat 05 Sep 2026 18:00:42 +0000
Files and hashes: 1: 89KYmJtPzgv8PBec7_anqgxN8Qc.crl (hash: SzLRORX/ZR54kwsFynhtf9YsN3SYeFRbWwIkxX0lUjM=)
2: NjhjTKawIenVH3d-r5iLAxjav8U.roa (hash: SUgTiVzn0C0dt/13Npi6OivpMeE/2hH0/DP1jgqxSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:7c:ed:20:5f:e7:e0:4d:25:40:a5:67:1b:d4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Validity
Not Before: Sep 4 18:00:42 2026 GMT
Not After : Sep 5 18:00:42 2026 GMT
Subject: CN=3d6c2127769641439df37631a98d2828da6508e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:7d:f8:50:9c:47:6c:e9:26:2f:a2:e9:49:
93:d3:28:ce:73:2e:19:79:53:54:43:83:c7:d3:2c:
5a:56:7c:51:c0:9a:74:20:4a:4f:8d:df:9f:67:a1:
f3:73:f2:11:ae:7b:7a:e8:59:24:f0:a8:71:f4:1f:
b8:cb:ad:86:c7:68:98:98:55:05:1b:97:d6:f2:ea:
0e:b1:40:24:a1:b4:a4:12:c1:a0:b5:9c:ff:d3:f0:
0a:1a:3b:a9:0e:d1:8f:2b:6d:91:6a:b6:a8:8d:9d:
39:03:5d:21:dd:0d:e8:22:d0:a9:46:3b:97:58:18:
3c:c9:d9:a9:9f:62:f2:7c:0d:fd:6c:3a:3b:1e:14:
e0:c2:40:5a:52:9b:dc:e1:6a:20:74:cf:90:64:a9:
01:85:cb:bc:35:11:61:69:eb:d0:2d:26:7c:fb:28:
04:c8:16:95:20:d2:d2:5c:3b:6f:01:32:4f:61:06:
8a:d7:f0:72:fe:67:88:8b:15:b1:da:ca:eb:92:21:
54:71:37:37:08:d6:4a:82:8d:02:bc:e0:69:ec:f9:
b2:a4:c1:d7:2e:ea:b4:6e:eb:82:6f:a2:94:04:5f:
28:39:eb:a0:a5:29:16:52:1c:bf:90:4e:f1:2a:9d:
0f:a0:df:fe:7c:10:da:7c:fa:28:07:66:92:52:af:
a8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6C:21:27:76:96:41:43:9D:F3:76:31:A9:8D:28:28:DA:65:08:E8
X509v3 Authority Key Identifier:
keyid:F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ce:9f:4e:4f:dc:72:94:66:a9:53:84:07:9e:e2:36:28:68:
8b:61:0a:9a:22:a5:e2:4a:fc:03:0f:05:d0:0c:82:7b:06:5a:
7a:d6:ed:f1:0e:3e:a8:22:a9:65:2f:ab:92:d5:56:73:8e:26:
eb:c1:cd:94:de:aa:e9:ea:16:25:86:28:5f:3e:52:30:13:1d:
51:70:84:7d:57:a6:0b:9d:41:9e:2b:37:39:e5:d6:ee:7e:c4:
8e:5b:fb:8c:04:65:fd:5b:b7:06:36:33:93:34:c3:8c:7d:85:
04:e8:59:82:93:bc:ea:68:da:ca:ac:2a:e5:9a:da:3f:42:02:
8d:d7:f3:c0:7f:c3:22:8a:28:f7:f1:2e:bd:6d:32:95:21:b5:
9b:aa:f0:09:3e:79:d0:a2:e9:12:0a:4f:2d:90:13:8c:1d:17:
76:36:db:6e:b7:50:df:ba:2c:cb:fb:a5:84:64:6f:c7:4f:15:
bb:37:8f:b8:57:9d:5e:5d:28:a7:87:6c:ef:b2:5e:70:9e:28:
ea:11:79:1a:cb:9e:9b:1c:d2:12:6d:82:cd:ad:7a:ab:d4:94:
92:10:c8:ce:89:ab:f0:b1:9c:f9:8e:17:18:ef:aa:c4:48:ab:
48:92:7d:83:14:1c:a4:50:2d:e1:bc:dd:4a:31:20:de:d7:9e:
10:8a:6c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:58:06 2026 by rpki-client