Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
File: 89KYmJtPzgv8PBec7_anqgxN8Qc.mft (raw, json)
Hash identifier: dmQt4Vv9hjBM2k/Iqv2xN9qtzLzxWmqv+ucTUm+5fBI=
Subject key identifier: F4:9B:ED:3A:9E:21:7D:69:9C:AD:FB:61:FC:74:CB:F8:60:6C:59:FA
Authority key identifier: F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
Certificate issuer: /CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Certificate serial: 019D38D3B8CBF5559CF75DC7BF7703AE4A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
Manifest number: 0E
Signing time: Sun 29 Mar 2026 09:01:32 +0000
Manifest this update: Sun 29 Mar 2026 09:01:32 +0000
Manifest next update: Mon 30 Mar 2026 09:01:32 +0000
Files and hashes: 1: 89KYmJtPzgv8PBec7_anqgxN8Qc.crl (hash: nySW16yl9PQK6YYf6d0rtaUtX+ZZfThm7R9FaEjk5m4=)
2: NjhjTKawIenVH3d-r5iLAxjav8U.roa (hash: SUgTiVzn0C0dt/13Npi6OivpMeE/2hH0/DP1jgqxSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b8:cb:f5:55:9c:f7:5d:c7:bf:77:03:ae:4a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Validity
Not Before: Mar 29 09:01:32 2026 GMT
Not After : Mar 30 09:01:32 2026 GMT
Subject: CN=f49bed3a9e217d699cadfb61fc74cbf8606c59fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:56:a3:f2:c5:79:ee:84:c1:63:bb:4e:63:
76:d8:cd:96:dd:93:b4:0e:82:c2:f0:97:07:4b:28:
fd:c4:51:98:42:af:3f:40:b1:7a:d6:b1:b3:7d:47:
ec:f7:65:04:8b:a0:69:18:94:0c:46:97:07:21:ab:
38:88:56:b1:0a:15:03:4f:67:d5:1e:8c:8c:c4:79:
e9:85:00:fb:64:67:4e:5f:36:24:c8:b5:dc:78:73:
50:c5:4f:7b:2c:72:27:e5:de:b2:3e:ea:03:2e:96:
9b:26:13:ef:48:23:77:11:6c:9b:e8:7d:fe:e0:a2:
bd:6e:bd:7b:fa:84:66:38:3a:d2:5f:0b:6d:10:88:
72:62:37:22:4d:17:0d:4d:cf:4f:89:fe:3a:d0:7d:
f7:e3:39:73:88:d6:c9:ef:8c:b3:68:95:25:12:bb:
58:24:01:90:b4:8b:0b:4f:07:a4:27:1c:01:30:cc:
44:15:2d:38:48:90:51:35:53:c4:56:45:e3:8b:ec:
4a:ab:87:62:e8:61:c7:ed:27:6d:51:e0:fc:39:a8:
a0:86:e6:f2:0e:12:db:ea:6f:e0:99:fc:3f:55:5e:
f8:ee:f5:8a:b2:c3:12:f4:5c:53:4e:00:8e:8d:e3:
00:85:1b:d2:61:d7:47:1e:fd:12:9b:17:6d:ce:ea:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9B:ED:3A:9E:21:7D:69:9C:AD:FB:61:FC:74:CB:F8:60:6C:59:FA
X509v3 Authority Key Identifier:
keyid:F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f4:bb:08:63:02:b9:7e:84:02:4a:74:9c:41:22:22:24:99:
74:12:c6:54:a5:b7:64:41:c8:31:4a:90:79:f5:c8:73:c9:89:
ba:15:da:17:cf:92:c8:4f:3a:76:c9:27:14:8f:68:7d:e7:f1:
b3:bf:69:7c:aa:7b:cc:3a:6c:f4:50:be:d9:3c:ed:bb:32:03:
c0:f1:04:40:e5:89:6a:8b:b6:78:e4:6e:83:6b:9f:b9:89:07:
65:42:25:b6:f8:c0:7d:b6:cb:e6:21:84:6b:46:ff:71:0f:a6:
74:76:f5:da:94:cf:43:3c:49:a3:29:35:91:a4:f8:9a:25:1e:
e0:99:85:ea:59:a4:b3:bb:94:66:51:4b:11:c2:51:50:8b:e9:
80:f9:32:50:b4:b9:8f:0a:d9:8c:21:96:b4:f1:32:b0:61:14:
19:1f:bd:17:08:6b:42:84:cf:08:1c:7c:35:74:70:93:4e:06:
cc:73:93:06:fb:19:7b:96:67:12:8c:90:4d:10:2a:51:de:02:
0f:9b:05:63:f7:0e:d4:19:bb:a1:34:ea:5d:51:37:e9:fd:43:
f9:17:e1:a4:ce:09:3d:5d:07:40:2d:ea:9b:7a:17:04:61:b5:
77:76:03:43:15:aa:0b:36:f7:59:45:d6:f5:b0:9c:bd:37:9b:
d9:38:81:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:56 2026 by rpki-client