Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
File: 89KYmJtPzgv8PBec7_anqgxN8Qc.mft (raw, json)
Hash identifier: zj39rkcs11bntH4Ru3ajsMXO/WbzM3/vr1UHvsJEufU=
Subject key identifier: C5:92:F1:69:14:1C:B6:04:6B:BB:22:42:9B:55:52:3E:B3:4A:84:A2
Authority key identifier: F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
Certificate issuer: /CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Certificate serial: 01A16C7F7822286C80A7F1B81F3C2ABE4835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
Manifest number: 023B
Signing time: Sat 24 Oct 2026 06:00:55 +0000
Manifest this update: Sat 24 Oct 2026 06:00:55 +0000
Manifest next update: Sun 25 Oct 2026 06:00:55 +0000
Files and hashes: 1: 89KYmJtPzgv8PBec7_anqgxN8Qc.crl (hash: IGOqfV2WGA/Gq/7hqIZzoslw55DkqYhH5r121z+km38=)
2: NjhjTKawIenVH3d-r5iLAxjav8U.roa (hash: SUgTiVzn0C0dt/13Npi6OivpMeE/2hH0/DP1jgqxSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:7f:78:22:28:6c:80:a7:f1:b8:1f:3c:2a:be:48:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Validity
Not Before: Oct 24 06:00:55 2026 GMT
Not After : Oct 25 06:00:55 2026 GMT
Subject: CN=c592f169141cb6046bbb22429b55523eb34a84a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:53:f2:a3:25:4a:f0:2c:c5:c4:76:90:90:
e0:e0:df:a7:aa:e4:a9:95:bd:40:ce:e5:96:04:31:
58:8c:56:62:30:a2:61:2b:d9:b9:74:f1:92:3d:2a:
07:8c:91:35:53:26:33:ec:79:a2:9a:71:af:37:94:
c8:87:e1:32:bb:07:b0:35:8c:84:d9:f6:c0:6d:32:
f8:b2:5b:fc:13:54:73:78:32:7f:41:7c:a1:24:7c:
58:ff:48:9a:6a:b0:ad:f6:7c:fb:fc:8a:25:e0:d5:
57:d4:1a:1b:7f:cc:2b:d5:46:4f:61:be:ee:a8:e7:
f7:d3:7e:ee:46:88:ea:20:a9:b4:f3:71:f9:49:cb:
43:40:4a:f8:da:09:04:ba:d1:ac:c1:e4:0f:b7:dc:
2d:e6:57:64:67:d8:a2:16:ef:89:aa:9a:ab:87:06:
1f:2d:7a:29:23:76:aa:52:48:f0:28:08:64:9d:a4:
de:2b:8c:b5:df:45:a8:65:0e:fa:d8:85:ef:df:a7:
88:c2:dd:8a:91:73:72:99:a8:4a:6e:8d:35:f1:a6:
67:c6:a9:31:5c:ac:3e:d9:2f:41:9e:e9:37:f7:9d:
90:6f:94:d2:2a:f1:57:83:a3:b2:61:dd:5f:67:b0:
72:c6:0b:40:4f:09:6e:3b:6d:c7:15:83:f4:65:ab:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:92:F1:69:14:1C:B6:04:6B:BB:22:42:9B:55:52:3E:B3:4A:84:A2
X509v3 Authority Key Identifier:
keyid:F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e3:77:4f:37:b5:70:68:b8:95:e6:e4:8a:e3:fa:79:2e:d8:
7d:78:11:a3:ad:0d:b5:36:ec:e7:f6:5d:5e:ff:d7:c1:d1:82:
43:c8:36:db:10:35:ce:97:88:15:9e:cc:77:09:04:8d:ac:e6:
e7:9a:02:02:bf:f8:a3:3a:fb:cb:a6:07:7f:1d:b9:d5:4c:a5:
7e:2e:10:ef:59:f2:6d:3a:94:90:02:56:80:86:3e:2d:66:1d:
17:59:3b:fa:e9:90:8a:fd:e1:07:1f:61:47:9d:a3:b7:d8:aa:
84:f2:d3:51:2c:28:29:b2:70:51:b2:5d:1f:e4:a0:ab:6f:f7:
d9:43:42:4b:7b:6a:41:0b:94:52:e7:17:ea:ee:36:95:7a:fe:
cc:08:44:5e:03:ba:2f:aa:b1:2e:44:0c:5e:8d:0e:43:2b:2b:
b3:6f:3f:2a:5a:c8:87:12:9c:9b:d8:62:3b:2f:8b:8f:29:d6:
79:bf:fe:ee:88:0a:03:70:c7:19:c3:cd:e7:6a:6a:6a:63:7f:
ce:f1:5a:fd:ff:7f:b5:06:11:38:cc:f0:45:89:d4:66:2e:e9:
77:41:2c:f2:b8:db:6c:f1:d7:5b:03:72:25:11:d1:fa:ca:2a:
ef:71:85:88:c9:7b:1e:aa:f0:05:10:33:8c:f8:ff:12:db:e7:
49:d9:ee:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:18:16 2026 by rpki-client