Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
File: 89KYmJtPzgv8PBec7_anqgxN8Qc.mft (raw, json)
Hash identifier: SZXMB6Pc9V8/oqicbXN9bTorPVnI3DsADrdTnpmVUpY=
Subject key identifier: F4:7D:37:12:41:43:33:06:E2:25:E2:1A:35:7E:83:07:E4:87:B9:68
Authority key identifier: F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
Certificate issuer: /CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Certificate serial: 01A1724B7228ED783F715F72B9761028EE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
Manifest number: 023E
Signing time: Sun 25 Oct 2026 09:01:49 +0000
Manifest this update: Sun 25 Oct 2026 09:01:49 +0000
Manifest next update: Mon 26 Oct 2026 09:01:49 +0000
Files and hashes: 1: 89KYmJtPzgv8PBec7_anqgxN8Qc.crl (hash: TIBRkEfQT3QfyD8FQge8gn9cRNEHu8YXNNPanU7XhTU=)
2: NjhjTKawIenVH3d-r5iLAxjav8U.roa (hash: SUgTiVzn0C0dt/13Npi6OivpMeE/2hH0/DP1jgqxSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4b:72:28:ed:78:3f:71:5f:72:b9:76:10:28:ee:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Validity
Not Before: Oct 25 09:01:49 2026 GMT
Not After : Oct 26 09:01:49 2026 GMT
Subject: CN=f47d371241433306e225e21a357e8307e487b968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:70:e5:16:40:6e:e6:d9:76:00:27:ed:d8:
6b:20:26:c5:01:42:27:bc:6a:22:11:98:06:cc:84:
f9:c6:d2:2a:c6:4b:ad:84:1d:0b:92:09:96:10:89:
ce:1c:45:43:7c:e6:d0:50:ba:36:fb:f3:a0:c8:f6:
06:bd:52:dd:b4:cc:ce:52:42:4f:0c:96:24:b5:77:
c8:d3:49:8f:21:65:55:99:bb:ef:9b:97:57:dd:dc:
e9:60:51:fa:b5:d6:c0:c5:a3:84:d7:da:99:68:c0:
40:97:cf:29:b0:9f:6a:17:16:9b:37:db:21:f6:fd:
cd:ff:ba:37:a8:ba:f6:09:40:96:12:c4:62:2a:3f:
0d:92:77:38:fc:60:df:f6:d0:d9:b2:3e:92:78:31:
32:97:c4:de:7c:c9:fa:21:23:46:34:b4:e1:c3:cd:
1d:7c:4b:e2:10:3f:a4:fc:2e:dd:44:9c:e1:22:03:
64:34:e9:6f:fd:87:e4:59:c7:04:b2:f7:1f:b6:cc:
6d:8d:8b:39:f8:04:45:60:4d:98:f6:d5:ee:d4:6b:
50:44:50:86:a9:b6:1f:13:c6:a8:9b:b2:e2:1c:4c:
a7:29:43:98:a4:a9:54:dd:9f:80:75:9d:a0:e7:45:
d7:5e:85:87:09:55:cb:ef:8b:17:f6:62:e4:c7:17:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7D:37:12:41:43:33:06:E2:25:E2:1A:35:7E:83:07:E4:87:B9:68
X509v3 Authority Key Identifier:
keyid:F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6e:fb:d8:df:7d:de:79:db:11:00:dd:44:ed:7a:f0:af:48:
f1:8c:d5:ce:b2:91:0e:d5:a7:25:98:3d:57:88:9f:fa:fa:6e:
88:f1:ea:9c:29:aa:2a:7a:07:d5:50:8e:55:3c:bc:2f:da:36:
db:c8:39:75:c2:21:8b:b9:b9:92:f4:6a:c4:e0:c4:49:79:5b:
0a:14:27:86:ae:ca:62:69:a5:bc:a2:63:94:fd:c4:56:a2:31:
5b:8e:71:38:b5:b8:6c:33:18:7a:6c:1a:3e:d2:9f:fc:3f:44:
d2:c5:dc:6a:d8:4f:be:17:48:26:e9:3f:53:ba:90:42:b1:ec:
13:c3:9c:6d:94:67:d6:51:cc:b1:5f:6b:01:8c:1b:78:ac:41:
92:81:c7:d4:fa:ad:2b:3f:9f:4f:b0:91:c9:75:2d:46:87:ad:
f9:6c:49:66:05:ca:4e:84:8e:3e:bb:90:4b:5f:95:e4:a4:59:
c1:30:3e:8b:f8:99:f4:8e:ec:48:00:83:cc:0e:17:e8:65:67:
51:c0:53:2d:85:8c:56:48:c3:11:3a:ec:08:b6:33:0b:7f:a7:
3a:a9:b3:ff:24:56:f4:ef:83:a1:04:3e:c3:09:6a:f1:b8:68:
6f:6e:b0:64:07:7a:ad:25:4e:2b:4e:37:e5:d9:09:8c:a7:06:
88:45:32:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:34:39 2026 by rpki-client