Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: Tl0SQmrxxJdBV/9qc1yM93JdlbChABhJcNiOktm6P5g=
Subject key identifier: C8:A8:D3:FE:3F:62:BE:D1:62:44:36:B6:3D:9C:86:67:B5:DC:66:24
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 1C0A4D0FF7554968D6E2A98A9B62B4D69157DA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 030A
Signing time: Thu 26 Mar 2026 16:09:25 +0000
Manifest this update: Thu 26 Mar 2026 16:04:23 +0000
Manifest next update: Fri 27 Mar 2026 17:10:23 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: JvrnCLk/vG2pMMS/eXcLygqT1pXSM3+NDW16OO8PKfo=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0a:4d:0f:f7:55:49:68:d6:e2:a9:8a:9b:62:b4:d6:91:57:da:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Mar 26 16:04:23 2026 GMT
Not After : Mar 27 17:10:23 2026 GMT
Subject: CN=C8A8D3FE3F62BED1624436B63D9C8667B5DC6624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:aa:43:19:87:cf:c3:50:9f:d7:d6:60:95:
84:19:f5:d7:31:57:97:bd:4e:81:7a:39:a1:29:7e:
bc:ee:93:4d:2d:15:44:44:5e:ae:dd:dd:e6:69:53:
95:3f:6c:e6:3f:52:d0:55:f3:a1:55:7c:2d:09:9d:
b0:45:10:9c:63:d0:17:16:ba:9d:b7:b5:0a:cc:46:
c4:d2:7c:f7:36:ec:c7:37:2c:55:1b:83:82:61:d6:
0e:6d:51:82:72:51:f3:66:da:ac:85:a9:db:0a:6c:
1b:c1:06:50:b4:d6:dc:b1:1e:2c:a5:05:2c:19:f2:
85:be:51:2d:84:bc:97:f9:56:f2:83:ea:bb:c9:fb:
dc:3b:f9:eb:f4:c8:1e:f1:9d:59:94:65:de:45:ed:
af:6c:bd:60:61:b7:cb:63:dc:2e:47:7b:65:03:78:
59:8c:c1:89:31:d1:43:b8:45:34:88:ab:75:7f:52:
a2:e4:71:b6:bf:a6:e8:54:1d:51:a8:ec:1c:db:51:
a8:17:01:81:4e:48:c6:95:1d:bf:9d:49:23:70:81:
bf:dd:81:a4:fa:24:2b:4a:7a:e0:d8:08:e5:d0:79:
dc:16:c2:78:ec:79:81:f1:bc:ba:1c:1d:41:f0:5a:
5b:28:10:66:06:fc:2e:45:0b:92:6f:22:42:fb:cc:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A8:D3:FE:3F:62:BE:D1:62:44:36:B6:3D:9C:86:67:B5:DC:66:24
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0e:68:cc:94:ad:00:83:c6:65:95:4a:72:ed:62:dd:e8:4c:
24:06:38:ba:f1:6f:d4:38:d9:36:7d:c8:db:3a:70:4c:15:2b:
76:93:7d:38:24:4f:43:cb:4c:7a:7e:bb:b8:ec:0c:90:0b:cd:
7f:8a:86:8e:10:10:8b:d8:7e:92:ef:bf:b8:e5:c1:92:02:53:
64:f3:57:14:0f:00:5c:24:e3:e6:96:56:07:04:90:dd:ca:dd:
9d:7c:a6:3b:d1:fc:2d:18:62:ee:c3:d1:76:89:fe:ce:95:d5:
cb:05:24:73:74:02:17:c5:ad:bb:b3:c3:40:78:0e:70:16:2d:
c2:c6:61:f9:13:36:69:c1:df:fd:e8:b0:49:d9:09:c3:38:c2:
10:4f:0c:4f:1f:a2:9d:d8:41:05:77:01:50:ff:c1:d8:c2:33:
2f:f8:5d:87:21:b5:8a:15:92:4b:01:2c:b2:62:34:f7:0e:1f:
77:70:c4:7e:bd:4c:88:bc:66:18:a1:54:ed:c3:32:13:14:7e:
49:40:31:5c:6e:b9:c9:01:4c:39:0b:6a:64:2d:16:9d:42:4d:
79:01:69:f3:28:3a:88:da:c5:c3:77:27:cd:17:c4:cb:e9:32:
6d:3d:1a:39:08:64:f2:d0:bd:bc:38:18:57:d4:b9:ef:21:9f:
8e:86:52:fc
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUHApND/dVSWjW4qmKm2K01pFX2oIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlhYTk3N2EzYmM1YjZiN2FjNDYyOTU1ZDc1YTJhMzAy
ODdlMjU3NzAeFw0yNjAzMjYxNjA0MjNaFw0yNjAzMjcxNzEwMjNaMDMxMTAvBgNV
BAMTKEM4QThEM0ZFM0Y2MkJFRDE2MjQ0MzZCNjNEOUM4NjY3QjVEQzY2MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXapDGYfPw1Cf19ZglYQZ9dcx
V5e9ToF6OaEpfrzuk00tFUREXq7d3eZpU5U/bOY/UtBV86FVfC0JnbBFEJxj0BcW
up23tQrMRsTSfPc27Mc3LFUbg4Jh1g5tUYJyUfNm2qyFqdsKbBvBBlC01tyxHiyl
BSwZ8oW+US2EvJf5VvKD6rvJ+9w7+ev0yB7xnVmUZd5F7a9svWBht8tj3C5He2UD
eFmMwYkx0UO4RTSIq3V/UqLkcba/puhUHVGo7BzbUagXAYFOSMaVHb+dSSNwgb/d
gaT6JCtKeuDYCOXQedwWwnjseYHxvLocHUHwWlsoEGYG/C5FC5JvIkL7zFFJAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUyKjT/j9ivtFiRDa2PZyGZ7XcZiQwHwYDVR0j
BBgwFoAUiaqXejvFtresRilV11oqMCh+JXcwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzU0NDhlNmFhMjYwNjQxYTE5N2I4MjUxYWMwYzNlNjMwLzEv
ODlBQTk3N0EzQkM1QjZCN0FDNDYyOTU1RDc1QTJBMzAyODdFMjU3Ny5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL2lhcVhlanZGdHJlc1JpbFYxMW9xTUNoLUpYYy5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV81NDQ4ZTZhYTI2MDY0MWEx
OTdiODI1MWFjMGMzZTYzMC8xLzg5QUE5NzdBM0JDNUI2QjdBQzQ2Mjk1NUQ3NUEy
QTMwMjg3RTI1NzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEDmjMlK0Ag8ZllUpy7WLd6EwkBji68W/U
ONk2fcjbOnBMFSt2k304JE9Dy0x6fru47AyQC81/ioaOEBCL2H6S77+45cGSAlNk
81cUDwBcJOPmllYHBJDdyt2dfKY70fwtGGLuw9F2if7OldXLBSRzdAIXxa27s8NA
eA5wFi3CxmH5EzZpwd/96LBJ2QnDOMIQTwxPH6Kd2EEFdwFQ/8HYwjMv+F2HIbWK
FZJLASyyYjT3Dh93cMR+vUyIvGYYoVTtwzITFH5JQDFcbrnJAUw5C2pkLRadQk15
AWnzKDqI2sXDdyfNF8TL6TJtPRo5CGTy0L28OBhX1LnvIZ+OhlL8
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:49 2026 by rpki-client