Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: vXODLv1J5Omck34YsH4LogpquqqoYHDMZhN5NZH4iYg=
Subject key identifier: E3:79:B6:45:DD:79:D5:D7:93:82:9A:E6:2F:CD:DF:A4:26:C7:4F:05
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 01A0E02AF3729CAC164C7E49ED866D9123F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 0B89
Signing time: Sun 27 Sep 2026 00:01:46 +0000
Manifest this update: Sun 27 Sep 2026 00:01:46 +0000
Manifest next update: Mon 28 Sep 2026 00:01:46 +0000
Files and hashes: 1: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (hash: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA=)
2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: iEXOVoRYnWgSEvZPiczfes1fZwJobjnhG1LlZQGjSxk=)
3: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (hash: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw=)
4: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (hash: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:f3:72:9c:ac:16:4c:7e:49:ed:86:6d:91:23:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Sep 27 00:01:46 2026 GMT
Not After : Sep 28 00:01:46 2026 GMT
Subject: CN=e379b645dd79d5d793829ae62fcddfa426c74f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:68:3d:b5:dd:9a:9d:d1:a8:b0:ac:28:37:
68:77:a3:ed:ff:dc:63:98:a7:e4:d3:4e:3d:ef:11:
e9:3f:61:c7:6d:07:6a:9a:f3:64:e3:6a:63:df:77:
47:de:d3:7b:7e:29:ea:eb:f1:1f:61:f2:ba:72:5e:
15:81:47:35:4f:15:f1:0c:e4:9f:92:30:f0:9a:4d:
2b:1e:03:c6:0d:14:88:d8:7a:3e:2a:82:37:42:20:
ee:d3:e9:08:0b:62:64:99:7a:ed:cb:59:11:41:ef:
56:04:27:64:fb:34:eb:55:97:6a:b6:be:c7:66:3c:
f5:0e:52:48:44:a4:61:29:50:1c:7b:1d:2a:b8:2c:
72:b9:1d:87:85:96:5c:a3:9d:8e:ad:9f:cf:9d:14:
7c:9f:c5:50:f0:61:40:56:09:4f:f7:2c:2e:a9:fc:
0d:81:da:ba:de:5e:06:72:83:6d:31:d8:ed:0e:68:
f3:9b:b5:80:68:76:85:74:c4:34:02:46:89:d4:7c:
4d:3f:a5:dd:4f:e8:a5:c1:13:2f:9d:51:c7:49:7d:
65:45:b4:67:d1:99:be:b5:eb:67:2c:b2:4e:54:3e:
7c:d4:e6:7e:a9:a5:f9:c5:8b:72:18:c1:b8:33:68:
ea:5a:27:96:f8:8a:ec:56:8f:c7:c8:3b:2c:07:fd:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:79:B6:45:DD:79:D5:D7:93:82:9A:E6:2F:CD:DF:A4:26:C7:4F:05
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b3:35:0a:9c:56:d1:64:6b:15:23:e3:7d:64:ed:60:9d:15:
cc:89:0a:02:cc:ab:8c:ec:a0:25:1a:af:4b:c4:eb:1e:0b:d7:
6f:eb:31:9a:ec:ab:17:cf:6f:6f:49:07:ab:e8:1e:23:c4:e8:
09:b4:bb:be:13:97:72:38:05:40:f5:93:d7:1c:e4:29:71:84:
1d:61:35:8d:e4:8c:2b:4d:09:37:a5:84:59:26:6a:64:f9:60:
e0:3d:72:a9:83:5f:16:87:3d:61:2c:fd:d6:33:c6:a0:37:0a:
3c:06:6b:aa:51:61:d4:90:43:ca:13:0d:8d:74:79:42:8f:4c:
95:c7:71:32:ba:a8:22:6d:bb:9d:23:a5:0e:47:58:c0:4e:31:
55:7d:58:37:b4:8c:06:a7:0e:e2:d5:39:02:11:2d:5d:3b:c5:
4a:34:a4:78:7d:16:4b:51:10:09:2e:ff:e4:52:c0:01:63:85:
3b:b5:02:bf:c6:87:14:eb:8f:0c:9a:3d:ac:24:2a:e1:f2:f4:
06:a7:00:0a:e0:30:5d:d8:25:a4:7d:a0:f1:ae:3c:a3:94:ed:
7a:3a:a9:ee:7b:8b:ed:67:7a:e2:c7:7a:04:6d:26:00:e1:6a:
ff:db:d7:e4:cf:19:35:63:a5:3c:c9:41:84:3d:1c:f4:c1:39:
9d:61:57:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgKvNynKwWTH5J7YZtkSP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2Y2MTljY2VjZjgzNmY1NmE3MjAxMGU4MmZiN2RkMjQw
NDAyZjkwHhcNMjYwOTI3MDAwMTQ2WhcNMjYwOTI4MDAwMTQ2WjAzMTEwLwYDVQQD
EyhlMzc5YjY0NWRkNzlkNWQ3OTM4MjlhZTYyZmNkZGZhNDI2Yzc0ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NFoPbXdmp3RqLCsKDdod6Pt/9xj
mKfk00497xHpP2HHbQdqmvNk42pj33dH3tN7finq6/EfYfK6cl4VgUc1TxXxDOSf
kjDwmk0rHgPGDRSI2Ho+KoI3QiDu0+kIC2JkmXrty1kRQe9WBCdk+zTrVZdqtr7H
Zjz1DlJIRKRhKVAcex0quCxyuR2HhZZco52OrZ/PnRR8n8VQ8GFAVglP9ywuqfwN
gdq63l4GcoNtMdjtDmjzm7WAaHaFdMQ0AkaJ1HxNP6XdT+ilwRMvnVHHSX1lRbRn
0Zm+tetnLLJOVD581OZ+qaX5xYtyGMG4M2jqWieW+IrsVo/HyDssB/2gMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFON5tkXdedXXk4Ka5i/N36Qmx08FMB8GA1UdIwQY
MBaAFC/PYZzOz4NvVqcgEOgvt90kBAL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEt
NGIzNTBlYWNjODZiLzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEtNGIzNTBlYWNjODZi
LzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrM1CpxW
0WRrFSPjfWTtYJ0VzIkKAsyrjOygJRqvS8TrHgvXb+sxmuyrF89vb0kHq+geI8To
CbS7vhOXcjgFQPWT1xzkKXGEHWE1jeSMK00JN6WEWSZqZPlg4D1yqYNfFoc9YSz9
1jPGoDcKPAZrqlFh1JBDyhMNjXR5Qo9MlcdxMrqoIm27nSOlDkdYwE4xVX1YN7SM
BqcO4tU5AhEtXTvFSjSkeH0WS1EQCS7/5FLAAWOFO7UCv8aHFOuPDJo9rCQq4fL0
BqcACuAwXdglpH2g8a48o5Ttejqp7nuL7Wd64sd6BG0mAOFq/9vX5M8ZNWOlPMlB
hD0c9ME5nWFXgA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:02:54 2026 by rpki-client