Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: IzT45KRDgd4Mj1/bc/HO7/inMEkGRDReS3erjmgC+JY=
Subject key identifier: 39:32:2D:8E:DE:3E:5B:13:CA:09:6E:8F:BF:F6:D7:47:F7:95:01:44
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 01A10E836679667045E5F74F8C96A2C38939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 0BA1
Signing time: Tue 06 Oct 2026 00:00:54 +0000
Manifest this update: Tue 06 Oct 2026 00:00:54 +0000
Manifest next update: Wed 07 Oct 2026 00:00:54 +0000
Files and hashes: 1: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (hash: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA=)
2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: yDTC0ox/G1Lz6d6Krba16ykfpcYxOEYSPKJ3cYF475k=)
3: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (hash: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw=)
4: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (hash: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:83:66:79:66:70:45:e5:f7:4f:8c:96:a2:c3:89:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Oct 6 00:00:54 2026 GMT
Not After : Oct 7 00:00:54 2026 GMT
Subject: CN=39322d8ede3e5b13ca096e8fbff6d747f7950144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:c9:de:b9:4c:3a:6f:3a:53:ec:28:a1:5b:
82:5a:3c:61:35:e2:6b:e7:40:a4:fe:fe:16:7a:5a:
16:b9:e6:af:33:fe:e6:20:5c:e6:3b:54:a5:b7:24:
4d:13:b6:9b:f8:2e:44:49:bd:91:e9:6f:b0:dd:dd:
a1:00:3b:21:ac:c4:b6:05:8d:b6:72:1b:d1:12:73:
37:00:f1:82:8e:72:a3:a7:3d:ba:17:b1:78:30:60:
b4:ae:85:a6:3f:e1:dc:43:4e:37:a2:d3:ec:cb:3d:
55:7b:32:96:64:dd:d4:13:51:ce:76:41:f9:19:ad:
4a:4b:09:38:ad:f3:4e:25:29:08:8e:21:7a:04:26:
8c:11:24:6f:0c:ee:81:4e:77:d1:0b:e6:93:12:d0:
9f:7b:99:74:11:9e:22:43:63:c2:ee:0f:d4:cc:9d:
aa:fe:2a:88:70:1a:30:64:7d:b8:49:a9:42:74:84:
11:91:ca:a1:9c:f9:2c:7f:a5:b3:ca:27:68:7f:6c:
b2:e8:bc:d0:06:55:ee:03:92:3d:32:a2:ec:bb:3c:
e3:75:19:35:7f:88:24:3e:62:2b:cf:d0:3e:c0:26:
3b:e4:8e:4a:92:90:a9:38:d9:22:16:21:b1:4e:80:
28:c5:cc:86:6e:1b:9f:5d:17:b9:e2:4b:49:3d:61:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:32:2D:8E:DE:3E:5B:13:CA:09:6E:8F:BF:F6:D7:47:F7:95:01:44
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fc:51:90:f1:a2:b6:dd:e1:94:21:3c:29:ff:26:20:25:27:
a9:fe:6e:38:4c:09:74:c8:1c:fe:3c:09:f7:2b:41:bd:31:e3:
df:19:d3:02:36:70:60:ac:04:15:3a:fa:60:36:e8:ed:d5:3b:
95:93:f8:1f:c1:29:40:99:2e:85:2a:36:6a:80:92:4d:33:e3:
06:2a:5c:73:2a:54:c0:a8:ad:7a:02:a3:84:52:f4:63:66:99:
96:84:10:84:4d:b1:aa:fd:b8:6a:9f:a1:7e:6b:9d:36:c7:2b:
cd:41:6b:79:0d:0f:b1:09:09:47:6e:da:f5:b9:65:16:88:a0:
a9:df:fe:34:1b:a0:50:71:8b:22:10:50:bc:87:65:39:59:e4:
99:7d:1c:24:d1:c0:06:dd:69:aa:d3:15:5c:62:67:1e:f7:0a:
04:17:67:ec:f4:a4:2a:5b:fa:01:6c:43:f0:e2:3f:a3:55:83:
40:be:03:e3:27:a1:75:8f:b7:84:f1:cf:cd:34:6f:71:3c:a5:
e1:b3:95:41:ff:27:70:7c:ed:9d:56:25:a9:f7:d3:22:5a:4b:
3e:9d:af:07:96:a4:ab:08:a6:97:27:d1:8c:48:e3:d7:59:9b:
e5:cb:88:81:31:84:02:04:ed:82:67:36:b7:c2:84:63:e2:25:
2b:28:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:02:58 2026 by rpki-client