
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: e6ZmI4eFds4r0Iu9bMacpxteqaWu2dFicqrrmcD1XhI=
Subject key identifier: 09:58:9C:FA:5D:9E:11:9F:40:7D:34:6A:90:42:E3:D3:EB:BA:25:93
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 019E1F48392BE04B4796B6192EFDDD650851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 0A1C
Signing time: Wed 13 May 2026 03:01:27 +0000
Manifest this update: Wed 13 May 2026 03:01:27 +0000
Manifest next update: Thu 14 May 2026 03:01:27 +0000
Files and hashes: 1: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (hash: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA=)
2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: /+0fHPPKG3maYrm47dleQZiJfY1ch9Oye9bcfOz8nns=)
3: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (hash: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw=)
4: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (hash: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:39:2b:e0:4b:47:96:b6:19:2e:fd:dd:65:08:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: May 13 03:01:27 2026 GMT
Not After : May 14 03:01:27 2026 GMT
Subject: CN=09589cfa5d9e119f407d346a9042e3d3ebba2593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:4e:3f:26:08:7a:2e:a7:94:cd:21:d3:44:
2c:31:de:76:7f:88:d9:39:e6:19:7c:9c:e0:45:ca:
42:f0:1f:ec:06:9a:f0:1b:e5:15:73:3b:af:3d:e2:
10:4f:97:47:38:5f:98:8b:d8:09:18:63:4c:20:85:
67:14:73:3a:45:8d:d6:8a:8d:a0:ce:ea:09:81:fc:
d5:95:79:31:57:fe:d8:01:4c:3b:bc:62:c4:80:4d:
23:a4:eb:f1:97:e9:66:fe:e9:5e:ce:2b:5b:38:9b:
2d:ad:92:8f:ff:4c:30:50:cc:3a:fd:5e:38:f0:a8:
c2:2b:f8:a0:1f:5f:f7:d1:37:ac:ec:02:c1:31:cd:
29:b4:85:34:fd:77:9c:57:99:e2:86:7c:aa:af:a9:
1f:03:87:61:a0:89:2d:ef:fb:90:24:90:1f:e0:00:
78:a3:5a:03:b9:e2:36:e2:1e:50:66:78:de:aa:cd:
d7:30:31:f4:5b:5c:8a:c7:a5:51:d3:63:f6:33:d4:
5a:a8:fb:7c:62:e4:b6:e3:ec:5e:91:5e:9f:48:53:
bc:77:3f:af:c1:69:7b:62:83:bd:80:e0:a2:4e:ff:
40:d9:2e:22:7b:1f:59:34:e5:38:80:94:db:66:ad:
ec:40:b2:11:c5:7f:9e:6e:5e:30:9f:a5:41:16:b4:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:58:9C:FA:5D:9E:11:9F:40:7D:34:6A:90:42:E3:D3:EB:BA:25:93
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1e:7b:b0:1c:00:b1:96:97:79:34:c2:e3:3d:2e:11:4a:ff:
7a:85:0f:8d:22:48:c0:0c:1b:09:bd:a2:7a:8d:4a:87:65:92:
ae:e6:60:ed:ff:40:f5:00:14:71:a2:d5:66:43:72:ba:d3:dc:
c4:ba:1e:02:df:07:bc:d2:e6:1c:64:f8:7e:56:c3:68:34:8d:
77:f4:2a:5a:42:ee:02:d0:78:20:2e:ee:c3:ef:59:67:ea:62:
1e:b4:a1:14:5a:74:ed:eb:36:6c:0a:55:d4:a8:30:da:2a:eb:
77:ad:fb:04:77:40:53:bd:d1:fb:f2:b2:1e:54:aa:94:26:b8:
d1:a5:ec:e2:0c:50:a4:bf:14:e1:2e:31:fe:2b:37:2d:30:cd:
8f:0f:02:70:a7:24:44:16:b4:5b:f0:d5:2a:e9:c7:b1:68:57:
de:da:e3:78:fe:83:43:00:83:5a:c5:35:d6:4d:13:c1:2f:f2:
bc:6d:3a:a2:1f:44:5e:8d:a4:6a:54:de:e8:5c:fe:04:30:1a:
f8:14:3d:b8:bb:3a:c7:10:ae:e0:ee:44:8a:db:93:21:57:08:
0a:13:68:af:3a:b4:22:6b:62:b9:42:83:14:b3:3d:6e:b6:23:
59:f0:6b:53:e2:0d:9b:cb:79:00:85:6c:88:b8:09:28:58:ea:
43:db:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:51 2026 by rpki-client