Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: bk6+5zB1yb8lxrFcRfzdkzhp+qA8d6Z4MEavC+XANxw=
Subject key identifier: 5D:69:9B:B9:D6:7D:6C:20:C0:DA:08:6C:BC:54:6E:34:11:5B:F7:21
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 019D2A04800168C3297EECCAAD9CC470C07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 099D
Signing time: Thu 26 Mar 2026 12:00:31 +0000
Manifest this update: Thu 26 Mar 2026 12:00:31 +0000
Manifest next update: Fri 27 Mar 2026 12:00:31 +0000
Files and hashes: 1: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (hash: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA=)
2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: d7CAG6moJ9GLbw+MC5tZ3GE7MyqU/VZiuWPFB4EDCBI=)
3: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (hash: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw=)
4: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (hash: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:80:01:68:c3:29:7e:ec:ca:ad:9c:c4:70:c0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Mar 26 12:00:31 2026 GMT
Not After : Mar 27 12:00:31 2026 GMT
Subject: CN=5d699bb9d67d6c20c0da086cbc546e34115bf721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a8:83:e5:27:53:9a:32:a2:df:01:0a:82:b6:
70:0d:35:c9:4f:39:28:1a:60:61:39:b5:6c:dc:cc:
31:dd:67:41:19:e9:e3:5b:ac:e5:dc:35:18:de:ca:
7f:95:68:3d:0c:bc:dc:3f:26:73:db:56:ae:c9:59:
53:71:ea:7a:7d:6c:4f:d9:20:52:cf:b6:a9:bc:d2:
3b:dd:bb:9a:7e:d1:1e:59:1d:80:bf:7b:05:5f:cb:
4b:db:ee:3d:eb:d5:e4:fe:8f:51:a7:7f:31:bf:da:
51:97:25:1f:89:49:a4:cb:af:4d:07:f5:06:4a:5e:
76:d4:47:b8:13:df:fe:63:70:d8:45:16:5b:b3:21:
c5:3a:7a:01:6b:49:7b:b2:4d:e7:7a:02:8f:c0:7c:
98:2c:d5:93:1e:a5:36:b4:cd:fd:24:3e:b1:79:88:
81:47:b0:19:be:97:3f:8b:b0:59:c2:45:ed:94:72:
26:87:3a:27:b3:09:00:43:88:40:72:61:ec:29:ad:
08:b4:0f:d1:6f:c1:b8:a7:b7:1b:2d:46:45:02:33:
c9:b2:00:8d:f6:ed:13:a0:ea:64:d6:92:43:ed:46:
ae:a3:35:1c:c0:44:9b:c7:f5:58:a0:a9:41:1e:fa:
ed:7d:c7:63:ed:7d:ff:76:d3:d8:ec:6e:c9:ce:0c:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:69:9B:B9:D6:7D:6C:20:C0:DA:08:6C:BC:54:6E:34:11:5B:F7:21
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ab:ec:fb:c1:92:70:2f:af:17:c7:a9:a5:c1:bc:a5:ba:8e:
67:4d:11:a9:8a:85:c7:f2:73:93:30:a1:2f:ef:c2:51:42:73:
3e:db:4a:db:2e:60:8d:da:f8:b5:70:0e:48:d3:46:d3:59:82:
7f:3e:20:37:02:be:88:8e:6c:2e:ec:f2:5c:7a:83:ee:4b:55:
ec:36:4b:7a:8f:1e:5d:a4:6f:54:9e:9f:57:64:df:e1:40:73:
11:a8:73:4e:2f:c1:77:16:3c:e3:60:e3:73:80:26:28:a7:5e:
98:54:5b:0e:6f:32:9d:cc:d4:dc:9e:24:95:34:f4:c7:54:f6:
9f:ac:ce:bb:0d:4b:97:ab:21:47:e8:93:87:11:e3:6d:bf:bb:
a9:2c:0e:7e:57:e8:5e:bc:72:c3:47:2d:8a:60:33:84:22:9c:
a1:60:c6:87:d1:32:26:79:88:74:92:b3:b4:03:c9:8f:d0:52:
b0:30:ff:0f:a7:39:62:5a:b2:ae:b8:53:6f:28:e3:ba:14:f8:
02:58:89:26:f9:c3:dc:6f:67:91:37:eb:84:04:47:ab:74:3f:
2a:ba:ef:f6:42:ec:eb:5f:a8:7a:a1:10:e5:78:9c:5a:e7:9a:
80:21:02:61:5d:68:f0:95:35:9e:5f:af:ea:43:99:c4:65:27:
3e:01:22:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:07 2026 by rpki-client