Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: u/RE6WS7G8blJjBcZLvbWzO02m4M+30N087LnqDS2Q4=
Subject key identifier: BA:1B:A1:E6:1B:29:FD:0F:3C:A3:38:9D:8C:A9:04:0A:4C:62:19:16
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 019D2772855BC46DD9FDA14B4114B93403B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: CMXuuIQdceU+rSo7qytz75u344WP0HN0j83SIa3maYk=)
2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:85:5b:c4:6d:d9:fd:a1:4b:41:14:b9:34:03:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=ba1ba1e61b29fd0f3ca3389d8ca9040a4c621916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:69:07:58:ad:c1:41:55:8c:66:30:75:ba:
cf:f6:8b:c7:63:31:5d:de:c1:77:ec:39:19:66:7b:
bb:8a:89:51:da:58:8f:f8:13:98:87:9a:52:46:38:
7f:c6:fe:53:cf:07:1c:84:4d:43:fb:32:92:b1:c3:
a5:a9:73:f8:a3:4e:79:1c:28:0d:37:e3:0c:3a:aa:
04:d0:e2:aa:51:c8:d5:be:d5:f9:d2:96:90:67:0f:
49:02:50:78:a9:fa:58:ca:34:7b:4f:ca:6f:d6:38:
68:5c:84:01:80:73:e0:79:c4:46:6a:bf:ae:cb:e1:
04:4c:5f:86:a3:9c:7d:39:01:a4:88:01:55:6f:8e:
8c:3b:e8:f4:59:eb:8c:0c:b3:8a:9a:e5:ec:17:8b:
ac:d0:a2:5a:c1:ce:50:ef:6a:bc:6d:39:a4:14:ea:
9b:30:5c:33:bb:ca:24:4a:c6:7e:81:72:a5:20:25:
9e:84:3b:cd:1b:79:7f:00:f1:1b:6a:ba:5f:b1:f3:
28:0c:9b:36:4a:a9:22:bd:76:f9:15:fd:7f:df:98:
d5:50:99:5f:0d:19:f7:a4:bc:e2:16:ad:68:e6:b9:
8b:f8:c7:40:66:24:a8:bd:e2:33:5e:b3:55:e2:2a:
c3:0e:f7:37:02:07:f0:62:48:3b:89:2d:14:f7:01:
85:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1B:A1:E6:1B:29:FD:0F:3C:A3:38:9D:8C:A9:04:0A:4C:62:19:16
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fa:24:ea:8f:7c:4b:34:eb:c1:04:dc:b5:8a:7f:3b:eb:a8:
c5:8f:5b:0b:7d:af:f4:fc:b8:d4:34:cc:97:73:80:92:5b:e5:
72:28:be:45:fb:31:b7:51:f7:bf:34:4a:f9:c1:c1:10:7b:07:
5d:60:e1:5e:1e:60:10:35:7d:75:e1:4e:04:43:11:49:ac:9c:
e5:94:9c:b7:30:1e:57:a1:54:77:4f:20:2a:e2:96:57:f8:93:
2b:02:77:e6:b9:42:09:37:07:eb:25:c9:55:d9:08:04:9d:2e:
26:1c:65:b4:bd:38:76:8c:0b:0f:06:2b:d2:1a:be:05:e1:00:
0f:82:27:de:e0:f9:da:a4:b4:52:8b:15:b9:42:ac:3d:21:57:
80:52:11:f7:5f:c5:ad:26:c9:22:00:fc:e6:80:dd:c0:3d:50:
50:a8:d8:64:bc:0f:7a:04:ea:f6:d0:91:23:1b:a1:02:9c:fc:
9a:6e:1d:f5:4f:6d:64:6d:0a:29:46:e4:76:07:52:8e:60:2d:
11:6e:23:de:00:14:e0:16:12:b9:57:1e:ed:e3:95:6a:a9:d3:
b8:79:c8:5d:f4:50:81:ce:d8:3e:b9:f0:b6:c3:25:b4:e9:19:
69:85:59:29:07:ab:5c:89:7a:55:d9:05:9c:52:13:30:db:c4:
13:f3:68:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:54 2026 by rpki-client