Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier: IgcglfQPiZNdl6ZtcsAKdAvc9CJ5S3SrsKo63TgH1yU=
Subject key identifier: 67:F8:06:8A:1D:29:E1:63:1F:E0:51:D1:3A:36:93:84:A8:4F:5D:75
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 019D2996FA4C264586346FBD01C426B883FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number: 0DF5
Signing time: Thu 26 Mar 2026 10:00:53 +0000
Manifest this update: Thu 26 Mar 2026 10:00:53 +0000
Manifest next update: Fri 27 Mar 2026 10:00:53 +0000
Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: UO5T5i4KWbChUgdq9t6h1mkge3NLEx/Dd0HeRYzIH8Q=)
2: GJT01x6wwyCftHtrWIvsmyjBIms.roa (hash: ASc7SzAK6h3bsHuxvUa3vat9chLP4lA8Av0u9oM1Qs4=)
3: Mw9HiEEZk3waBmzFCokJoCJYeHU.roa (hash: 6sGwg0qogzNM4BdNuwLNu3Z3ohroqmMT+szTSBMU2DE=)
4: X3mascigLmZbak7QiDBSbbs3vrA.roa (hash: IylgO/sA2hsrQIbGafFY3tsGMHKTB8LlFvuICdNIo44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:fa:4c:26:45:86:34:6f:bd:01:c4:26:b8:83:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Mar 26 10:00:53 2026 GMT
Not After : Mar 27 10:00:53 2026 GMT
Subject: CN=67f8068a1d29e1631fe051d13a369384a84f5d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5f:eb:6e:b3:ee:85:b4:f2:4d:a1:4d:3b:04:
cf:76:6a:81:be:18:01:06:28:c4:58:72:88:92:44:
99:b5:58:f5:e8:19:77:78:51:b6:86:95:d2:1b:7f:
b0:71:d1:e1:32:f3:e0:b7:c9:da:f0:62:ca:6f:4f:
a6:d9:26:22:ab:b4:a3:0c:84:c3:36:10:02:40:1f:
ab:ef:f1:f7:c0:b7:41:7a:41:75:bd:34:17:62:ba:
45:49:9a:02:33:dc:38:32:42:54:1b:83:32:83:97:
27:1e:46:ca:9c:6d:4c:98:73:a9:9f:88:d0:3f:34:
9e:0f:2a:ab:b6:93:3f:b1:ca:37:0d:a0:55:bc:64:
1e:a2:09:8c:6a:28:88:40:3d:fb:f0:9f:be:64:e2:
a8:4b:8b:e3:3e:bf:ab:40:f6:9b:79:c7:2b:83:63:
79:78:59:ed:f4:5e:74:9d:90:39:b4:39:d6:0f:d6:
ed:85:9a:bc:c8:3d:0f:9a:1c:a0:3f:7a:43:fa:c9:
e2:70:45:d5:02:a4:e8:f3:d6:94:3b:f1:94:7a:86:
ad:53:0f:e3:1c:e4:12:a8:95:61:1d:7b:fd:15:69:
7a:1a:7c:6a:db:8a:9e:b9:5b:4f:ac:96:2b:31:a5:
fe:b3:ad:d0:22:e4:18:09:6a:6e:36:3a:16:64:64:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F8:06:8A:1D:29:E1:63:1F:E0:51:D1:3A:36:93:84:A8:4F:5D:75
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:30:27:82:dc:6d:3d:21:17:7b:00:cb:ea:5d:63:d1:cb:c0:
3c:fb:67:9c:a1:09:8a:63:88:c7:c2:de:81:88:5f:4d:11:64:
5e:05:75:bf:18:8e:f5:38:c7:b3:36:58:c6:f0:ee:28:b3:82:
7a:b5:ba:b2:05:25:f0:60:60:4d:35:37:86:b8:61:f8:b0:66:
23:1f:b4:2e:07:bb:e0:92:48:ca:d9:c5:6d:4c:e7:51:af:da:
70:8c:9c:8b:8c:0d:83:7d:58:93:3a:12:a7:88:7e:bf:ec:e8:
2a:d6:07:67:21:8d:60:84:9f:76:5c:7c:c2:7f:c5:a3:7a:9c:
f6:12:ea:8f:44:0a:96:c3:8e:e9:56:eb:be:c7:d4:25:c6:3e:
0b:8e:1f:50:be:3c:80:c1:c5:2e:59:92:e8:60:46:64:ea:90:
b8:3e:ab:e8:a3:b9:f6:6a:19:62:16:3d:0a:0d:d3:fe:77:66:
ea:35:11:ac:93:20:3e:01:07:7a:fc:a4:0e:a1:c8:3a:0b:5f:
03:05:b7:5b:5e:ec:99:a0:7b:4e:e2:a2:a4:37:31:f7:00:ec:
86:2f:b9:8b:1f:71:be:21:cd:9b:2e:a2:c5:c2:ac:d0:a8:c7:
7e:0c:81:73:92:eb:1a:c2:79:e2:e9:44:63:68:61:e0:b8:75:
98:1d:22:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:34 2026 by rpki-client