Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: Ap3bUocxuNx2ufAHRFx8V4KE/jNefgIiN4ZTXFB822k=
Subject key identifier: D8:25:3C:6D:71:11:59:F4:3E:C4:B7:B5:DD:E8:D8:7A:72:7F:E9:99
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 71F0B8782281B858D6D9857568E53AFED6D0C56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 0326
Signing time: Fri 17 Apr 2026 18:28:53 +0000
Manifest this update: Fri 17 Apr 2026 18:23:51 +0000
Manifest next update: Sat 18 Apr 2026 20:59:51 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: 7+DfigIpbu4d5pvtpYyVwjIDfVzFxTHIDSlF5s5BsQE=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f0:b8:78:22:81:b8:58:d6:d9:85:75:68:e5:3a:fe:d6:d0:c5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Apr 17 18:23:51 2026 GMT
Not After : Apr 18 20:59:51 2026 GMT
Subject: CN=D8253C6D711159F43EC4B7B5DDE8D87A727FE999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:42:97:69:20:03:93:a4:c1:a6:76:70:35:
28:9b:36:70:95:08:b8:37:50:4d:d2:bc:57:e3:e2:
ed:6b:d3:77:ef:ad:aa:16:08:7f:a3:e7:8c:e7:67:
70:0a:6c:14:06:88:00:5a:bd:9e:82:df:0d:a3:0c:
ab:8a:de:d8:d3:dd:32:cd:8c:0a:6b:05:fc:c9:b9:
2d:ba:92:c7:9d:7e:de:e6:5e:45:59:fb:6e:63:a9:
25:e7:6c:4a:13:ad:07:65:4a:a8:6d:2f:3c:d2:3a:
f7:94:60:51:62:be:e7:cd:51:23:7b:71:ea:07:75:
e1:e5:7f:ce:c3:c5:e3:40:ba:75:99:4e:50:32:5e:
6b:2a:53:8f:77:ed:56:a8:72:57:63:f8:d1:8e:f6:
62:68:d5:2d:c2:26:5a:c3:01:8a:fc:00:f4:b7:ed:
2e:81:81:c2:0e:1f:b7:f8:f1:d7:f9:2a:00:1a:78:
e8:13:db:2c:3f:cd:34:22:a9:54:e5:a0:92:91:fd:
9c:d3:a0:6f:cd:fc:b4:23:79:33:ca:a5:14:39:8a:
ed:36:09:57:01:74:58:72:7a:a3:fb:27:64:d7:0b:
d0:64:d5:d7:6b:02:29:4d:9e:c1:9e:55:4b:5c:47:
c5:2a:ae:63:b1:7c:7e:f3:4a:0f:49:bd:a9:3b:38:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:25:3C:6D:71:11:59:F4:3E:C4:B7:B5:DD:E8:D8:7A:72:7F:E9:99
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fc:ba:c7:dc:6f:4a:26:a0:0f:b6:6a:24:58:c4:da:16:8a:
4d:22:af:8b:d3:ab:32:4c:b8:bc:7d:3e:56:b0:e9:17:38:a6:
64:a3:a8:42:8f:cb:1f:07:b5:c1:89:3e:96:b8:0d:db:ae:e9:
3d:61:27:ff:0c:a4:ed:7e:e2:80:1b:16:28:f6:32:c9:42:c0:
de:97:f8:22:b6:56:e1:af:fd:9f:db:0b:f6:9a:08:c4:15:ce:
30:a2:13:b6:14:58:10:8d:4a:bd:c1:66:08:ed:1e:7c:0a:4a:
f0:ec:23:74:fd:e1:52:4b:88:8b:13:e5:07:c3:17:11:f0:c9:
cd:a3:b7:40:51:ea:62:73:20:04:ee:59:75:7a:89:85:a8:c4:
76:f7:2c:36:7b:98:e0:3a:c2:7c:70:17:a7:ed:2f:95:d2:4a:
ba:bb:16:87:3a:3e:06:78:8c:ac:2c:12:f4:31:a5:f1:5b:42:
28:03:4a:38:c3:92:3b:37:70:93:18:5a:3f:53:1f:68:58:0b:
b0:02:e1:db:aa:02:4b:f5:9c:dd:6e:d6:a5:a1:72:c4:9a:e9:
0f:ad:b5:3a:08:86:d2:d2:be:ae:f3:84:d0:22:ae:4d:10:46:
97:68:7e:e9:66:06:fd:72:dc:93:79:06:7f:cf:4f:3d:93:02:
50:34:29:16
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUcfC4eCKBuFjW2YV1aOU6/tbQxWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlhYTk3N2EzYmM1YjZiN2FjNDYyOTU1ZDc1YTJhMzAy
ODdlMjU3NzAeFw0yNjA0MTcxODIzNTFaFw0yNjA0MTgyMDU5NTFaMDMxMTAvBgNV
BAMTKEQ4MjUzQzZENzExMTU5RjQzRUM0QjdCNURERThEODdBNzI3RkU5OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjAUKXaSADk6TBpnZwNSibNnCV
CLg3UE3SvFfj4u1r03fvraoWCH+j54znZ3AKbBQGiABavZ6C3w2jDKuK3tjT3TLN
jAprBfzJuS26ksedft7mXkVZ+25jqSXnbEoTrQdlSqhtLzzSOveUYFFivufNUSN7
ceoHdeHlf87DxeNAunWZTlAyXmsqU4937Vaocldj+NGO9mJo1S3CJlrDAYr8APS3
7S6BgcIOH7f48df5KgAaeOgT2yw/zTQiqVTloJKR/ZzToG/N/LQjeTPKpRQ5iu02
CVcBdFhyeqP7J2TXC9Bk1ddrAilNnsGeVUtcR8UqrmOxfH7zSg9Jvak7ODpZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU2CU8bXERWfQ+xLe13ejYenJ/6ZkwHwYDVR0j
BBgwFoAUiaqXejvFtresRilV11oqMCh+JXcwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzU0NDhlNmFhMjYwNjQxYTE5N2I4MjUxYWMwYzNlNjMwLzEv
ODlBQTk3N0EzQkM1QjZCN0FDNDYyOTU1RDc1QTJBMzAyODdFMjU3Ny5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL2lhcVhlanZGdHJlc1JpbFYxMW9xTUNoLUpYYy5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV81NDQ4ZTZhYTI2MDY0MWEx
OTdiODI1MWFjMGMzZTYzMC8xLzg5QUE5NzdBM0JDNUI2QjdBQzQ2Mjk1NUQ3NUEy
QTMwMjg3RTI1NzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAY/LrH3G9KJqAPtmokWMTaFopNIq+L06sy
TLi8fT5WsOkXOKZko6hCj8sfB7XBiT6WuA3bruk9YSf/DKTtfuKAGxYo9jLJQsDe
l/gitlbhr/2f2wv2mgjEFc4wohO2FFgQjUq9wWYI7R58Ckrw7CN0/eFSS4iLE+UH
wxcR8MnNo7dAUepicyAE7ll1eomFqMR29yw2e5jgOsJ8cBen7S+V0kq6uxaHOj4G
eIysLBL0MaXxW0IoA0o4w5I7N3CTGFo/Ux9oWAuwAuHbqgJL9ZzdbtaloXLEmukP
rbU6CIbS0r6u84TQIq5NEEaXaH7pZgb9ctyTeQZ/z089kwJQNCkW
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:34:22 2026 by rpki-client