Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: z929W7EFHBCIJcIDf25aq1OO9pMKZWBIPoZRgdtLHyQ=
Subject key identifier: 02:F3:BD:8E:E4:1C:C4:87:06:C0:D7:48:84:12:FE:FF:69:EB:0A:B8
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 019FAD1AE544F4EF827288006E7738DD272D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 0AEA
Signing time: Wed 29 Jul 2026 09:00:48 +0000
Manifest this update: Wed 29 Jul 2026 09:00:48 +0000
Manifest next update: Thu 30 Jul 2026 09:00:48 +0000
Files and hashes: 1: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (hash: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA=)
2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: bRS/kCpxgtsISTIpi8ReAqLtY7au4PkxalfKYUkx6iw=)
3: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (hash: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw=)
4: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (hash: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:e5:44:f4:ef:82:72:88:00:6e:77:38:dd:27:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Jul 29 09:00:48 2026 GMT
Not After : Jul 30 09:00:48 2026 GMT
Subject: CN=02f3bd8ee41cc48706c0d7488412feff69eb0ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:ac:39:7f:c1:5f:a4:96:5a:d7:df:7a:b1:
d4:3a:99:da:f7:1a:60:b2:74:b4:17:c0:7f:c9:95:
1b:66:09:14:c9:75:87:c6:89:54:c1:f4:1e:7c:b2:
0f:96:bb:7a:83:fe:28:79:5f:83:2e:cd:3e:49:43:
7e:a6:4a:1e:f0:a6:26:0c:bb:04:93:33:bb:0e:62:
b5:72:f6:8a:a6:ea:b1:7c:9b:e1:14:85:c7:28:3b:
09:61:b8:fc:6e:1b:d9:09:af:25:01:07:96:4e:fc:
d1:43:8c:5e:26:0b:c0:7b:b3:f5:ec:2b:93:b0:32:
60:1a:73:fc:14:e6:c7:a8:ab:cf:ac:97:5e:06:5b:
d9:57:bf:44:d9:b0:38:93:6c:9c:f0:3d:9e:2e:c0:
4d:3a:9f:fd:f5:45:79:27:1f:cc:8a:d5:16:4d:fd:
00:89:15:56:37:ba:73:24:7a:44:b5:37:63:b9:43:
34:89:37:ad:35:2e:a2:49:b0:06:be:51:cd:81:64:
92:37:ee:23:29:0f:34:4e:d3:8c:a3:2a:6f:bd:57:
c7:1c:b6:d2:af:76:1a:d4:44:2c:68:b4:ca:5b:a6:
97:b4:63:9a:ff:98:6a:6d:7e:4c:3f:d8:8b:8b:c2:
e8:87:8a:95:01:cd:13:30:62:9c:ff:c2:7c:41:45:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F3:BD:8E:E4:1C:C4:87:06:C0:D7:48:84:12:FE:FF:69:EB:0A:B8
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1d:4a:95:4a:2b:62:e7:fe:71:f9:92:a1:b8:59:86:2e:fb:
cd:81:cc:d6:57:d6:a5:3c:f6:29:6d:35:3c:48:10:76:4c:5e:
b1:83:56:ac:8e:ad:66:88:af:a7:90:a4:60:af:5c:72:44:55:
5f:83:47:1e:85:99:42:74:ba:8a:8c:cc:b6:a6:a3:40:1e:0b:
dd:72:43:14:b6:b7:09:55:25:fe:dd:64:ac:62:30:40:cf:d5:
80:e9:e7:af:01:3f:08:bd:97:39:cb:9c:ca:bc:14:03:84:2a:
af:af:ad:02:fc:7b:69:86:c1:da:3f:79:91:50:45:d4:bc:68:
f3:d7:ca:b6:6e:2a:e7:2a:30:d2:50:34:ca:57:5b:5b:77:0b:
9f:da:d6:6f:b8:92:a8:f7:8a:d0:2a:f5:13:8e:d0:1f:c8:52:
ec:74:86:2f:69:03:64:1f:3e:f6:a8:24:20:72:c1:82:29:24:
f6:ec:f2:d2:6b:71:df:25:e9:7e:18:03:ed:68:55:c2:69:28:
61:14:d4:7d:40:15:e0:19:f7:a3:43:f2:18:ac:f0:81:df:0c:
16:10:12:a3:b6:6a:10:00:ce:6a:63:c6:87:0f:a3:99:85:f1:
3a:19:b8:86:f8:7f:73:24:b0:1e:15:c0:cc:28:8d:c1:b6:a8:
b7:f1:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:47:13 2026 by rpki-client