Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: ViMxtztpyOPQMkeAEebCuzQnLooGzuFuoEwvb+TNhnU=
Subject key identifier: 5C:AE:92:E8:0C:06:47:A9:34:5A:A3:C6:10:08:01:07:4A:9A:86:EF
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 01A0E9D2FC37C21E05A641AA634325572D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 0B8E
Signing time: Mon 28 Sep 2026 21:01:53 +0000
Manifest this update: Mon 28 Sep 2026 21:01:53 +0000
Manifest next update: Tue 29 Sep 2026 21:01:53 +0000
Files and hashes: 1: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (hash: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA=)
2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: Z2oy85xolLqgbnRMsi8cBJeun/JxM48vZtiqiEs65Fw=)
3: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (hash: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw=)
4: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (hash: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:fc:37:c2:1e:05:a6:41:aa:63:43:25:57:2d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Sep 28 21:01:53 2026 GMT
Not After : Sep 29 21:01:53 2026 GMT
Subject: CN=5cae92e80c0647a9345aa3c6100801074a9a86ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:f7:ea:ac:7e:d2:9a:12:70:e8:38:87:b3:
82:e8:ba:f0:e1:8b:74:01:cd:ad:e9:69:4a:c8:e7:
28:0c:0c:1d:30:00:1c:ce:03:1b:ab:80:66:20:d1:
e2:f7:b5:a5:d3:79:e2:cd:d9:a2:ea:ae:73:0c:45:
f6:89:f3:56:7d:69:9e:ca:3f:12:02:15:0e:95:3a:
b5:3c:75:03:1c:b9:e5:0b:61:8f:88:ca:c9:27:0d:
aa:84:15:7c:6f:7c:cc:c9:f7:bf:2a:e9:9d:53:50:
25:20:d5:de:8d:d6:12:91:06:53:51:e5:8f:06:33:
0b:af:f6:5d:89:43:5b:81:50:9c:43:79:9e:a7:f3:
ff:4b:20:39:5f:8e:93:2b:95:79:03:b1:4e:7d:07:
b4:32:74:ee:b2:ce:78:fc:79:d2:19:b5:f2:27:a7:
bf:fa:6e:d1:1b:bd:7c:89:dd:db:45:8b:24:fa:9e:
5c:1f:18:81:94:01:11:2b:a9:0a:90:a9:dd:a3:b0:
fc:e0:80:65:62:6f:37:de:aa:48:62:4d:64:22:f8:
1a:e4:5b:c9:3d:15:24:93:ce:05:45:cd:2d:20:99:
14:1e:49:8c:fe:10:4b:18:a7:d6:68:a0:1a:41:45:
19:54:e6:cb:bd:9d:a6:8d:ed:e6:53:f6:25:58:1c:
98:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AE:92:E8:0C:06:47:A9:34:5A:A3:C6:10:08:01:07:4A:9A:86:EF
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:77:75:c1:8a:88:af:be:76:76:47:88:46:0e:26:21:37:56:
aa:55:67:93:96:ab:02:0c:74:cd:73:84:b0:4a:a4:50:00:6e:
a9:ca:7a:93:17:78:64:44:1b:ba:24:d7:5c:ea:fb:ce:00:f3:
b7:4c:8b:a9:60:5c:d0:53:94:ca:18:3f:61:ec:2a:41:eb:a6:
5b:42:5e:6c:28:15:14:62:16:ea:4a:7f:6b:ec:44:9b:7d:4c:
d7:a5:3d:12:fe:e3:34:22:57:62:27:23:b0:32:29:af:1b:1d:
79:d2:f9:1a:d6:b9:90:b6:ec:16:4d:b7:45:02:14:53:83:1c:
97:ad:d6:96:76:d2:57:a5:27:ea:71:3c:7f:af:23:24:63:d4:
f0:ec:28:d4:73:92:7f:c2:0f:b6:cd:c8:f5:03:1e:4a:75:99:
eb:fe:f1:a8:4e:72:96:33:a2:13:5b:dc:e2:08:59:c9:3a:55:
cf:38:88:e7:f3:56:11:ea:8a:bd:10:d2:28:cb:69:3d:45:33:
69:b6:20:59:ed:95:84:8f:88:17:21:02:e9:65:8b:e9:78:08:
06:69:6f:93:10:4e:32:40:7f:3e:46:93:34:9a:99:a0:f4:38:
0b:ec:2e:a0:4b:ab:f3:3b:fa:40:54:c5:17:a4:50:a2:23:5a:
9d:ce:60:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:47:33 2026 by rpki-client