Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: T40IiKxoWoLQ89bbgAMVZOTWchIMlm4N2k0KwM9FhYU=
Subject key identifier: 4D:AB:CC:11:DE:FD:63:0B:87:33:96:B0:20:77:BC:16:E8:FE:75:70
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 019CAA8FE6E0686A1A51C1A5E61373F19C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 095B
Signing time: Sun 01 Mar 2026 18:01:23 +0000
Manifest this update: Sun 01 Mar 2026 18:01:23 +0000
Manifest next update: Mon 02 Mar 2026 18:01:23 +0000
Files and hashes: 1: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (hash: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA=)
2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: WdsYMhS9b5DlQu5qgQ4cLJ80uISrVbYx5h1X2rLlviY=)
3: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (hash: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw=)
4: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (hash: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e6:e0:68:6a:1a:51:c1:a5:e6:13:73:f1:9c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Mar 1 18:01:23 2026 GMT
Not After : Mar 2 18:01:23 2026 GMT
Subject: CN=4dabcc11defd630b873396b02077bc16e8fe7570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:03:7f:90:68:61:31:96:6a:e5:9c:b1:bb:
61:da:c4:f2:96:e6:8d:d3:8d:a1:25:56:8e:ce:8f:
74:4e:fe:81:4e:ee:88:20:97:9e:9d:78:ad:65:21:
26:ac:8a:e8:b6:d7:20:6f:e8:6e:00:60:17:6c:e4:
44:54:3c:26:e2:42:34:6e:d3:85:f2:9f:79:08:5e:
bd:88:da:08:8a:e1:be:92:06:75:88:bc:db:b1:f1:
f6:05:a8:ee:95:ff:6b:21:2c:73:9a:2c:15:a8:b7:
ee:0a:56:1c:38:a8:e9:24:78:ef:49:6e:3c:b3:3c:
a0:26:75:8d:17:c6:b8:be:75:30:92:df:fe:98:c7:
9e:d2:4b:1e:fb:aa:05:85:21:08:71:d6:ff:01:c1:
31:39:49:8c:a9:03:c8:50:03:4b:9c:37:3b:30:56:
af:9a:9a:5c:34:be:3f:2e:70:a9:d0:44:10:07:8a:
7b:24:cf:cd:fd:0b:5f:e2:2f:5d:f6:df:8c:4f:4e:
e6:57:fb:47:6d:1e:cb:53:6e:91:74:44:db:22:6f:
d2:86:8b:ec:45:c5:54:82:59:6c:fe:8e:7b:4c:a3:
80:bd:6b:5a:61:66:4f:9f:ce:a3:f2:28:69:ce:32:
59:3a:ca:e3:c1:52:51:06:0e:9b:37:7e:25:df:db:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AB:CC:11:DE:FD:63:0B:87:33:96:B0:20:77:BC:16:E8:FE:75:70
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e1:b4:58:74:9d:60:88:05:84:65:6c:27:60:5e:60:56:68:
ad:25:4f:00:ce:e5:47:d2:fb:3f:86:d2:60:2b:c6:80:29:2c:
ab:b4:92:f4:2e:66:a4:62:82:4b:02:7e:4f:9c:b8:81:e4:6c:
cb:60:33:c4:c1:0d:b8:59:fc:98:e4:f0:ae:51:a1:17:f5:32:
96:37:8e:e8:eb:a6:c9:b0:95:76:a9:22:68:70:a0:a7:35:3d:
e6:c7:39:83:4e:d2:fa:5a:26:a9:20:c6:f2:75:db:7e:31:c8:
c6:33:68:cf:4a:27:0e:5b:00:2a:31:ec:3d:c8:4e:94:f2:b1:
aa:a7:b1:cd:04:cc:a7:ab:28:ee:45:2f:67:e3:96:01:ef:6a:
46:b3:23:6f:9e:b6:23:df:3a:7a:2a:6f:dc:bd:3c:15:62:a2:
11:1a:10:5f:62:9d:ee:04:b4:e1:48:60:fa:71:8f:44:41:79:
a8:ac:f2:e7:06:51:e1:96:0c:f7:3d:bf:61:66:48:6b:4b:d6:
15:5e:18:26:e1:9b:ab:0b:79:3b:02:a5:9e:c5:3e:6e:81:a6:
d9:93:ed:c1:75:27:32:c0:20:74:5b:6a:5f:44:40:a0:96:7d:
ac:a0:b7:13:5f:db:1a:0d:04:29:12:f9:d8:e9:3a:5b:90:24:
21:38:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:47 2026 by rpki-client