Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: I3iggNhmE2dJXAkzs7VsMMWjzvstnPZC598ADtpsxqY=
Subject key identifier: 96:CA:71:29:3F:AD:AE:8F:88:E6:DE:33:FA:0D:8F:AC:7E:0C:FE:37
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 019D9BF51949915E1A7BAC60C6DF6753BC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 09D8
Signing time: Fri 17 Apr 2026 15:00:24 +0000
Manifest this update: Fri 17 Apr 2026 15:00:24 +0000
Manifest next update: Sat 18 Apr 2026 15:00:24 +0000
Files and hashes: 1: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (hash: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA=)
2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: ccUmO6cdHXy/uf9dUMKMip0NeLfCngBN9laqf0rvS9Y=)
3: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (hash: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw=)
4: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (hash: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:19:49:91:5e:1a:7b:ac:60:c6:df:67:53:bc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Apr 17 15:00:24 2026 GMT
Not After : Apr 18 15:00:24 2026 GMT
Subject: CN=96ca71293fadae8f88e6de33fa0d8fac7e0cfe37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:75:7b:b6:91:89:49:ef:d8:7f:ca:11:ca:
76:28:84:5d:c6:cc:c6:0a:17:3e:4c:46:e1:d2:98:
33:0e:43:15:97:e6:8c:d5:42:86:6f:80:cf:7f:0c:
87:79:4c:ab:1e:f1:c7:71:4e:a6:93:06:52:a0:e4:
48:68:5d:fd:19:b7:60:16:a2:7f:12:21:06:29:4c:
a1:1a:d9:dd:6b:5f:c5:dd:32:fe:93:dd:a1:3f:9f:
89:2c:a2:49:f9:9a:bc:f4:b1:5c:ff:85:e1:8d:09:
c5:58:cc:c0:c0:19:ff:18:3a:3e:1d:fd:d7:55:84:
6f:f3:96:06:76:d4:ff:1e:fa:71:e1:3a:3e:40:cd:
74:65:c6:72:2d:45:79:c0:11:03:6a:24:0b:4c:9f:
38:58:69:12:de:c6:74:8e:7d:f4:09:99:d0:72:4a:
85:41:42:37:f2:26:2d:f4:62:bb:f6:ae:b3:8e:ee:
8e:8d:7f:8a:c7:20:ed:be:e1:3c:f4:c3:03:dc:68:
61:f0:3a:78:d3:d3:20:ec:ac:8e:af:68:c0:1a:48:
eb:6a:9c:8b:aa:eb:87:28:91:f7:d4:3d:64:49:30:
dc:07:06:5e:c4:df:a7:da:f4:49:97:21:d6:e4:e6:
ba:77:ff:d0:4b:b2:2f:f0:4f:16:7b:fe:68:3b:2b:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CA:71:29:3F:AD:AE:8F:88:E6:DE:33:FA:0D:8F:AC:7E:0C:FE:37
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2c:d7:55:a0:97:68:b0:28:46:e9:2f:f3:5c:2d:08:cf:8d:
27:57:84:78:d4:d7:4a:ae:5a:7d:f3:17:d4:6f:ba:9f:b1:48:
6c:19:26:6d:ec:40:b9:9b:95:85:25:c0:1f:13:c1:bd:23:fa:
2b:a1:00:5e:c0:3f:f9:3d:c6:f0:d8:4a:b7:ef:f7:35:ec:e4:
89:09:40:30:71:2a:73:e6:44:1c:91:ff:81:9e:62:c6:b9:a9:
4e:63:6a:2d:96:41:0a:f7:7a:1d:78:bf:2e:6a:96:4b:05:5e:
7b:d8:9e:21:a8:53:3a:a7:41:29:cd:7f:d4:c9:97:71:d2:6e:
20:3a:d9:d0:3d:4d:02:21:43:04:f5:f8:4c:da:d7:52:99:62:
d4:bd:92:65:ac:f6:da:79:54:02:0a:47:c1:84:9a:ce:3d:56:
ed:b4:78:88:6f:45:42:50:76:01:d6:2e:a2:34:5e:fd:e0:8a:
08:a2:a2:6e:1b:ce:b3:a0:34:23:8a:1c:3f:9e:81:ff:f5:72:
ae:2f:9f:c4:71:24:a4:78:03:84:1b:48:f2:60:78:4f:59:67:
55:5a:e3:9a:83:43:22:19:b2:ae:0d:9b:36:4f:02:75:8d:15:
62:42:fc:7c:10:99:67:44:56:11:db:0d:7a:d3:02:97:5a:f1:
0e:a1:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:23:26 2026 by rpki-client