
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: U1+qXfxeoVxFqSZ7W/3Llz84YzGjFoeJfrbWey+Ts30=
Subject key identifier: 57:2A:0F:0C:0D:6F:DB:E7:28:C9:EE:60:21:26:7C:9B:D0:8C:AF:98
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 01A11D5124A47FA552E44766E413A8550521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 1A97
Signing time: Thu 08 Oct 2026 21:00:19 +0000
Manifest this update: Thu 08 Oct 2026 21:00:19 +0000
Manifest next update: Fri 09 Oct 2026 21:00:19 +0000
Files and hashes: 1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: D1mmhHoXPxw9GRpIoRCCs4n0PCXPti6d/ilFbTP7plE=)
2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:51:24:a4:7f:a5:52:e4:47:66:e4:13:a8:55:05:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Oct 8 21:00:19 2026 GMT
Not After : Oct 9 21:00:19 2026 GMT
Subject: CN=572a0f0c0d6fdbe728c9ee6021267c9bd08caf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:13:49:ed:45:a3:09:85:d7:2d:13:5d:3b:
e8:a5:5f:57:45:cf:46:d9:54:d5:04:32:35:bc:66:
af:d0:ba:04:24:03:8b:e3:76:a1:11:c2:0e:38:49:
c6:2f:44:a0:f0:87:24:00:35:43:a7:de:24:71:36:
59:dd:79:f7:60:67:fe:2a:03:5f:07:cc:64:0a:ce:
93:bf:e9:79:96:8d:33:16:e4:d1:84:9d:d8:6b:1b:
d4:81:ba:1d:79:3a:4f:7a:bc:e4:0e:79:25:16:09:
bb:d5:40:3c:e1:a9:48:30:5b:1f:dd:52:ef:6f:68:
39:d8:8c:24:b7:0b:a7:79:b1:8c:03:c2:ae:89:a6:
fc:2a:1b:f5:56:b0:5e:13:3d:e9:b1:49:3c:35:ae:
03:86:4c:4a:81:ac:5c:ea:ff:e6:f2:d6:f7:9d:b4:
ff:75:11:a1:6c:6b:83:68:91:97:fc:d8:46:9c:96:
38:18:ab:d9:72:53:d0:c6:de:0b:61:f6:90:ce:4c:
46:7f:35:d1:de:36:fd:9d:76:d5:9d:93:c6:cd:89:
1a:79:19:f9:31:03:8f:b8:37:93:7e:97:23:c0:ae:
b7:c5:a6:9c:ee:76:84:4e:93:8f:94:e5:9e:8f:13:
65:cc:d5:1d:55:92:0b:53:fe:d8:e8:df:17:c0:c1:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2A:0F:0C:0D:6F:DB:E7:28:C9:EE:60:21:26:7C:9B:D0:8C:AF:98
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:52:24:4c:56:31:0a:19:f7:0b:48:de:4b:a0:13:d0:6f:f2:
81:a6:03:4a:64:e7:e0:e1:72:c6:5b:81:d6:81:45:2a:71:00:
a4:23:e2:12:4f:26:b6:bf:f7:4d:c4:9b:23:e5:49:bb:35:2c:
79:05:a8:96:91:7c:47:8a:23:34:6d:ed:c9:e7:29:d1:3e:40:
7a:e6:72:05:59:4c:bf:7c:7b:f0:fe:de:e8:53:bd:4e:ea:2c:
26:18:3a:5f:d4:c4:be:c3:9e:c7:b5:9e:d5:90:34:54:39:22:
ab:2f:ef:7a:38:ef:66:7d:16:14:15:5c:da:a7:bf:09:0a:92:
d1:85:19:e6:e8:94:3a:1d:50:5e:34:95:1a:49:c9:4e:cf:83:
9d:6a:ca:98:34:08:af:0d:64:9e:dd:49:20:47:c8:d0:c2:d5:
24:6a:56:e2:85:17:6f:af:66:59:3a:8c:6d:2b:64:2e:0a:b5:
f3:4d:cb:95:82:80:e1:ef:49:ad:4c:5a:98:8e:20:04:b1:73:
f1:d2:35:36:53:76:fe:41:fa:7f:c7:b0:a5:15:b0:de:fa:05:
6b:87:0b:2d:6d:57:4d:60:2b:70:f1:c6:48:22:78:03:4b:7e:
0f:f8:4f:2c:5b:78:c8:96:6d:e7:9e:9e:40:31:67:eb:1b:82:
1f:cb:a5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:13:10 2026 by rpki-client