Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: cfrte9HkSJP2CmD8iQn0xTG+82hE1T/zmnjUTU9k/q0=
Subject key identifier: 92:ED:2E:FF:C5:6B:D8:51:57:EC:AC:22:C9:9A:94:CF:06:FB:D7:C3
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 019CABD9D99D4DAC823615801B6B42B9FDD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 00:01:46 +0000
Manifest this update: Mon 02 Mar 2026 00:01:46 +0000
Manifest next update: Tue 03 Mar 2026 00:01:46 +0000
Files and hashes: 1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: XEd92bOc34UR2qFjUOECEgnV+nrXQahi8S6EFGjOQZo=)
2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d9:9d:4d:ac:82:36:15:80:1b:6b:42:b9:fd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Mar 2 00:01:46 2026 GMT
Not After : Mar 3 00:01:46 2026 GMT
Subject: CN=92ed2effc56bd85157ecac22c99a94cf06fbd7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:e8:a2:0f:04:cd:2d:d2:8d:b7:74:5d:40:
76:b2:80:46:8a:0b:45:d1:7b:8a:88:45:5f:b9:8b:
7a:35:72:61:96:41:08:32:ef:0b:47:cf:93:2c:e9:
8a:ba:ff:55:a3:2e:fe:5a:d0:83:c9:72:0f:39:4c:
3f:f3:48:55:d5:16:81:3f:1b:2d:76:04:65:37:15:
1b:f9:0a:01:fa:23:f2:0a:91:b0:f7:f4:11:4c:af:
0a:86:0f:53:ed:c1:43:6a:6b:7c:17:f4:fd:82:84:
5e:25:9c:e4:37:3f:67:12:94:52:a2:31:e4:3f:4d:
36:97:b0:cf:10:3d:11:42:0d:52:6c:5d:fa:71:b1:
21:73:a2:cf:86:95:e1:a4:14:c9:8d:5f:e9:a5:c8:
19:3e:cd:03:6b:e3:61:f2:b2:ea:0a:04:65:b2:f7:
9e:dd:10:61:52:d9:fa:d5:67:7e:0e:9b:2a:d0:c7:
3c:09:77:ca:e8:79:e8:fe:91:ef:86:11:62:b2:65:
68:15:d3:9d:de:98:52:90:0e:1a:1f:2d:64:43:a4:
6c:02:13:84:3b:af:f0:9b:41:68:63:bc:67:0d:72:
ab:c5:70:d6:a9:cc:10:71:3b:c4:51:19:5c:ef:28:
50:f8:93:ae:c2:e1:bf:0c:12:89:3d:b5:9f:a0:85:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:ED:2E:FF:C5:6B:D8:51:57:EC:AC:22:C9:9A:94:CF:06:FB:D7:C3
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b6:34:7e:86:19:78:ff:51:5a:2b:df:50:a6:a4:0b:c8:75:
9e:a1:a3:83:15:c9:d7:11:f0:8e:fe:81:c4:cf:ed:fc:da:32:
4e:aa:1f:b3:47:05:02:b1:b0:9d:4e:6d:20:ff:1d:1a:c9:06:
e4:3d:09:b4:ac:67:cb:ba:60:af:a4:61:de:ac:bb:94:83:9a:
f9:c9:2b:c4:5d:3d:91:8a:4c:3e:6c:88:fe:4b:8e:a2:d9:c5:
8d:dc:d3:d4:6c:b8:e2:14:24:7f:e0:54:8e:3e:92:ed:f5:3e:
07:2e:19:fa:b1:cb:2d:2a:41:9b:8f:c4:6e:09:64:49:66:fc:
f8:d4:30:a9:6b:65:30:16:05:32:c0:ac:07:b7:b2:8c:65:17:
2e:21:c6:58:8b:f0:17:23:c4:26:bf:92:d8:84:69:af:99:ef:
10:45:74:1b:b9:b0:67:86:86:43:0d:d3:cf:00:09:28:f2:21:
a4:c9:88:d9:7d:c8:9d:e1:9c:b6:9e:d1:07:38:4c:81:ad:7c:
6e:0d:c1:41:c1:80:fa:8f:1f:3a:ae:0e:48:6c:e0:94:a8:f5:
6c:0f:1d:46:26:e6:26:c7:20:3a:5b:0d:ab:e9:1c:0d:84:05:
4c:e2:60:32:52:eb:62:50:79:74:a0:55:6d:20:d0:f2:5d:09:
c5:58:38:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:41 2026 by rpki-client