Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: oPKQ4fWCdLEuWrOrnD8iJEgHaosizuMLUfjtvf1EerA=
Subject key identifier: 1C:16:6F:E4:6D:18:73:2A:C9:BA:40:DF:90:7E:79:B1:1F:75:1E:54
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 019D9D3EB75FB46A8E9E396AAB4470A36437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 21:00:26 +0000
Manifest this update: Fri 17 Apr 2026 21:00:26 +0000
Manifest next update: Sat 18 Apr 2026 21:00:26 +0000
Files and hashes: 1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: KliYNg+WY4Ja0UJpWc3SLktfjsLMyR9Nobgv18rp/cI=)
2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:b7:5f:b4:6a:8e:9e:39:6a:ab:44:70:a3:64:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Apr 17 21:00:26 2026 GMT
Not After : Apr 18 21:00:26 2026 GMT
Subject: CN=1c166fe46d18732ac9ba40df907e79b11f751e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:b4:5e:a6:90:91:01:17:c4:dc:0e:d7:9d:
34:96:d2:c6:b1:15:01:de:01:f3:9d:30:75:57:8a:
d3:87:f5:a2:8c:cf:bd:b1:a5:4c:38:b5:93:2a:45:
c7:30:cf:7f:f0:15:54:30:23:3e:22:a8:df:e1:24:
4a:fe:72:2e:51:9a:41:04:b3:3e:b9:43:b3:2a:72:
ae:af:93:be:21:4b:f1:77:9b:b7:2e:59:70:2c:29:
3a:d6:c5:66:ed:d3:6b:81:42:43:25:5a:82:e6:88:
3d:42:96:2e:1e:d8:7e:02:ee:9c:e1:66:37:6d:e1:
f9:a7:0d:e6:25:d2:b2:6d:60:7c:a1:f8:88:01:15:
56:5d:32:08:ab:e7:34:81:2f:46:ef:bd:de:bf:ea:
a1:46:1e:a7:cc:ba:65:60:a1:19:96:2d:be:73:b9:
19:ba:94:4f:c6:39:c1:99:1b:5e:f4:df:5e:1b:94:
5e:64:fc:83:64:84:b7:bd:ad:e1:47:50:73:8e:9c:
24:4b:41:47:7a:09:eb:5d:e8:22:11:c4:91:4f:5c:
d6:f5:1b:e7:80:0c:57:86:c5:cc:df:82:81:97:3d:
bb:91:55:5b:3e:2b:c4:2b:3a:aa:bb:a2:06:a6:94:
4f:76:5a:dc:cd:c2:b0:f7:2d:27:66:7f:25:b8:bf:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:16:6F:E4:6D:18:73:2A:C9:BA:40:DF:90:7E:79:B1:1F:75:1E:54
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d1:1d:be:fa:e3:38:b5:bf:65:fc:eb:3e:30:1f:41:1c:c4:
c7:58:2c:2c:1c:11:9c:03:ec:97:34:ae:23:74:75:bf:b8:fe:
02:65:52:6c:23:f9:d2:69:11:32:96:c8:68:b7:ae:0c:75:bc:
be:22:fc:8d:28:39:67:0a:31:ab:00:56:ef:8d:3d:77:ed:eb:
e2:e7:93:83:34:aa:7e:c6:4e:7f:1d:ea:71:aa:7b:ea:d0:5d:
0a:0b:b7:3b:76:d8:77:ac:43:e1:26:40:3d:5b:7d:5f:5b:1f:
70:0c:71:13:bb:81:a8:ff:09:6a:2a:4b:a2:6c:e0:b5:2b:96:
82:98:de:a2:77:3e:90:81:26:7f:cd:61:c0:09:bf:6e:5f:0d:
c1:e5:2d:be:3f:34:93:7a:39:2e:a7:f8:f4:9a:13:03:67:c9:
ff:a5:5e:0b:36:83:fc:77:3f:96:79:3b:3e:fc:22:cc:63:3b:
0d:1f:47:c3:7a:92:0e:65:41:6b:e4:3c:95:13:1b:d8:34:ac:
09:a7:f4:b3:ec:11:c7:45:06:97:3a:18:38:5b:49:a5:88:88:
2d:d8:79:a1:3d:12:ea:bf:65:44:58:f1:75:15:47:29:8a:9a:
db:b5:64:65:2a:1a:56:2c:bc:fe:98:72:b6:04:67:57:d8:d0:
73:9f:d7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:48 2026 by rpki-client