
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: vvaQITayI0rrmJrjbT4eFAdxtLCRdVqQgcPoz5zwBO0=
Subject key identifier: 16:38:D9:6B:98:32:94:17:70:86:1F:EA:53:13:98:CF:3F:27:E8:C4
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 019FAC759E39D0B9445984CDAD9B6FCC394F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 06:00:16 +0000
Manifest this update: Wed 29 Jul 2026 06:00:16 +0000
Manifest next update: Thu 30 Jul 2026 06:00:16 +0000
Files and hashes: 1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: I9zMRExFt30CvE/+SFvz5UHfGvnjtOYUsuT5JbXADO4=)
2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:9e:39:d0:b9:44:59:84:cd:ad:9b:6f:cc:39:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Jul 29 06:00:16 2026 GMT
Not After : Jul 30 06:00:16 2026 GMT
Subject: CN=1638d96b9832941770861fea531398cf3f27e8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:a5:ce:94:57:41:50:1b:eb:d8:d2:a4:fb:
9e:58:76:16:8a:a5:90:24:0c:9d:49:72:24:11:9b:
98:77:4f:21:1b:54:54:e5:e6:3f:de:a7:ad:3b:fe:
78:1a:48:00:82:a9:b4:6d:9e:9c:e6:8a:ed:20:88:
82:90:36:58:06:52:78:46:0c:01:27:33:49:a7:0b:
19:7b:aa:44:20:d3:0b:da:12:6e:b8:2f:55:70:5f:
86:a8:65:b2:30:94:26:47:69:f9:c7:92:df:60:c1:
0a:57:a0:29:de:16:ad:b9:bf:db:fb:3c:f0:3e:d9:
3d:e2:03:25:e0:bd:48:c6:9c:a7:98:fe:52:3b:d7:
d6:8a:46:0a:aa:31:6e:42:de:77:de:07:40:ef:ac:
a2:32:6c:78:ce:fe:bc:0a:cf:eb:bf:25:42:b2:d3:
58:ff:24:cf:6f:44:16:57:a1:bc:77:5e:9f:45:be:
f4:21:82:66:5c:ca:f0:fd:2e:34:13:3e:ab:da:bf:
7e:62:43:2c:96:1a:de:f7:43:9a:9f:d5:3e:d9:cc:
f8:3d:bc:8d:a2:34:7f:db:b3:51:66:16:d7:ab:3d:
36:0b:e1:c9:99:ec:70:13:5a:99:2c:99:24:22:e0:
24:86:81:d4:49:20:e7:cf:5f:a4:cb:9d:2b:91:d7:
12:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:38:D9:6B:98:32:94:17:70:86:1F:EA:53:13:98:CF:3F:27:E8:C4
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f4:c9:28:10:9f:cb:15:73:ff:7a:f5:9a:75:bd:c3:df:d8:
82:0a:08:6a:9a:25:dc:ed:1f:38:71:bd:b4:3b:aa:84:33:a3:
85:b7:30:ac:1d:1e:56:95:e7:1c:e0:20:f8:da:7a:2e:91:96:
89:3d:8e:bb:a1:81:83:29:f0:57:73:fd:e1:89:98:6b:7b:d5:
2a:c8:02:6d:75:cf:7f:e5:b0:0b:3d:a8:46:89:a5:f9:d5:41:
e1:a8:5f:73:4b:4d:66:ac:45:92:19:88:dc:a6:58:6f:52:3f:
fd:f6:79:f1:71:af:bd:8e:87:43:d7:a6:21:ee:96:4f:04:5f:
e0:61:0b:91:4b:92:78:6c:b7:02:f4:2f:a6:7d:8b:29:a3:21:
1f:bc:6f:b3:f8:fa:ab:c8:e1:a4:b4:be:19:19:9c:cb:4f:64:
50:6c:8e:7e:99:e3:1c:77:71:e8:08:fe:ed:9c:2f:60:78:4a:
44:d1:29:11:90:db:12:b5:81:29:c7:dc:41:bb:32:68:ae:1c:
50:20:a2:53:22:75:47:79:ea:ac:0a:cd:da:39:1e:bc:ab:e7:
92:15:fd:14:02:fa:37:50:c7:f6:bf:69:cc:40:20:ea:8a:b7:
86:da:37:6f:5f:63:0b:94:a5:26:e6:19:99:85:1f:fd:67:70:
a1:23:a3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:35:51 2026 by rpki-client