Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier: ST8raRutjYyQwlLc8mOdQ3f7+hLHDWlgMe99fmiZQ0A=
Subject key identifier: 3A:36:03:EB:6B:9B:94:7B:51:72:5D:C5:3E:9F:B1:84:D2:2E:77:4D
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 019D99996CDEDEFB1FEFAC387FADE1392722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number: 0E2F
Signing time: Fri 17 Apr 2026 04:01:02 +0000
Manifest this update: Fri 17 Apr 2026 04:01:02 +0000
Manifest next update: Sat 18 Apr 2026 04:01:02 +0000
Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: F/OSyUjEbIgxVtwawCra439N9ERdzbK4D/384GfRXx0=)
2: GJT01x6wwyCftHtrWIvsmyjBIms.roa (hash: ASc7SzAK6h3bsHuxvUa3vat9chLP4lA8Av0u9oM1Qs4=)
3: Mw9HiEEZk3waBmzFCokJoCJYeHU.roa (hash: 6sGwg0qogzNM4BdNuwLNu3Z3ohroqmMT+szTSBMU2DE=)
4: X3mascigLmZbak7QiDBSbbs3vrA.roa (hash: IylgO/sA2hsrQIbGafFY3tsGMHKTB8LlFvuICdNIo44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:6c:de:de:fb:1f:ef:ac:38:7f:ad:e1:39:27:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Apr 17 04:01:02 2026 GMT
Not After : Apr 18 04:01:02 2026 GMT
Subject: CN=3a3603eb6b9b947b51725dc53e9fb184d22e774d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:71:01:6f:a2:23:c9:c5:f8:d1:77:92:16:
e6:e7:2a:24:77:ac:5a:46:b4:03:66:b0:96:07:d7:
e7:e8:2d:b3:c4:6b:2b:36:f2:54:82:fd:9a:36:49:
6e:8e:38:43:25:1d:e5:41:3d:39:2a:26:74:29:ee:
ca:61:e4:5a:43:dc:ec:80:27:7f:58:a2:a4:94:8c:
bc:06:7d:e2:c1:f9:ee:7c:76:6c:26:f8:7e:5e:5e:
72:0c:fd:e6:62:ed:d3:b6:5d:a4:5d:90:5a:54:29:
12:24:f5:93:12:7e:e2:3c:d1:cd:ab:9c:35:69:bf:
d9:19:cf:61:98:34:b9:a2:63:2f:33:5d:1a:9d:c4:
c9:3a:1d:9f:02:7c:71:48:ab:59:39:00:1c:0c:4b:
a8:a5:d3:f2:4f:ce:16:1d:2f:11:e4:75:f7:7f:a0:
09:69:29:5a:66:00:24:06:33:90:0b:a4:17:80:f2:
c8:11:63:ce:18:3d:35:0c:f0:5a:ae:d1:16:a6:ad:
54:d7:d2:20:74:2a:f8:a6:ac:7e:e0:41:42:17:c7:
e7:43:e0:bb:30:4b:2f:8f:80:99:70:01:1d:83:62:
5e:7a:7e:3e:33:1d:6a:95:64:08:7d:da:41:1c:b5:
8d:d4:39:0b:ce:b5:b5:86:14:94:8b:ad:e0:3c:90:
61:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:36:03:EB:6B:9B:94:7B:51:72:5D:C5:3E:9F:B1:84:D2:2E:77:4D
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2f:07:e4:1e:c9:fa:39:95:dc:c2:45:30:5f:39:9f:3c:58:
2c:95:26:ca:fd:b1:ba:55:8c:bf:c5:a5:de:51:78:23:1f:d6:
36:23:18:67:52:3b:09:54:f2:18:99:76:e2:e2:f7:03:61:cc:
da:fc:24:a6:24:fb:53:fd:3a:23:d2:f3:ee:eb:29:91:b8:6a:
3c:53:ba:5d:1f:f6:de:fe:f7:6d:36:be:a3:eb:56:b8:d8:88:
26:47:92:b7:62:54:a6:e8:41:db:5c:0b:e7:f7:e1:0f:62:92:
c8:59:79:5e:48:e2:b4:ce:68:15:ae:2c:04:c5:d1:84:22:2a:
d8:bc:5b:25:59:f7:9e:df:07:86:fa:fb:90:ab:60:3f:26:bd:
aa:43:4e:8d:aa:60:4a:74:5d:1e:84:65:3b:b6:3d:89:ba:7d:
c7:50:ac:78:0f:17:6e:e5:85:8a:54:6f:58:87:13:e8:46:fc:
df:ff:d4:6b:fd:27:b9:2b:e3:5c:ca:c8:42:75:d9:e0:69:5e:
5d:f5:27:2d:04:30:2d:19:6d:18:28:50:37:24:b4:2d:c8:2b:
ed:9d:e4:f3:28:6f:5b:da:b9:39:ab:d3:0b:4e:0a:68:ab:21:
73:60:bf:32:4b:a2:b0:73:8b:d8:c9:5f:c6:11:f3:77:77:dc:
51:e3:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:12 2026 by rpki-client