Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier: voZIA+o9YTLwvnsP9mixq7U9l+3FLlxjkhuJPmScoFg=
Subject key identifier: 09:04:E4:3E:A4:C8:48:69:97:9C:89:6B:D3:B4:25:8C:05:04:14:D5
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 019CAA215666D04CD00E970D5C029D027CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number: 0DB3
Signing time: Sun 01 Mar 2026 16:00:37 +0000
Manifest this update: Sun 01 Mar 2026 16:00:37 +0000
Manifest next update: Mon 02 Mar 2026 16:00:37 +0000
Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: S1x6nibNOt/ILtkysMPEicBJGElguEPYPteVOiauq4o=)
2: GJT01x6wwyCftHtrWIvsmyjBIms.roa (hash: ASc7SzAK6h3bsHuxvUa3vat9chLP4lA8Av0u9oM1Qs4=)
3: Mw9HiEEZk3waBmzFCokJoCJYeHU.roa (hash: 6sGwg0qogzNM4BdNuwLNu3Z3ohroqmMT+szTSBMU2DE=)
4: X3mascigLmZbak7QiDBSbbs3vrA.roa (hash: IylgO/sA2hsrQIbGafFY3tsGMHKTB8LlFvuICdNIo44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:56:66:d0:4c:d0:0e:97:0d:5c:02:9d:02:7c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Mar 1 16:00:37 2026 GMT
Not After : Mar 2 16:00:37 2026 GMT
Subject: CN=0904e43ea4c84869979c896bd3b4258c050414d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:df:25:80:d7:40:34:e9:26:53:77:65:7b:2e:
53:a3:a9:d7:fb:3a:d2:95:e7:8b:e7:0d:ac:7c:06:
6e:9e:56:84:4c:bb:8b:4c:c5:42:e1:aa:9a:8e:0f:
2f:31:6e:de:2a:9b:b3:5a:80:fb:8b:1a:d3:b1:2b:
5c:4a:6b:36:57:29:57:86:75:27:dc:97:88:b7:f9:
47:43:82:19:96:66:97:05:f9:fd:c7:d7:eb:88:fc:
fa:fe:42:b0:e6:87:19:a1:46:b0:0c:af:39:68:27:
4e:15:1f:62:51:fd:27:d7:c7:97:99:43:35:38:68:
4c:85:b3:d7:b4:52:50:fe:cf:f9:7c:63:0e:b7:95:
82:6f:51:0c:03:22:0f:05:1e:42:ae:d9:bd:33:7f:
40:2a:e8:c2:ad:b8:3b:ad:c4:68:62:ae:36:27:e4:
ef:6b:92:a6:fd:e4:88:01:32:f1:90:08:10:6f:53:
b5:32:f7:ec:57:df:6f:89:44:22:61:39:fc:79:b4:
bd:df:8d:b6:c5:11:0f:43:46:17:e8:31:34:74:78:
36:58:f0:b1:2a:a2:0d:94:f3:df:9f:8c:d3:28:b7:
3c:a5:1e:69:b2:b7:34:c5:f0:10:5a:a2:2b:a1:01:
c6:be:77:60:c6:81:89:e6:cf:27:4e:f1:c9:ec:c7:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:04:E4:3E:A4:C8:48:69:97:9C:89:6B:D3:B4:25:8C:05:04:14:D5
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fb:38:13:96:ad:a5:88:42:a6:8d:12:e4:84:4e:92:a7:dc:
fc:73:6a:cd:27:74:73:d4:8b:f5:01:a1:ae:cc:a3:6e:c4:38:
db:77:74:62:61:b7:80:d0:29:26:66:0c:89:df:9f:bb:d4:9f:
05:2d:80:64:39:86:d4:92:2b:a5:e2:80:d2:00:c3:57:d6:94:
a4:fa:b9:81:ce:b8:e4:a6:ae:3d:4d:72:45:66:d8:1b:48:59:
fb:13:11:ea:31:01:ca:f4:cf:49:1b:24:ab:63:78:27:72:06:
55:97:30:3a:7b:56:11:34:5b:83:ee:73:6a:b7:48:d0:f2:3d:
94:98:18:c3:f5:a1:eb:48:79:dd:c0:50:be:ab:b7:16:74:bf:
d7:eb:9a:fc:4c:93:a7:f9:26:f7:ee:13:de:cf:ce:88:73:6e:
38:3c:1d:fa:81:cb:11:d5:56:ed:9f:7a:00:0b:49:3a:b1:c8:
39:9f:44:b6:7b:69:59:e7:a8:97:40:1c:a0:8d:97:7c:25:7b:
b3:eb:a6:01:9d:2c:1c:28:6f:62:ef:e5:c4:d2:51:4a:d1:70:
9e:9e:ac:87:cb:c5:78:c7:13:e1:81:1c:dd:64:c1:89:a4:75:
95:e5:54:91:74:c1:fe:df:2f:9d:1e:e4:d3:75:d4:20:ee:72:
28:b5:f5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:22 2026 by rpki-client