Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
File: 89KYmJtPzgv8PBec7_anqgxN8Qc.mft (raw, json)
Hash identifier: 97ML296/1JHFtNt0oSGnAfyjsyt+y7RiwRpzA1jZbG0=
Subject key identifier: 38:59:46:2C:DE:F8:77:23:43:4A:93:A0:DA:2D:79:64:E0:7C:A8:34
Authority key identifier: F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
Certificate issuer: /CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Certificate serial: 019FAC75D35B7BC8E72BF3FD603413A2294B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
Manifest number: 0153
Signing time: Wed 29 Jul 2026 06:00:30 +0000
Manifest this update: Wed 29 Jul 2026 06:00:30 +0000
Manifest next update: Thu 30 Jul 2026 06:00:30 +0000
Files and hashes: 1: 89KYmJtPzgv8PBec7_anqgxN8Qc.crl (hash: MRzYt3Ac3QSpwWQWb3WVvNQZrQx0Bt3+0wn45jB/quE=)
2: NjhjTKawIenVH3d-r5iLAxjav8U.roa (hash: SUgTiVzn0C0dt/13Npi6OivpMeE/2hH0/DP1jgqxSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:d3:5b:7b:c8:e7:2b:f3:fd:60:34:13:a2:29:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Validity
Not Before: Jul 29 06:00:30 2026 GMT
Not After : Jul 30 06:00:30 2026 GMT
Subject: CN=3859462cdef87723434a93a0da2d7964e07ca834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:e0:37:6b:1f:75:f4:2b:6a:0e:d7:fe:85:
8b:fe:c8:76:65:35:41:14:7f:55:d6:6c:93:83:54:
ee:27:16:57:90:74:c7:dc:98:25:0d:09:e4:10:e0:
db:ff:6a:7e:e3:cc:0b:53:3c:8c:b0:ff:bb:0b:da:
17:6f:f9:46:be:43:b1:cc:b8:72:7b:37:38:dc:97:
08:e3:00:06:86:79:fa:f8:14:00:5f:cf:39:b1:a4:
58:cb:09:12:58:57:d8:81:38:b2:a1:9a:50:9f:bb:
75:78:1f:e5:27:d0:b4:e0:e4:cc:82:32:be:c1:c8:
38:5a:c9:4a:da:95:35:d2:23:4f:bf:dd:52:d2:2a:
b2:6c:a4:f0:f2:1b:45:b1:84:11:98:ea:df:85:cc:
18:7b:c5:d3:62:d9:64:1d:48:9f:cd:ca:06:5f:c5:
9d:a2:94:c8:7b:69:bc:1a:be:5a:3a:ff:c9:ff:72:
28:2e:0d:cc:92:2e:9f:f5:e1:bc:4d:cf:d9:51:18:
d3:1e:20:10:55:72:e6:06:c6:3c:e3:b1:c8:5f:d3:
7e:66:c4:d9:69:46:e3:be:81:a5:97:96:9a:7e:0c:
98:bb:a9:f6:62:5b:48:ba:d5:60:32:ac:dd:7a:fb:
7a:de:00:b9:dd:b9:85:07:6a:58:8d:27:5d:87:b0:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:59:46:2C:DE:F8:77:23:43:4A:93:A0:DA:2D:79:64:E0:7C:A8:34
X509v3 Authority Key Identifier:
keyid:F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:12:eb:33:00:8b:94:35:58:6d:d8:3a:32:9e:8c:a0:00:cc:
58:ee:99:e3:4b:9b:38:de:dd:8d:02:2e:db:d2:de:46:8f:d9:
6f:5f:a8:f1:84:00:f9:6c:c8:af:31:c7:3e:cd:a1:8f:5f:3d:
69:1b:c1:e2:73:23:25:5c:0a:22:47:eb:e0:c2:9a:6f:a6:6e:
cc:87:d0:31:27:4b:15:80:c0:44:26:07:99:a3:1d:fc:56:01:
9d:36:16:6b:a5:73:e6:dc:80:eb:08:84:c2:ad:de:86:58:92:
9d:4c:6f:ef:1f:d8:3d:b0:97:ef:16:24:79:89:4f:56:6e:b9:
15:b9:71:8c:fd:dd:09:39:d5:7e:b7:d6:1b:d5:1a:df:71:50:
8f:72:ba:60:88:4f:69:e1:2e:23:97:ac:68:1f:18:6f:95:a0:
14:cb:d2:ce:e4:de:22:24:03:28:13:f8:fb:38:3b:95:01:3e:
f0:3b:68:6b:ae:70:b2:1f:78:2a:e3:78:6c:b4:f7:28:52:a9:
70:58:68:a6:41:99:70:3c:c8:41:a5:f6:ca:c3:b2:ab:4a:b1:
f0:94:81:c4:e4:c2:f3:d1:5e:dd:fd:0c:65:bf:05:49:85:31:
b5:0a:d2:4d:c3:b4:a6:76:52:6e:cd:31:a0:4a:14:f6:28:b6:
89:f3:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:50:33 2026 by rpki-client