Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
File: 89KYmJtPzgv8PBec7_anqgxN8Qc.mft (raw, json)
Hash identifier: o+buSfJgHzC4L7fzShL+c+EHZJzhfMUNU/ZOPDKLlJE=
Subject key identifier: B8:59:16:D4:90:E6:B5:09:D4:0D:89:C7:5E:12:C3:EA:A4:5F:C1:76
Authority key identifier: F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
Certificate issuer: /CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Certificate serial: 019EC2C9D8BA44BF74B2C84BAF5F93BE089C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
Manifest number: DA
Signing time: Sat 13 Jun 2026 21:01:08 +0000
Manifest this update: Sat 13 Jun 2026 21:01:08 +0000
Manifest next update: Sun 14 Jun 2026 21:01:08 +0000
Files and hashes: 1: 89KYmJtPzgv8PBec7_anqgxN8Qc.crl (hash: Iv1dmOTZTGBtO2rkQnqupS5I5QDZ4Y7prVW0v1ED5eg=)
2: NjhjTKawIenVH3d-r5iLAxjav8U.roa (hash: SUgTiVzn0C0dt/13Npi6OivpMeE/2hH0/DP1jgqxSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:d8:ba:44:bf:74:b2:c8:4b:af:5f:93:be:08:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Validity
Not Before: Jun 13 21:01:08 2026 GMT
Not After : Jun 14 21:01:08 2026 GMT
Subject: CN=b85916d490e6b509d40d89c75e12c3eaa45fc176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:91:32:b2:70:3b:63:0a:66:07:65:c0:23:
7a:7e:29:12:7c:17:d7:72:0a:c2:bf:71:70:b9:12:
37:54:0c:f7:13:dd:8e:a0:f6:cb:c6:fc:c2:8a:f9:
a7:31:04:dc:2a:cd:48:c4:c3:ba:76:90:4d:a2:b9:
0f:67:dd:c6:31:e2:f8:a8:e7:fd:6f:c9:75:b1:c1:
97:49:3a:52:e7:71:60:00:e9:d7:d3:78:f2:c2:bd:
d5:16:2b:b0:f6:e8:6c:21:62:69:c2:cc:29:74:7d:
a5:90:5c:80:b9:2a:6c:45:4d:73:05:a1:1a:42:63:
0c:57:d8:d3:72:6f:cd:c8:b5:b5:9a:e6:f2:33:e5:
15:1c:d1:94:22:0f:84:4c:a8:c5:95:a3:9d:45:0c:
49:d4:6e:74:21:db:c7:a3:20:dc:b2:72:f5:d2:8b:
81:7f:c0:4a:ab:f2:e7:f8:38:05:29:de:5c:0f:f4:
bd:ef:00:23:5c:7f:73:9d:6b:ea:40:b9:26:e2:83:
10:c1:e1:74:de:c3:08:99:3e:f8:e0:48:f3:0f:82:
0c:1e:9d:60:bc:07:c3:ce:de:5d:48:84:01:46:b5:
c6:33:c5:16:c1:3f:91:0d:02:d9:22:11:70:ca:75:
4c:f9:17:bd:ec:bf:f6:fb:54:fe:84:29:7b:a3:52:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:59:16:D4:90:E6:B5:09:D4:0D:89:C7:5E:12:C3:EA:A4:5F:C1:76
X509v3 Authority Key Identifier:
keyid:F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:8e:96:e0:a7:6d:99:d1:fb:59:12:80:65:84:d5:41:bf:8a:
58:d1:a2:85:85:ea:fa:5b:56:7b:ad:5d:1e:f6:86:a5:3e:e3:
91:98:cf:ce:20:ef:0d:37:5c:10:c7:84:ef:6e:82:16:54:fa:
cc:ef:8a:b2:84:0e:02:16:32:fd:d4:79:df:64:6e:5e:e1:e9:
ca:03:3b:c4:a8:a3:5b:9a:3b:6c:47:a4:75:dd:cc:f4:2f:43:
68:23:51:12:0b:f4:5f:48:39:66:34:28:30:3a:3a:bc:f1:87:
d4:00:5c:5b:a1:87:99:68:67:84:42:df:23:ea:66:e7:96:42:
43:68:c7:ff:99:88:dd:82:1d:67:f1:f0:34:4f:c1:69:ce:fa:
76:e3:77:d9:e3:2b:60:03:e0:2e:e9:c1:fc:dc:bb:2c:10:b0:
ba:d1:9d:3c:10:e3:03:b3:77:49:e2:b5:c9:05:ed:07:40:82:
44:e0:1c:28:de:f1:10:78:84:89:91:c5:c5:dc:ca:d0:4e:bf:
f2:7c:71:0e:97:73:d7:b3:dc:4e:5c:ba:78:0c:01:38:1a:2d:
9d:fd:3d:94:4e:78:f4:d1:91:f0:e7:dc:ac:e6:c1:be:a6:a9:
ec:bd:b4:65:7c:fa:cf:3c:e2:26:8c:0e:63:6f:9f:06:bb:4c:
f5:cc:82:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:01 2026 by rpki-client