Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
File: 89KYmJtPzgv8PBec7_anqgxN8Qc.mft (raw, json)
Hash identifier: lYT64xnr5VyWBDgVKMqDyAhpG8qSF+x3lk0q7qmErfQ=
Subject key identifier: 01:A3:91:DC:3D:98:8B:F4:91:D6:62:31:AE:7B:41:8F:10:EA:73:21
Authority key identifier: F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
Certificate issuer: /CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Certificate serial: 019D9D3F85AD2687C4CCFB50844C1E6667C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
Manifest number: 42
Signing time: Fri 17 Apr 2026 21:01:18 +0000
Manifest this update: Fri 17 Apr 2026 21:01:18 +0000
Manifest next update: Sat 18 Apr 2026 21:01:18 +0000
Files and hashes: 1: 89KYmJtPzgv8PBec7_anqgxN8Qc.crl (hash: e7o0ON+CbQPFrgVN/dzI7/3Zl0tbopvZz4WO7yHhGrU=)
2: NjhjTKawIenVH3d-r5iLAxjav8U.roa (hash: SUgTiVzn0C0dt/13Npi6OivpMeE/2hH0/DP1jgqxSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:85:ad:26:87:c4:cc:fb:50:84:4c:1e:66:67:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Validity
Not Before: Apr 17 21:01:18 2026 GMT
Not After : Apr 18 21:01:18 2026 GMT
Subject: CN=01a391dc3d988bf491d66231ae7b418f10ea7321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:d0:c8:09:6d:fb:cc:95:37:a7:6b:05:a7:
c4:1f:7c:2d:93:a1:d7:a6:c5:e7:14:56:29:4b:d7:
18:9a:df:59:7c:0b:6b:09:7d:82:e7:f2:3b:7a:a6:
05:e0:45:b0:7f:95:15:af:12:63:13:bd:14:86:e9:
20:46:8f:e5:4c:25:0f:b7:b8:a9:30:a7:82:c4:c2:
f4:21:ce:de:b7:c5:11:62:fe:8a:3b:b6:a0:3e:51:
1a:1b:46:1e:8f:39:da:e3:f4:63:38:20:01:42:3c:
4e:fb:cf:72:3a:07:02:a7:b0:30:a7:7d:29:76:63:
ad:4c:ef:31:aa:ff:cb:bb:53:f5:06:4b:a2:84:23:
f0:05:b3:ec:c1:46:05:b9:fe:c8:93:f2:0a:74:86:
0e:18:08:67:7f:15:99:0e:ef:ad:84:92:7c:27:b9:
a3:cd:9e:d1:d2:5d:e6:45:7b:a5:3d:6d:63:cd:e6:
42:e7:be:30:3e:7e:8b:52:c5:4f:50:fa:66:f2:53:
26:90:c9:58:bc:6c:11:55:57:e1:99:95:97:ba:da:
aa:c4:41:8a:e7:23:fe:a3:6a:43:94:db:50:66:6a:
13:d3:77:dd:0b:33:b3:92:26:2d:de:49:5a:f1:eb:
78:be:bd:9c:3f:cf:df:3a:6a:79:64:32:a4:15:84:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A3:91:DC:3D:98:8B:F4:91:D6:62:31:AE:7B:41:8F:10:EA:73:21
X509v3 Authority Key Identifier:
keyid:F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:93:ca:43:81:4d:3f:36:1b:59:cf:06:24:c3:aa:9e:ac:ab:
b0:4d:45:bb:08:ac:3f:40:5c:78:47:01:1d:fb:b0:23:ad:db:
e5:95:2b:c0:32:f2:b0:54:4b:58:87:0d:e7:8d:d5:b1:47:92:
1a:d7:e2:63:93:de:cf:a2:13:38:f7:94:ea:f9:1e:94:a3:83:
ad:25:3a:ac:4b:17:5c:13:66:14:a3:d4:60:6d:8b:62:b2:db:
ba:8a:eb:f4:0c:31:35:1d:4d:03:e6:be:19:62:4f:12:39:26:
c8:41:ba:e3:87:26:03:b1:db:c4:89:47:f6:a1:8a:9d:6e:74:
c2:37:bc:68:85:5e:4a:2d:02:00:a9:c3:ad:35:77:cf:60:0b:
d0:12:01:b2:6a:bf:3e:c2:da:6a:19:1a:c6:13:2d:80:4b:42:
55:48:e6:79:9a:db:0b:fc:ef:cd:b2:6a:04:05:85:db:d6:6a:
fb:ba:4d:af:44:ce:cd:65:d1:e5:16:a3:52:7e:f8:b3:28:2d:
ca:a5:f0:82:92:42:71:e0:88:ff:0d:c0:85:b4:b2:68:3f:41:
6f:63:a7:27:24:ca:5e:50:e4:14:22:fc:9a:43:3a:af:1c:42:
e3:e7:51:6f:e9:7b:a9:7c:c1:a8:cc:c0:cb:8f:f6:ac:66:1f:
73:e5:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:13:34 2026 by rpki-client