Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
File: 89KYmJtPzgv8PBec7_anqgxN8Qc.mft (raw, json)
Hash identifier: weCL3WgGadQsJmnKhVvq/mqLsADFyHG7FJw0GR9He18=
Subject key identifier: CC:59:AC:75:6E:0E:74:82:9B:52:E5:04:F5:F5:6E:A1:54:BB:4F:01
Authority key identifier: F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
Certificate issuer: /CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Certificate serial: 01A128E90B082FF64D66841B98523C4FEF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
Manifest number: 0218
Signing time: Sun 11 Oct 2026 03:02:03 +0000
Manifest this update: Sun 11 Oct 2026 03:02:03 +0000
Manifest next update: Mon 12 Oct 2026 03:02:03 +0000
Files and hashes: 1: 89KYmJtPzgv8PBec7_anqgxN8Qc.crl (hash: O8Mzos5tlIQcHTRPveLwVxQZXq0Xql4T9Ymj7uHYDQQ=)
2: NjhjTKawIenVH3d-r5iLAxjav8U.roa (hash: SUgTiVzn0C0dt/13Npi6OivpMeE/2hH0/DP1jgqxSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e9:0b:08:2f:f6:4d:66:84:1b:98:52:3c:4f:ef:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Validity
Not Before: Oct 11 03:02:03 2026 GMT
Not After : Oct 12 03:02:03 2026 GMT
Subject: CN=cc59ac756e0e74829b52e504f5f56ea154bb4f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:9c:08:79:d6:4d:60:94:97:c2:1b:02:2b:
14:fb:c4:ef:7d:3f:49:a2:86:03:c7:e0:e9:ba:9e:
9d:86:b3:ea:8a:9b:ae:b9:80:e0:d3:bc:a3:85:53:
d8:14:7e:66:ad:6f:48:ea:83:8e:22:71:d2:5b:3d:
fa:15:68:ac:3e:db:cb:79:d5:b0:b9:98:a5:ca:f1:
a4:54:65:c7:75:3b:e6:4a:53:e3:53:f4:b8:96:f2:
29:2b:e3:6e:89:81:bf:02:49:24:36:7b:85:3c:50:
bf:9d:22:7a:eb:ec:c5:84:d6:80:4d:ec:04:49:af:
a8:07:9b:6c:9a:92:bd:54:ea:30:77:d0:44:bf:80:
8a:4d:ee:ce:1d:1b:39:48:64:e3:d5:4c:c5:e1:43:
77:52:39:e4:cf:3e:86:2f:e4:91:96:29:57:8b:00:
8f:cc:18:03:87:38:f4:76:06:8e:1e:c6:5f:21:bd:
cb:df:e1:a9:7b:ee:be:dd:7d:6b:ba:71:7c:c3:e7:
9f:56:40:10:1c:ad:df:99:be:e1:89:15:17:74:70:
74:17:3e:16:57:98:74:b7:34:28:77:08:8c:f1:6f:
5b:07:bc:af:76:c4:db:21:ec:29:df:15:3c:6e:4c:
8e:5f:9c:30:e9:f9:ec:cf:f9:a5:f0:b8:24:28:aa:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:59:AC:75:6E:0E:74:82:9B:52:E5:04:F5:F5:6E:A1:54:BB:4F:01
X509v3 Authority Key Identifier:
keyid:F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:99:78:13:a2:19:0b:e9:9c:4a:66:0d:b5:f2:13:4b:79:e6:
25:0b:21:d6:19:19:68:3a:a2:d3:b8:e9:24:34:96:ff:04:ef:
d6:df:1d:67:53:e2:fd:26:9e:de:10:d0:49:33:2c:d8:44:08:
65:92:7b:c7:d1:4b:67:ed:6a:6a:fb:cc:b9:99:b2:06:97:ad:
cf:89:21:5b:7e:57:8a:22:c5:f2:f6:e1:dc:29:9b:d1:bc:eb:
cf:e5:2b:19:7f:3c:a1:f9:b2:5d:71:f1:88:b0:26:44:3b:11:
88:fd:77:d8:3b:e2:90:1c:9c:4e:da:d9:7c:40:30:80:e4:5f:
6f:b2:91:e8:4a:7a:65:b9:91:8f:71:28:0d:45:d2:fe:13:be:
0e:d0:68:14:d1:0f:cb:1f:e9:c7:c6:a6:8b:dd:1e:c1:7b:a8:
e7:c8:3f:99:c8:e6:91:9b:51:ae:1d:97:e5:07:b8:31:f8:d9:
0e:db:38:bb:15:bf:d3:c1:6a:7d:c5:9d:f9:a8:48:5d:c5:b0:
23:13:a4:f0:eb:18:08:de:45:2e:80:08:78:dc:1b:9a:d7:a1:
1f:83:b3:09:7c:a8:f9:88:fc:7f:98:48:be:c2:9d:ba:a6:aa:
b3:de:5d:af:15:fe:c5:34:a0:40:94:48:9b:fc:77:28:47:ff:
55:60:c3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:42:35 2026 by rpki-client