Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: ITF4tm7Uw1s+DStaL/RWFa9dLlCYimlwv30FmlDrjvs=
Subject key identifier: 3F:3A:F6:2F:D9:BF:63:6F:12:AA:D4:A3:3F:66:7F:6F:C3:2B:15:53
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 019D277277DB752AA50348FA570714CE7586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 0A1C
Signing time: Thu 26 Mar 2026 00:01:46 +0000
Manifest this update: Thu 26 Mar 2026 00:01:46 +0000
Manifest next update: Fri 27 Mar 2026 00:01:46 +0000
Files and hashes: 1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: FtwD1v/jECjAFuLF2OKFdAPTUj9elK69ujJZkUppyWg=)
3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:77:db:75:2a:a5:03:48:fa:57:07:14:ce:75:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Mar 26 00:01:46 2026 GMT
Not After : Mar 27 00:01:46 2026 GMT
Subject: CN=3f3af62fd9bf636f12aad4a33f667f6fc32b1553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:fb:fb:40:7c:38:c6:22:00:4e:83:dd:0e:
e9:e2:ce:1a:06:de:2e:41:fd:02:41:14:a6:9a:9f:
72:86:7b:07:ff:69:96:aa:e1:cc:26:ab:95:14:b8:
00:77:d2:d1:1c:ae:7d:5a:22:f1:2f:08:1c:54:e4:
54:0f:60:d1:0c:22:2c:43:43:56:ce:fb:a8:b5:1a:
4f:92:32:70:ed:41:f8:49:66:02:a6:fa:8b:7c:64:
bf:ed:d5:10:04:33:8d:c7:1f:3f:e1:c1:1a:b2:28:
0b:eb:a5:68:80:e7:8f:df:35:67:ec:fe:cb:29:68:
f0:04:8e:1f:3d:e5:78:12:c1:ce:bd:e8:22:e8:51:
ea:1d:3c:c8:88:78:36:2f:90:a6:13:64:de:22:f9:
65:2e:0e:4e:70:a3:6f:7e:19:c4:0f:89:bc:7f:ef:
9f:43:d3:2b:c5:cd:b8:6d:bf:12:84:24:92:2a:76:
a1:b9:94:06:b8:07:57:a8:01:d4:51:41:b3:d5:52:
d4:d8:65:df:61:19:9b:0c:49:43:98:72:8e:bb:25:
20:76:ba:de:27:ab:aa:d4:cc:c6:dd:b8:37:13:26:
2b:a6:ac:1c:89:cf:89:e5:6e:75:83:d4:60:f0:1f:
c0:65:be:e5:57:42:0d:57:4a:f8:6e:d4:a2:79:bb:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3A:F6:2F:D9:BF:63:6F:12:AA:D4:A3:3F:66:7F:6F:C3:2B:15:53
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:73:0c:13:e5:91:f6:8d:fe:05:70:ba:0d:43:8e:0a:8b:80:
62:4c:22:1b:d0:3f:48:df:4b:8f:75:35:9d:0c:14:93:6e:1d:
7b:c3:d7:5e:04:88:ae:d8:6f:37:23:d4:18:61:11:43:ee:84:
f0:4e:12:34:b8:53:ab:26:dc:f8:86:6c:01:90:89:e7:86:28:
ad:10:d2:59:b8:66:d4:72:ad:cb:19:59:57:50:1d:9e:70:dc:
3a:48:ce:a2:44:49:43:91:d2:87:e2:43:79:57:65:2c:60:51:
6a:75:73:00:b0:1f:51:3e:e9:a4:db:66:ab:75:e0:40:ed:60:
39:f8:0d:67:4b:49:81:ae:ca:71:2d:a8:3e:c9:23:b4:de:85:
b5:14:70:df:5e:07:fb:2c:20:db:b3:71:79:a4:f4:e3:ff:cd:
f0:14:2b:33:d4:27:b0:25:92:ef:4d:0b:60:c8:c2:e2:07:5c:
6d:15:80:28:f1:a2:95:de:7c:90:d8:8b:da:16:51:bc:fe:54:
8c:fd:f3:56:da:bf:08:90:07:09:56:84:71:6b:9c:41:01:15:
e3:3c:e9:4b:bd:50:fc:87:56:c9:88:7b:e3:7c:c3:bf:40:85:
45:d8:1b:eb:4f:c6:f6:50:81:1d:18:13:91:f1:64:9e:51:02:
b9:14:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:09 2026 by rpki-client