Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: GmHUnIz4fqOImDpr2CuBGW9AAM/OC1Bq3+d205HRxVc=
Subject key identifier: C8:E1:1B:8A:13:82:3E:F3:3A:A1:5A:BD:6B:E7:1F:D1:06:2D:A2:21
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 019D2B4DF78F4AB140B12FF8DA9F37C349B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 0A1E
Signing time: Thu 26 Mar 2026 18:00:23 +0000
Manifest this update: Thu 26 Mar 2026 18:00:23 +0000
Manifest next update: Fri 27 Mar 2026 18:00:23 +0000
Files and hashes: 1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: 9OXC361+eQo4hYHPnUDWcMbMSVCMJIU63AeVVwUAdTs=)
3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4d:f7:8f:4a:b1:40:b1:2f:f8:da:9f:37:c3:49:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Mar 26 18:00:23 2026 GMT
Not After : Mar 27 18:00:23 2026 GMT
Subject: CN=c8e11b8a13823ef33aa15abd6be71fd1062da221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:19:94:00:22:11:3a:e5:c8:4e:f2:de:3b:74:
56:71:5d:f8:57:38:b3:fc:14:d2:9e:dc:39:bb:a8:
fe:c8:7e:94:11:bb:34:8e:31:cf:c5:08:66:37:fb:
fa:18:0c:5f:cc:f7:69:3a:bf:48:c5:f6:7e:f8:42:
3e:56:22:b9:d5:e7:3a:29:2d:7f:b4:22:1c:ba:3b:
c5:71:5e:a6:59:68:e4:cb:26:a0:35:1e:92:d7:af:
2b:0c:26:e3:96:87:ce:d7:63:14:e5:03:92:75:bb:
cb:67:83:b4:4e:4c:1d:e0:b0:ba:bb:ad:99:bd:72:
89:67:b3:69:40:6c:a9:35:f6:3f:f0:2b:52:72:62:
e0:86:00:e6:33:0f:98:45:5b:aa:31:1a:62:2a:41:
de:43:a9:ca:49:a2:f9:9b:75:63:89:8d:17:1e:e8:
3a:14:1a:ab:34:0a:ea:0d:d2:80:86:e6:f5:c5:b7:
25:65:0f:bf:59:2a:4f:e9:7c:10:8d:d7:13:c0:5c:
21:98:d2:c0:ae:f1:59:7a:95:8c:90:e7:8e:35:ac:
b5:95:49:f5:94:49:09:80:e8:4e:4a:23:0a:2f:fa:
e4:3c:8d:8a:1e:a5:c1:01:3e:07:41:95:6c:a0:01:
35:1e:cc:59:5a:45:26:c4:97:7f:e2:84:1c:9d:2c:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E1:1B:8A:13:82:3E:F3:3A:A1:5A:BD:6B:E7:1F:D1:06:2D:A2:21
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8f:b8:12:5d:2e:5f:0c:20:16:6a:23:fb:ff:34:ce:86:65:
c7:ad:68:fe:d8:1d:97:1d:bc:01:d7:aa:de:60:e5:11:56:ab:
52:31:ed:5b:38:02:c3:8c:52:e5:a5:6c:a3:45:2a:32:34:41:
b0:1f:03:f9:59:bf:d3:ca:44:18:df:32:40:e4:1d:01:d8:7b:
dc:ef:82:82:35:5f:e9:b5:87:16:ff:a5:54:cd:49:42:95:12:
98:4e:da:90:a6:4b:ec:f7:97:1f:89:a3:bf:11:b7:0b:62:70:
6d:c7:62:8e:ca:c9:8b:2f:b8:2a:44:16:36:1e:df:83:96:2c:
c9:e7:12:a2:28:fe:72:07:e6:9c:d4:62:23:7b:c8:7b:30:d7:
96:54:0c:0b:41:5d:a2:4b:88:b7:ed:db:46:01:37:34:15:85:
20:10:01:2e:d3:78:18:1b:cc:71:7f:76:0d:ca:7f:e5:a0:c4:
c8:42:e3:c9:8b:77:6a:2d:4f:b4:5c:37:d0:b7:4c:8b:ac:47:
0f:4f:32:61:6d:89:c7:e0:ca:31:84:4b:a8:d6:ca:8e:81:8d:
3f:2e:4c:32:37:e0:e8:4a:77:0e:b6:4f:2d:1c:16:13:53:30:
a2:47:cc:54:7b:18:88:1d:6a:a4:13:e0:a1:72:79:7b:56:90:
10:fb:19:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:58 2026 by rpki-client