Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: Tv7RhfwY5MbEHaIEULNdQxot4sQP/SQQq80nZYoCjHc=
Subject key identifier: 53:2A:06:44:AE:93:FF:95:C1:65:93:21:01:C4:0D:45:3D:87:9D:29
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 01A0D011ECBBE9451663342C2DB7CBAB3B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 0C01
Signing time: Wed 23 Sep 2026 21:00:30 +0000
Manifest this update: Wed 23 Sep 2026 21:00:30 +0000
Manifest next update: Thu 24 Sep 2026 21:00:30 +0000
Files and hashes: 1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: d72hNQGgajIxkXozkU7rASB3JFNDn60JTKFXKGAG6zo=)
3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:ec:bb:e9:45:16:63:34:2c:2d:b7:cb:ab:3b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Sep 23 21:00:30 2026 GMT
Not After : Sep 24 21:00:30 2026 GMT
Subject: CN=532a0644ae93ff95c165932101c40d453d879d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:a6:a6:f2:fd:f0:cc:7a:d9:4e:98:ba:c8:
27:b9:87:d8:10:25:51:2e:35:b6:e3:df:3a:67:2c:
27:01:f1:13:b3:7e:a2:36:94:d0:2a:81:19:e0:6c:
35:7b:98:98:fb:ed:d6:c8:12:45:01:8f:3a:18:08:
0f:b2:19:59:6f:da:2a:c3:3e:2f:08:1f:e8:1d:52:
a5:46:29:13:12:84:a2:46:f1:62:b2:f8:4c:cf:e3:
59:4a:21:b7:92:af:05:01:72:4f:72:07:4d:32:f6:
cb:19:b4:2b:89:fd:df:84:32:67:11:61:7e:27:0c:
39:29:d9:83:56:76:a3:06:fc:7e:10:6b:c6:d5:72:
35:89:b8:91:7a:7b:8d:11:5b:c4:5b:b5:79:cb:3e:
02:d2:b9:32:0a:2f:3a:2e:6a:2b:f7:94:49:5c:db:
66:56:9d:68:84:25:b0:6c:18:7e:e1:44:09:44:33:
83:9d:62:2c:0b:ff:88:f7:0a:3f:e6:b3:a2:06:ad:
bb:b1:30:5f:43:fe:9b:11:07:c9:1a:5c:65:7b:73:
e3:d3:0e:1d:51:9b:c9:71:53:26:09:85:d9:e3:d9:
62:d2:8b:e7:e3:d9:0f:f9:43:27:95:50:ba:12:8d:
39:9c:68:ff:d7:d3:44:bb:75:e4:ca:9f:24:32:60:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2A:06:44:AE:93:FF:95:C1:65:93:21:01:C4:0D:45:3D:87:9D:29
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e6:ad:0b:83:a2:fe:cf:71:15:fa:6b:63:62:c6:a3:c0:0b:
43:4f:56:26:c1:89:bf:de:4d:2f:9f:34:0b:05:6e:e7:a5:bb:
d5:49:b6:e3:f1:09:24:b8:0f:24:4b:9f:48:db:76:4f:ed:b2:
93:42:3b:94:b1:1b:e8:a2:b6:a3:ad:f4:fa:1a:81:73:29:b7:
a7:2b:1d:3e:7d:c3:63:fe:d1:e3:5f:a1:fd:b1:1d:9e:40:98:
58:6c:8b:99:0f:9e:73:e3:71:35:c0:6f:b8:b5:37:f4:83:51:
bc:28:eb:ba:fc:ef:f4:04:23:ab:7b:0a:aa:ac:3c:c4:a4:61:
a7:cd:43:cf:80:a0:55:ad:b9:e8:18:c8:41:39:33:2f:95:7b:
4d:4c:0e:ef:8b:9f:b6:fc:8b:85:63:8d:ba:52:ae:db:c6:28:
70:75:83:15:a0:9f:27:af:62:3e:f9:3b:f1:fd:8e:fa:5b:8a:
df:43:ab:97:f3:59:58:d1:46:54:28:24:52:9d:fb:10:61:2c:
47:91:1d:d7:12:6e:a7:66:72:c5:6d:54:e9:c0:36:74:da:b0:
21:d2:ea:89:76:74:8b:4d:21:8f:af:1f:6d:e9:ff:7c:13:22:
fb:13:86:35:60:31:d9:d9:77:56:c7:36:d9:c9:f6:47:1a:5b:
d3:db:e1:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEey76UUWYzQsLbfLqzt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4
NjZhYWMwHhcNMjYwOTIzMjEwMDMwWhcNMjYwOTI0MjEwMDMwWjAzMTEwLwYDVQQD
Eyg1MzJhMDY0NGFlOTNmZjk1YzE2NTkzMjEwMWM0MGQ0NTNkODc5ZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd2mpvL98Mx62U6YusgnuYfYECVR
LjW24986ZywnAfETs36iNpTQKoEZ4Gw1e5iY++3WyBJFAY86GAgPshlZb9oqwz4v
CB/oHVKlRikTEoSiRvFisvhMz+NZSiG3kq8FAXJPcgdNMvbLGbQrif3fhDJnEWF+
Jww5KdmDVnajBvx+EGvG1XI1ibiRenuNEVvEW7V5yz4C0rkyCi86Lmor95RJXNtm
Vp1ohCWwbBh+4UQJRDODnWIsC/+I9wo/5rOiBq27sTBfQ/6bEQfJGlxle3Pj0w4d
UZvJcVMmCYXZ49li0ovn49kP+UMnlVC6Eo05nGj/19NEu3Xkyp8kMmBbTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMqBkSuk/+VwWWTIQHEDUU9h50pMB8GA1UdIwQY
MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt
M2VmNWViN2M4NTk4LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4
LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuatC4Oi
/s9xFfprY2LGo8ALQ09WJsGJv95NL580CwVu56W71Um24/EJJLgPJEufSNt2T+2y
k0I7lLEb6KK2o630+hqBcym3pysdPn3DY/7R41+h/bEdnkCYWGyLmQ+ec+NxNcBv
uLU39INRvCjruvzv9AQjq3sKqqw8xKRhp81Dz4CgVa256BjIQTkzL5V7TUwO74uf
tvyLhWONulKu28YocHWDFaCfJ69iPvk78f2O+luK30Orl/NZWNFGVCgkUp37EGEs
R5Ed1xJup2ZyxW1U6cA2dNqwIdLqiXZ0i00hj68fben/fBMi+xOGNWAx2dl3Vsc2
2cn2Rxpb09vhUQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:18:10 2026 by rpki-client