Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft
File: h87xYB8_i1Dm11QuW7u9xgO1LZI.mft (raw, json)
Hash identifier: daR/51A0xd7k0/NH1tFoPO+0ZTqdMO7xWS5CjekhSVU=
Subject key identifier: 2D:4A:3F:2F:58:14:FF:07:07:E4:60:E5:0D:66:32:4C:8C:9B:51:70
Authority key identifier: 87:CE:F1:60:1F:3F:8B:50:E6:D7:54:2E:5B:BB:BD:C6:03:B5:2D:92
Certificate issuer: /CN=87cef1601f3f8b50e6d7542e5bbbbdc603b52d92
Certificate serial: 019D3263417C07CBEC591EF55B97029C2E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h87xYB8_i1Dm11QuW7u9xgO1LZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft
Manifest number: 9D
Signing time: Sat 28 Mar 2026 03:00:58 +0000
Manifest this update: Sat 28 Mar 2026 03:00:58 +0000
Manifest next update: Sun 29 Mar 2026 03:00:58 +0000
Files and hashes: 1: h87xYB8_i1Dm11QuW7u9xgO1LZI.crl (hash: 07A1scvY7Lf84xxMDh+y7zHpkhcmC+ZidqyYJWMR9Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h87xYB8_i1Dm11QuW7u9xgO1LZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:41:7c:07:cb:ec:59:1e:f5:5b:97:02:9c:2e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87cef1601f3f8b50e6d7542e5bbbbdc603b52d92
Validity
Not Before: Mar 28 03:00:58 2026 GMT
Not After : Mar 29 03:00:58 2026 GMT
Subject: CN=2d4a3f2f5814ff0707e460e50d66324c8c9b5170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:45:c8:00:84:9f:f4:b9:35:bb:f5:45:4b:
67:d6:84:1d:f2:c8:44:69:30:f0:ff:9b:86:e9:47:
29:a8:29:50:00:16:46:6e:93:d2:14:52:43:b9:d3:
65:c9:f8:a2:6b:9e:75:dc:d7:f4:ea:ad:b8:e5:a4:
2d:84:78:4d:59:e6:66:d0:34:72:e6:a4:cc:1c:ba:
cf:fa:ef:01:22:b5:8a:8f:bb:d3:f7:ec:74:5c:e3:
1e:05:c6:6c:29:61:c3:ac:7a:27:3e:4b:cb:d5:19:
ef:df:40:85:aa:70:28:f7:a3:40:61:f6:ad:0a:98:
08:d0:18:81:85:4f:ba:fc:1a:f9:ff:4e:f2:e4:a9:
9a:c2:e7:9e:07:8a:45:e2:67:1c:ab:e8:77:9c:a6:
da:5b:ea:1e:30:45:0e:db:1b:63:06:00:0b:a4:8b:
2d:27:23:27:ec:74:be:9b:ae:2b:5c:e1:eb:65:14:
0e:0e:26:66:52:81:a2:0c:cb:dd:d5:46:c2:23:4f:
6e:6e:5c:26:39:58:ed:0a:27:78:98:ce:92:71:15:
2c:48:5f:6f:e3:4d:4c:7f:53:23:d2:94:18:dc:ec:
79:d0:f2:e6:eb:a8:08:eb:d9:00:f3:7b:61:77:f6:
e8:58:48:bd:e2:34:0d:c4:42:89:de:4f:5f:38:20:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4A:3F:2F:58:14:FF:07:07:E4:60:E5:0D:66:32:4C:8C:9B:51:70
X509v3 Authority Key Identifier:
keyid:87:CE:F1:60:1F:3F:8B:50:E6:D7:54:2E:5B:BB:BD:C6:03:B5:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h87xYB8_i1Dm11QuW7u9xgO1LZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6d:ef:3a:fe:94:d1:66:6f:8b:cb:42:e0:fa:dc:95:7a:2a:
6c:ac:f6:c0:1e:8f:bd:8d:2c:4a:31:0c:e4:2a:d4:96:d7:3d:
ff:d3:9a:a0:57:36:9f:40:62:64:c2:80:cf:3f:5e:f9:0e:f1:
03:a6:c1:83:13:66:19:52:2b:3a:8d:6d:c8:ce:fc:36:b6:4f:
f8:e3:b5:c2:2a:06:1b:29:90:4a:67:de:7c:6d:0c:5e:dd:00:
a5:52:a3:49:eb:d8:be:b8:62:c6:f0:2c:f2:f5:93:4b:e8:1e:
d9:42:af:27:c3:6a:98:fe:64:7d:9e:8b:d8:9a:bf:35:3f:7c:
c4:cb:25:f1:52:4a:86:d9:19:d6:e9:79:77:c4:33:1a:17:41:
0a:3e:be:ad:65:9f:01:a8:f2:83:8f:be:3e:bd:21:9e:99:c6:
44:73:24:5b:44:4e:a4:8e:bf:3e:1b:aa:06:81:15:d6:b8:fc:
f8:66:e7:62:86:fe:4a:87:1c:94:fb:64:3d:94:68:09:25:81:
52:06:90:cb:de:b0:c3:75:9c:af:2c:09:63:37:95:b5:dd:c6:
71:c2:cf:e8:a3:e9:2e:b5:dd:27:6f:d8:b0:a2:d2:81:2f:d6:
f3:9f:26:0e:93:8a:7d:d9:03:5c:10:7f:9e:1e:b0:b5:6a:bb:
73:48:ef:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:01 2026 by rpki-client