Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
File: 87WowAlYJeE_Rr2zcLf9ypufilI.mft (raw, json)
Hash identifier: Q1P1DJTxSPjeP9Z5Ap5MSR8DzhOJomtZ5EWIOOWRXJc=
Subject key identifier: DF:0F:94:A1:55:C5:AC:D9:52:B9:4E:33:6B:E1:81:1E:5E:7B:81:74
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Certificate issuer: /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial: 01A0C96B792F82866157E09C3A2B43ECC324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
Manifest number: 05D5
Signing time: Tue 22 Sep 2026 14:00:58 +0000
Manifest this update: Tue 22 Sep 2026 14:00:58 +0000
Manifest next update: Wed 23 Sep 2026 14:00:58 +0000
Files and hashes: 1: 87WowAlYJeE_Rr2zcLf9ypufilI.crl (hash: TZDIuUWWPpQ6cpT0jIB4i9m+nOABeCyXK4rjlZ4soAc=)
2: kvsR5vGqCUlad7hcwSexC9HOmQU.roa (hash: BQWcBL0pNsLmhZ/6jOKzXhoMqdBErbR1kzhV9E5bnP0=)
3: ps1esgrNwALs0rprEq1u_73GPvQ.asa (hash: FGyORXilz5BNYLMmlVd29mT3+yukVGqZlvtshiP/w0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:79:2f:82:86:61:57:e0:9c:3a:2b:43:ec:c3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Validity
Not Before: Sep 22 14:00:58 2026 GMT
Not After : Sep 23 14:00:58 2026 GMT
Subject: CN=df0f94a155c5acd952b94e336be1811e5e7b8174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:45:0b:10:9e:15:22:af:6d:e0:2a:d8:c8:
75:3e:45:68:63:86:6c:7f:5f:50:c4:10:fb:ac:96:
c5:03:12:96:1f:9e:1e:9d:b0:cb:1e:f2:9c:8d:60:
d5:32:a7:4c:5b:7a:17:3c:86:a1:a6:91:6c:94:c9:
5b:19:fc:7b:50:bb:41:a0:10:2c:bb:e2:78:4e:09:
1c:d4:75:14:8a:f3:76:92:0d:91:da:c4:18:28:49:
a5:66:a0:d0:49:33:bf:87:c2:7c:14:b9:68:72:40:
85:87:20:30:9e:25:23:cb:f0:e9:7d:66:7c:d2:a4:
d1:e7:73:33:ab:3f:95:3f:52:e9:0d:31:fe:bb:18:
9e:6a:dd:c7:23:0e:fa:a1:a1:13:fc:ae:6e:db:40:
1f:1e:15:27:05:c4:b1:88:84:33:0e:69:7d:07:72:
80:49:fd:08:91:04:27:66:59:c6:93:b1:9b:33:8b:
48:06:82:7a:d8:e0:f5:02:9f:80:88:15:57:32:d5:
84:29:cf:50:2a:f9:67:26:09:70:f2:08:ff:1e:29:
3b:2e:52:9a:12:47:d2:3e:db:25:b4:70:fc:d8:4e:
3f:5e:57:67:8d:87:40:47:25:49:59:20:11:ba:f9:
19:b9:6d:ca:7e:e8:f9:fa:5d:c0:ad:72:8c:ec:2b:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0F:94:A1:55:C5:AC:D9:52:B9:4E:33:6B:E1:81:1E:5E:7B:81:74
X509v3 Authority Key Identifier:
keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d3:af:59:17:df:7f:8c:4a:9b:65:50:15:e4:cd:9d:5b:48:
e1:d0:da:b9:18:48:6d:c0:a5:a5:2d:56:98:7f:ed:58:8a:81:
32:9f:b6:8c:fb:5c:a6:b8:27:bc:eb:29:84:90:b2:51:08:35:
0c:f9:15:d1:b1:e0:cd:88:97:72:65:9a:ff:66:27:0f:9c:54:
8e:b4:53:50:3d:cd:2c:ab:5f:6b:b5:08:e2:26:9d:46:c9:29:
e7:24:58:29:bf:83:71:b6:74:46:04:39:90:92:1d:c8:01:7b:
c0:f0:45:b4:d8:f8:11:e2:0b:32:39:09:75:74:9f:ee:ce:d5:
62:e8:23:30:5c:87:34:64:bf:f8:09:7d:06:41:81:bb:db:24:
7a:82:ce:be:35:28:49:24:80:44:10:9b:a3:0b:18:3b:2d:b9:
05:7c:0d:c7:f3:6e:ca:93:1f:46:69:cb:c5:a2:d8:ee:e7:36:
93:4b:51:8c:b2:0a:52:6a:4a:16:72:9d:92:e3:a1:e3:05:61:
77:df:8a:f7:f5:1e:72:f3:ac:8f:33:72:36:00:6f:dc:0d:2a:
19:0f:d4:47:68:90:0c:59:28:6c:a3:57:ba:b2:6f:be:6e:f5:
0b:e1:0e:b4:aa:21:d2:17:55:11:86:98:eb:4b:8c:82:95:a7:
ab:76:c2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:44:31 2026 by rpki-client