Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
File: 87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json)
Hash identifier: oyl7mORb/hHxbCRb2EcIkDGAxE1eJwZzdMcnvWs23Pk=
Subject key identifier: 21:36:61:38:CE:10:09:CB:36:D1:8B:C6:C9:F7:FB:FF:02:9B:B2:C9
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial: 019E1D90E0C1E259A9A1BB7E662A60EED354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
Manifest number: 0E7A
Signing time: Tue 12 May 2026 19:01:34 +0000
Manifest this update: Tue 12 May 2026 19:01:34 +0000
Manifest next update: Wed 13 May 2026 19:01:34 +0000
Files and hashes: 1: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: VWXdpoVGg8CeGk4zf8BvTS8yoQpObH4KGhpnQsFOd4s=)
2: NIVEM8a4-ibHr5BVL9xzpmFFk_Q.roa (hash: 87ePAgc5oEPgRD0Bz1av1NhkVh8gPVXJ8VCqVfyz+p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:e0:c1:e2:59:a9:a1:bb:7e:66:2a:60:ee:d3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Validity
Not Before: May 12 19:01:34 2026 GMT
Not After : May 13 19:01:34 2026 GMT
Subject: CN=21366138ce1009cb36d18bc6c9f7fbff029bb2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:ad:c3:fd:cd:6b:4b:1b:be:86:89:b5:38:
a5:3d:5c:12:f3:fc:8e:b0:cd:98:81:ae:7d:0d:2c:
d8:3a:bb:89:f1:09:e6:66:f6:31:17:82:20:7e:2f:
97:47:1f:e0:bf:5b:3a:f0:b6:15:1a:d7:6c:d5:c1:
8c:5d:60:3b:1f:7c:1b:c6:b6:b8:bb:77:45:a7:85:
b9:9b:5c:50:6e:db:e5:ab:77:2d:5a:fe:e8:ac:d4:
8e:2c:0e:e5:1f:f2:7e:3b:1a:96:ad:63:f3:2c:a0:
01:ee:fe:6b:1b:d5:80:2e:05:42:15:cd:27:2c:ee:
e8:60:ff:c2:c2:f6:8f:c6:8a:e7:1a:ec:7e:6a:e9:
e1:c2:18:3b:00:c2:46:e3:6b:3e:f6:49:cc:1c:3e:
d9:38:a7:a2:07:68:1d:06:aa:a5:d0:25:9a:5a:23:
e0:63:64:b8:3a:a7:21:df:de:32:af:b6:a8:90:63:
49:f9:38:08:66:3e:98:84:25:05:c0:45:b6:67:02:
aa:65:78:28:33:34:55:d7:f4:34:83:9d:5e:07:77:
15:38:22:25:77:2f:c6:f7:9d:7f:4e:64:0e:65:33:
ed:24:92:cc:23:ce:c9:be:6d:61:b6:7c:50:99:b7:
2d:9f:30:76:aa:47:8b:45:29:0f:82:ce:5b:d4:02:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:36:61:38:CE:10:09:CB:36:D1:8B:C6:C9:F7:FB:FF:02:9B:B2:C9
X509v3 Authority Key Identifier:
keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:62:e7:97:69:da:71:11:d7:55:47:e4:2a:86:15:f4:82:b5:
2a:87:40:fc:d7:17:95:8a:50:d1:88:da:bd:f4:7d:2d:26:a7:
ed:de:49:17:40:9f:b5:49:ed:c7:7b:99:91:e0:57:57:45:44:
20:f7:59:e1:f0:94:1a:ce:67:54:75:96:7d:39:7a:e3:20:38:
09:1f:37:fa:c7:7c:1c:7c:5e:92:63:04:16:5c:dc:6b:dc:0f:
f4:f5:b4:05:de:84:96:69:a8:e4:b3:4d:c5:0f:82:bb:08:d7:
36:ae:41:04:e7:6b:b9:eb:d3:77:cd:ac:18:f1:22:7a:3a:5d:
7f:76:76:98:82:cb:ce:0a:78:2b:42:93:d6:1b:8f:3a:6b:bf:
ae:bf:b6:bd:e4:dc:f7:7d:13:c4:cb:0f:43:ad:48:5b:19:29:
95:44:3d:58:a6:9e:2f:0d:77:6e:88:45:09:a8:e7:c5:21:c1:
10:cc:51:81:9d:55:b6:7e:eb:fe:b9:19:8a:61:30:40:79:18:
49:05:9f:47:7a:3b:ae:3b:ae:94:a7:c0:e2:41:f6:1d:0a:da:
0f:fc:ce:55:5a:cf:20:02:69:6b:48:ad:a8:42:ed:d1:4a:45:
df:2f:39:50:f4:0f:eb:4f:33:ce:72:e1:56:51:72:15:72:79:
ae:25:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:45 2026 by rpki-client