Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
File: 87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json)
Hash identifier: 3WUU074ubZOiYvBJMq9Zjv1PrYern6LmZbUvovYKzAc=
Subject key identifier: B2:17:7C:D8:E2:FD:D5:D4:8E:C0:B4:73:97:FB:D9:68:02:53:A9:AD
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial: 01A0EBF8DB595E213AECA11F509A3663C92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
Manifest number: 0FEE
Signing time: Tue 29 Sep 2026 07:02:29 +0000
Manifest this update: Tue 29 Sep 2026 07:02:29 +0000
Manifest next update: Wed 30 Sep 2026 07:02:29 +0000
Files and hashes: 1: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: 7v2iwRrd5ujYo39HYihA1e3kcC754+gQRa73L+rY5Lg=)
2: NIVEM8a4-ibHr5BVL9xzpmFFk_Q.roa (hash: 87ePAgc5oEPgRD0Bz1av1NhkVh8gPVXJ8VCqVfyz+p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f8:db:59:5e:21:3a:ec:a1:1f:50:9a:36:63:c9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Validity
Not Before: Sep 29 07:02:29 2026 GMT
Not After : Sep 30 07:02:29 2026 GMT
Subject: CN=b2177cd8e2fdd5d48ec0b47397fbd9680253a9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:8d:3b:1e:3a:f2:70:d3:e5:07:88:df:ac:
95:7a:a9:39:69:d2:77:09:d1:9b:2d:d7:23:2c:10:
b1:88:94:01:46:32:a9:18:37:c6:a5:b0:9b:2d:3d:
95:e9:82:32:59:45:3f:60:89:34:33:db:b5:d1:c8:
2e:9f:95:0a:3d:fa:79:b0:db:5f:7d:4b:0b:9b:a8:
d7:92:32:33:b6:ee:2e:ac:49:a4:5a:f2:4a:4a:24:
1b:af:06:0a:35:19:2e:a2:44:ad:ef:20:4a:cd:79:
5e:33:c1:06:85:6c:7b:ed:b4:0d:aa:0e:46:b1:92:
98:fb:de:06:40:42:4f:6d:cd:94:e6:d9:ed:7a:ee:
0f:74:aa:c4:ac:95:59:cc:ff:40:37:6b:40:8b:ce:
39:cf:d0:39:d2:68:0e:b9:fd:ca:cc:75:a1:44:35:
bc:2b:b6:2e:64:c9:48:6d:b4:2c:f5:6b:bc:90:c7:
2a:68:9d:c2:c2:fd:3d:57:22:b6:c2:af:55:f5:47:
d4:74:6b:e7:ff:e5:49:39:84:a7:11:6b:92:c3:6a:
88:e5:71:28:d3:78:d2:1b:4c:69:12:96:b0:de:91:
15:96:b6:83:4f:61:7e:6e:96:01:ad:38:5a:f3:fd:
b4:05:6d:fe:d6:e1:c6:58:77:da:68:12:f8:1d:b5:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:17:7C:D8:E2:FD:D5:D4:8E:C0:B4:73:97:FB:D9:68:02:53:A9:AD
X509v3 Authority Key Identifier:
keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:e3:01:f5:68:4d:59:87:b0:a6:53:34:f5:8e:67:ea:24:bc:
9b:86:bb:1b:10:30:7c:4d:43:06:33:95:74:f0:7e:44:e9:7b:
10:42:d8:0b:48:87:9d:3a:2f:ea:57:1e:7b:66:a8:84:1c:b0:
9e:53:d5:5f:d8:91:2d:9c:2e:09:2f:30:78:fc:fe:ed:e2:39:
82:7a:a1:9b:a5:7b:60:00:b8:30:8c:6a:fd:4a:a5:8e:d9:c1:
dd:f9:df:d5:49:aa:70:eb:4e:ae:88:58:e4:a3:05:6e:a6:98:
5f:33:c3:43:31:fc:be:7d:04:1a:8a:cc:0c:2d:3b:bb:e9:5a:
cb:bb:45:94:18:aa:8a:43:7d:2d:5a:3b:3a:bb:98:69:4f:6b:
81:f3:42:fb:d3:e3:59:f4:4d:86:38:89:b5:39:80:95:f1:74:
db:38:85:a2:2c:23:88:de:e5:2d:4e:ea:e3:da:e5:25:e6:f1:
03:a8:2f:f6:e9:60:10:f9:b3:43:57:b6:2e:8f:95:b1:39:fd:
0d:ac:d0:cb:6e:7e:f8:3d:68:62:42:df:38:85:41:50:2c:fc:
2e:a9:31:5b:12:53:01:07:26:9c:b1:8a:0f:70:27:0d:63:80:
8c:98:f0:c1:9e:7c:f1:4e:8a:63:71:d3:97:cb:87:87:c5:91:
fc:4e:76:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:28:57 2026 by rpki-client