Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
File: 87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json)
Hash identifier: +PGwdyfHs5pOva2qgnVxNhNvePcN30kyvtEVThsPNKE=
Subject key identifier: F8:5D:C5:FF:30:83:39:9B:A7:24:DF:16:4A:CA:48:F9:A1:5F:EF:B9
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial: 019D265F63844F5B5B58025DC49A118D5B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
Manifest number: 0DFA
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: Mn31RcXb/9feOz2HAfPGwlJO8S7i1BAtcqm1V86LnUc=)
2: NIVEM8a4-ibHr5BVL9xzpmFFk_Q.roa (hash: 87ePAgc5oEPgRD0Bz1av1NhkVh8gPVXJ8VCqVfyz+p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:63:84:4f:5b:5b:58:02:5d:c4:9a:11:8d:5b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=f85dc5ff3083399ba724df164aca48f9a15fefb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:cf:84:21:9d:36:a5:30:e1:e4:81:ea:0f:
85:13:e7:c4:a1:87:c1:bf:09:dc:6f:7a:b8:b7:6f:
58:e6:81:e9:f4:f2:b1:40:d3:a7:9e:91:78:41:bc:
b6:2d:79:0f:c2:56:5e:38:a6:51:1c:31:4f:50:e6:
4c:2e:a6:74:10:28:13:e2:b6:41:39:6e:14:89:47:
81:d0:2c:76:d8:41:12:93:4e:34:0f:ca:60:bb:b7:
09:f7:3d:f7:63:9d:22:1b:fc:92:f4:12:13:73:dd:
52:09:f5:63:8c:c7:3d:c5:05:68:a7:5c:3e:8a:f9:
7b:f5:14:e5:3f:e7:c8:c2:60:2c:2f:2e:d8:14:e7:
6d:ba:81:5c:a8:66:61:d1:2e:9b:00:69:94:03:09:
23:9b:d3:85:78:44:4e:e8:72:28:3e:6d:62:c0:fd:
58:ec:2b:ed:6a:dd:cd:7e:38:aa:4e:e5:92:9e:c4:
7f:e2:72:82:2e:2b:0c:df:fe:58:47:f0:5a:91:bf:
40:e4:5c:de:df:f1:e0:9f:ce:14:8d:25:11:e3:a0:
09:89:b8:a6:61:9d:d2:b5:72:f3:f0:29:89:1e:b4:
f6:d8:b7:e1:63:60:81:3e:b8:f5:c5:03:d3:2e:dd:
56:e8:07:60:a4:95:b2:cc:6d:bf:81:e3:a7:50:cc:
ee:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5D:C5:FF:30:83:39:9B:A7:24:DF:16:4A:CA:48:F9:A1:5F:EF:B9
X509v3 Authority Key Identifier:
keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:c6:3e:2c:07:4a:4c:2e:79:ef:f3:1e:b9:a4:a4:f7:e4:ed:
4d:54:91:c6:49:3c:7b:b1:16:66:95:41:73:68:40:28:cd:50:
70:6e:de:02:86:4a:5a:8b:fd:a6:e3:36:fa:c9:99:d4:91:f9:
ef:f3:0c:c8:0d:5a:8a:ac:d0:90:0f:f3:44:a9:5c:d3:ce:e3:
7f:41:8b:f0:87:db:a3:54:bc:fa:ff:c8:ad:3f:e7:9d:41:19:
93:87:51:fb:05:0d:24:a5:f5:e5:5f:fb:63:4b:3b:fa:fc:ec:
b8:aa:8a:1b:ae:5c:60:85:ca:68:e0:52:1d:cd:3e:22:c2:3e:
72:44:63:77:4c:70:4e:f9:44:39:c9:ad:6f:af:76:0a:3c:2a:
75:b4:a4:ea:0a:c9:e3:a6:e7:80:ea:48:05:79:a8:4f:a8:34:
51:88:d5:ef:27:03:f1:8d:9f:21:b1:17:42:cb:0a:23:97:d1:
af:d9:38:5f:2c:e6:eb:78:cb:fe:99:77:c5:75:59:f8:b9:33:
ee:b1:b4:cb:bc:4e:01:b4:79:a5:82:99:d7:4b:45:ac:b8:48:
10:71:ed:de:d0:fd:d5:9a:19:50:a1:4d:11:81:37:7c:78:bf:
9a:8f:5a:eb:51:59:fb:3e:dd:8f:29:d2:18:78:1c:35:66:91:
6e:9f:dd:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX2OET1tbWAJdxJoRjVtCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjdkZDU0ZGFiMDJmZThjZGU4YTg1ZTU2OWY4MjcwODg5
Nzk0MTkwHhcNMjYwMzI1MTkwMTE4WhcNMjYwMzI2MTkwMTE4WjAzMTEwLwYDVQQD
EyhmODVkYzVmZjMwODMzOTliYTcyNGRmMTY0YWNhNDhmOWExNWZlZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gfPhCGdNqUw4eSB6g+FE+fEoYfB
vwncb3q4t29Y5oHp9PKxQNOnnpF4Qby2LXkPwlZeOKZRHDFPUOZMLqZ0ECgT4rZB
OW4UiUeB0Cx22EESk040D8pgu7cJ9z33Y50iG/yS9BITc91SCfVjjMc9xQVop1w+
ivl79RTlP+fIwmAsLy7YFOdtuoFcqGZh0S6bAGmUAwkjm9OFeERO6HIoPm1iwP1Y
7Cvtat3NfjiqTuWSnsR/4nKCLisM3/5YR/Bakb9A5Fze3/Hgn84UjSUR46AJibim
YZ3StXLz8CmJHrT22LfhY2CBPrj1xQPTLt1W6AdgpJWyzG2/geOnUMzuuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhdxf8wgzmbpyTfFkrKSPmhX++5MB8GA1UdIwQY
MBaAFPO33VTasC/ozeioXlafgnCIl5QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS84NDBkYzEtODNmYy00ZjlkLWJlNWUt
MTkzOTg4M2JiMWY4LzEvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS84NDBkYzEtODNmYy00ZjlkLWJlNWUtMTkzOTg4M2JiMWY4
LzEvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAysY+LAdK
TC557/MeuaSk9+TtTVSRxkk8e7EWZpVBc2hAKM1QcG7eAoZKWov9puM2+smZ1JH5
7/MMyA1aiqzQkA/zRKlc087jf0GL8Ifbo1S8+v/IrT/nnUEZk4dR+wUNJKX15V/7
Y0s7+vzsuKqKG65cYIXKaOBSHc0+IsI+ckRjd0xwTvlEOcmtb692CjwqdbSk6grJ
46bngOpIBXmoT6g0UYjV7ycD8Y2fIbEXQssKI5fRr9k4Xyzm63jL/pl3xXVZ+Lkz
7rG0y7xOAbR5pYKZ10tFrLhIEHHt3tD91ZoZUKFNEYE3fHi/mo9a61FZ+z7djynS
GHgcNWaRbp/d3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:29 2026 by rpki-client