
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier: jKltjqiD0Arfq2ucl1XRRznlcIB2R/9cfJQ2ZY/2SIc=
Subject key identifier: 98:A6:8D:9D:51:31:0E:0A:66:87:4A:A4:23:A4:03:94:A5:7E:BF:BB
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 01A0F3436DCF6D61221B9500C5CA01BACAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number: 13B3
Signing time: Wed 30 Sep 2026 17:01:17 +0000
Manifest this update: Wed 30 Sep 2026 17:01:17 +0000
Manifest next update: Thu 01 Oct 2026 17:01:17 +0000
Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: 1ZPRVkWDcAGVQgq+JqmYdU0aZCeKhkvlnRMqLnRAeqI=)
2: AspI11raW1W04hjS-S4dOvg7DJ0.roa (hash: vyR9bLbU9Kq6oSRsp+g4vq54T/skGcryAaf7JnoUv/A=)
3: Kt_KSYrDgcjqIw-tzOf1SsEuolE.roa (hash: iGYT2jk0/nojybC7EhwbZ+9UI5BCjZA3DlRVN4V+qoM=)
4: cLMf5Wd9_XCFE1K-8kc5wZs2Fi4.roa (hash: c7+KWt1SdxMn3TTxEN2hC0zORqA9HzBlfBHlbXmPphA=)
5: ehqv0V2Mxbz4tpd2nZ-H0adSaEo.roa (hash: 02XO0vXOdnlzhqYHTi75uxwmBCYXsERvvoqfOYq0+7M=)
6: uYwmLI9IgXoeBYgIJ67lD4M9yaw.roa (hash: KF+AYbOaxFn3R/9fgqU1GbRgcGguP9S+XNTb3CR98gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:43:6d:cf:6d:61:22:1b:95:00:c5:ca:01:ba:ca:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Sep 30 17:01:17 2026 GMT
Not After : Oct 1 17:01:17 2026 GMT
Subject: CN=98a68d9d51310e0a66874aa423a40394a57ebfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:3e:fe:0d:22:8b:c2:67:af:b3:4a:59:32:
fe:de:df:cd:7e:0f:f0:3d:e4:bb:51:90:1a:76:71:
7b:91:2f:55:71:28:62:fd:94:f8:1f:cb:f3:26:43:
62:2b:c8:ae:29:ac:07:53:ea:a7:53:99:da:8d:5b:
f6:14:61:dc:9f:aa:86:b8:30:c3:0e:22:04:51:aa:
99:e2:f6:8a:01:34:43:90:e3:1e:ce:68:61:89:7a:
f3:cc:91:10:d4:14:4f:cc:91:35:a4:e1:57:1d:91:
cc:a8:96:84:45:45:e6:e9:a1:f7:21:e0:0d:99:35:
c4:a6:ec:04:29:52:1c:ef:ea:3d:a6:c5:58:a4:b7:
89:f5:69:29:61:f2:f8:29:d3:59:ed:1d:08:b7:6f:
d1:5a:4b:8f:2b:55:31:9b:e7:75:a8:b5:26:df:ad:
1a:12:00:ee:6a:c7:ce:32:95:d8:4e:54:44:ef:72:
72:27:96:d9:b9:0a:4f:2b:e5:a3:e6:d4:a7:6e:f6:
50:5c:25:d3:6a:82:96:79:e4:8a:71:99:6c:24:75:
fc:ce:84:68:62:ab:40:55:e4:78:5e:5d:51:c6:3b:
21:29:92:6b:3b:63:af:4f:40:31:46:c6:f0:d1:9f:
07:bc:49:67:da:96:1f:b3:05:4e:b8:75:8e:d3:ab:
99:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A6:8D:9D:51:31:0E:0A:66:87:4A:A4:23:A4:03:94:A5:7E:BF:BB
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ca:fd:0f:9e:4a:dc:7e:da:cc:13:5e:aa:e2:6f:fa:56:46:
48:80:b6:20:6b:ff:31:16:12:9d:00:2e:bb:1e:8f:1a:1d:5e:
16:9d:34:07:d1:9e:5f:8e:df:40:f5:dc:5d:4d:da:79:1e:2c:
57:9d:63:9d:26:e8:2d:bf:4b:65:19:f4:1b:4d:f9:56:4d:a6:
16:f5:dd:66:38:0d:4d:62:8c:9d:23:4f:e6:00:96:a0:d5:c2:
b8:4c:5b:5c:0b:50:4e:b0:15:2b:d7:ee:90:0e:55:4f:f0:e2:
1a:89:43:81:6e:b2:25:cc:fa:3d:cf:67:9a:17:cf:27:5b:78:
3f:20:c2:86:01:5a:11:5d:e3:9b:fd:5c:97:ff:9f:f4:19:30:
6b:0d:0a:79:f6:c0:cc:17:7c:b9:06:27:9f:55:b2:0a:0c:95:
49:0c:12:2f:04:a1:c2:22:48:0e:fd:61:0a:bb:8c:3a:2d:52:
69:72:06:95:3b:c8:56:26:b3:c8:d9:9a:c0:73:66:71:5d:5f:
9f:e6:62:36:bb:5e:dd:4c:8e:ca:ae:d4:61:29:01:e9:f0:33:
6c:a7:85:8d:60:80:29:44:ca:e9:2c:9c:fb:47:8d:0c:48:61:
db:12:36:8e:10:2d:21:c7:f0:4c:44:04:9e:65:88:e6:22:02:
2d:e3:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 09:12:53 2026 by rpki-client