Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier: AJ55O5rVa149Xn394IK4WjC2EVNjrKTl5RpSu2kifP4=
Subject key identifier: 00:C2:0C:A3:79:96:56:53:1D:5B:F4:DA:FF:16:74:51:E4:05:93:D0
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial: 01A0DD60C86CF59F6644A390C05AC420DA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number: 1233
Signing time: Sat 26 Sep 2026 11:01:42 +0000
Manifest this update: Sat 26 Sep 2026 11:01:42 +0000
Manifest next update: Sun 27 Sep 2026 11:01:42 +0000
Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: r1f7eN70LqBIDR+LCgNLqLtuLEg0rmGav3L+ZTFiv5U=)
2: q7302L2OQ1J4JgKpMluxPnKa3L4.roa (hash: CogkGEqQAlbPJasD50LgFH8JZg8Ucl8+7Lw8QmjihaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:c8:6c:f5:9f:66:44:a3:90:c0:5a:c4:20:da:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Validity
Not Before: Sep 26 11:01:42 2026 GMT
Not After : Sep 27 11:01:42 2026 GMT
Subject: CN=00c20ca3799656531d5bf4daff167451e40593d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:e4:94:e3:b9:1d:ef:1a:46:bc:36:b4:96:
a6:f1:59:53:4d:d3:6e:89:d5:97:30:d2:9b:a4:72:
eb:05:ab:0c:bc:fb:52:1a:18:d6:dc:46:0c:2f:fa:
1b:b7:21:73:3b:9d:99:0b:17:05:ef:56:3a:37:55:
fd:93:55:16:d7:96:6e:86:59:8f:84:86:4a:e9:45:
f3:32:5b:5d:cf:aa:d2:9a:68:05:4a:67:10:87:81:
81:69:55:50:21:95:c1:88:2e:6a:b6:0a:25:bd:cc:
ea:dc:11:5f:11:40:ac:e0:d4:c2:44:0e:a3:df:3f:
a9:3f:2b:fa:5b:00:15:5d:bc:a1:7c:e2:b4:06:20:
24:c3:c6:52:71:47:af:80:d5:de:96:57:34:1f:63:
90:a8:f3:c5:b8:46:4d:97:a2:9c:69:69:a1:9f:d3:
5a:7c:5c:cc:77:5d:3d:cd:fa:d5:a9:d8:0a:b9:63:
d3:74:d7:07:2a:1e:83:b0:d2:d8:05:a6:8a:42:dc:
56:ac:38:7f:a4:bd:7c:04:83:3c:0a:a5:9a:1c:4f:
32:49:97:7b:e2:81:6b:10:cf:29:97:7a:e4:4e:b7:
00:54:99:14:ef:90:06:7a:78:e2:4d:68:6f:17:fe:
81:f6:d5:b2:35:3c:ee:73:85:01:56:0e:d4:50:0b:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C2:0C:A3:79:96:56:53:1D:5B:F4:DA:FF:16:74:51:E4:05:93:D0
X509v3 Authority Key Identifier:
keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ab:c6:ae:ad:54:4f:30:5c:24:85:06:50:3a:11:30:e5:c0:
35:de:0d:f1:6a:84:ee:68:9c:fe:28:10:a1:9e:92:c2:e3:cf:
cb:0a:1e:28:38:a2:33:f6:a4:fe:8a:62:aa:c3:3d:31:fe:9d:
44:91:10:0d:1a:2a:67:58:f8:cd:21:8b:89:51:3d:31:1d:cb:
a8:fe:66:e8:0a:cf:51:2f:78:fc:92:ab:10:ce:87:a0:9c:d7:
af:8f:37:11:0d:ea:d3:d1:09:3d:ab:df:9b:02:db:12:0d:ba:
44:54:70:44:f7:ea:17:bf:67:de:d6:f3:77:3b:fc:28:73:18:
95:54:9a:ee:1a:bc:4f:85:0b:ff:b2:ac:84:61:27:06:61:b2:
5d:09:e6:9f:29:c9:1c:c3:3b:86:0b:d4:a8:db:ae:24:a7:79:
73:37:6c:c4:5c:be:84:e2:37:1c:3b:2c:09:a7:20:42:43:c9:
13:b7:fc:25:8b:aa:9e:f7:7e:26:e1:8d:cf:82:67:75:03:da:
31:ae:bb:87:16:ac:25:c6:c7:1c:e5:9d:a6:e7:42:9a:fa:80:
12:6e:d0:9f:ce:ea:73:21:dc:15:ef:70:27:e7:94:3a:97:07:
93:6a:0b:3f:95:17:58:70:49:3f:77:0f:e8:cb:b9:d4:d6:d5:
f4:8a:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:35:34 2026 by rpki-client