Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/87-4hnjViI7HntTg19jollBnAgE.mft
File: 87-4hnjViI7HntTg19jollBnAgE.mft (raw, json)
Hash identifier: dKRiAjSX76jr9FO8vW8i1DfZ3S+es5ep+SoTU+eTZhI=
Subject key identifier: DC:E6:29:40:9D:D4:B7:5D:19:CC:9C:35:51:70:9C:24:FB:F9:6F:14
Authority key identifier: F3:BF:B8:86:78:D5:88:8E:C7:9E:D4:E0:D7:D8:E8:96:50:67:02:01
Certificate issuer: /CN=f3bfb88678d5888ec79ed4e0d7d8e89650670201
Certificate serial: 019E1D5952D87365C77084F9274E8EC2F85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87-4hnjViI7HntTg19jollBnAgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/87-4hnjViI7HntTg19jollBnAgE.mft
Manifest number: 28
Signing time: Tue 12 May 2026 18:00:53 +0000
Manifest this update: Tue 12 May 2026 18:00:53 +0000
Manifest next update: Wed 13 May 2026 18:00:53 +0000
Files and hashes: 1: 87-4hnjViI7HntTg19jollBnAgE.crl (hash: PCnlfaAMR6eRjGc/sKNJlKWVNrQGJrVXZw8RbtXQX5U=)
2: DeB0Xt-6RphvnKaJhBcgtFFOHhM.roa (hash: ZLUOwjyV4wQGSZZuzCSytuVCG5xLZsCp/YXTv8tLW+M=)
3: YZiBeQhaDTApi9u5EktWl2c3oHg.roa (hash: xfSLGjgMoN2yLQxqj9xzezqaktTvKdlJEWVhN7B/cxE=)
4: i0dMF6hWb7__VnBcM6Bfw7TU4-k.roa (hash: 7Lcxrz3pL4KuVuQq2l9Onm5o6EFQx/C3rYCwWpNzwMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/87-4hnjViI7HntTg19jollBnAgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/87-4hnjViI7HntTg19jollBnAgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/87-4hnjViI7HntTg19jollBnAgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:52:d8:73:65:c7:70:84:f9:27:4e:8e:c2:f8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bfb88678d5888ec79ed4e0d7d8e89650670201
Validity
Not Before: May 12 18:00:53 2026 GMT
Not After : May 13 18:00:53 2026 GMT
Subject: CN=dce629409dd4b75d19cc9c3551709c24fbf96f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:14:98:61:c7:56:69:27:39:04:9f:b1:8c:
6d:ee:82:d7:c8:df:ff:46:05:e5:8c:ce:80:4b:e1:
10:6e:ee:32:a3:56:6b:e5:e7:02:66:ab:ee:62:8d:
42:d1:dd:32:81:b3:cd:89:ad:b9:2c:d3:62:bb:64:
0f:00:20:4b:ec:3f:ec:1b:18:e6:5c:38:97:6c:26:
db:a9:2a:5e:8d:b0:1e:ad:ce:dc:50:95:2d:f2:1b:
52:33:b7:66:81:25:87:fa:3f:39:d3:41:0a:4b:1e:
15:48:4e:04:c8:88:3b:f8:28:c2:ee:ed:d5:46:d4:
96:b9:ca:ce:a6:7a:e2:e6:73:ba:29:20:8f:ab:94:
54:f4:82:51:2a:0c:a7:34:8a:0b:67:e2:76:16:63:
be:a0:fa:38:cb:06:5a:f5:b3:3f:6a:ca:0f:6d:84:
a4:b1:fe:76:90:4c:21:68:1f:1f:b0:be:bb:10:13:
c5:f8:44:f2:de:f9:bf:99:78:b3:ec:7f:1e:af:48:
4e:76:82:3f:df:75:23:af:e8:14:d2:dd:40:53:a0:
20:ab:6b:20:c7:cb:b1:cf:e9:99:04:a6:bd:79:a0:
5c:46:bb:19:cd:b6:ab:e1:d8:b6:84:84:2f:f0:c6:
d3:a4:d4:7a:2b:8e:c4:12:0d:35:85:28:d4:98:6c:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E6:29:40:9D:D4:B7:5D:19:CC:9C:35:51:70:9C:24:FB:F9:6F:14
X509v3 Authority Key Identifier:
keyid:F3:BF:B8:86:78:D5:88:8E:C7:9E:D4:E0:D7:D8:E8:96:50:67:02:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87-4hnjViI7HntTg19jollBnAgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/87-4hnjViI7HntTg19jollBnAgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/87-4hnjViI7HntTg19jollBnAgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e7:0e:3a:55:e1:e7:db:5f:d6:e3:5e:ae:41:46:7d:00:60:
8e:93:2c:15:e9:d1:d0:6e:e6:b2:fa:4a:ff:0a:06:43:28:e5:
09:aa:79:2e:98:06:4d:c0:4a:c8:2b:1f:8a:9a:85:2b:88:c8:
c5:4d:1b:98:73:75:6a:71:90:94:cd:a6:1b:48:40:10:9b:90:
bc:cb:d8:a1:c3:7f:70:a9:52:9a:c0:7c:ef:00:c0:52:87:34:
5b:e7:ea:e9:10:58:10:46:0e:a0:cf:90:26:b9:2b:6e:ce:7e:
51:aa:1f:cc:89:83:14:c3:2c:99:34:85:d7:9f:04:bb:28:43:
6d:58:27:59:17:1d:5b:c1:f9:d8:27:33:2d:1e:56:87:0c:bc:
a4:86:1d:3a:08:67:87:f4:45:8f:c8:df:20:c7:37:ec:1e:cf:
a2:e5:82:f7:23:e7:e2:fc:b6:ef:50:f9:7e:08:ea:44:38:32:
53:63:68:d0:29:13:8b:73:d2:e2:cd:a7:c9:17:4b:33:08:0e:
63:70:d8:c4:f4:35:5e:40:b1:5e:d5:18:f6:f5:43:5f:18:28:
2d:15:dc:0e:06:0c:5d:41:66:c4:29:6e:43:ed:1f:63:73:0c:
12:74:4c:6c:57:6b:8b:f1:0a:77:d3:05:23:eb:87:c2:e4:3b:
b2:f9:48:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:00 2026 by rpki-client