Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: EWC6n/myiKvX/N/i4oNAv0b6+vuBXeeSG3wT0MHjwCk=
Subject key identifier: FB:06:42:EF:B6:2C:4F:60:92:D7:6F:E8:00:1D:78:B6:12:1F:A0:7E
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 019CE3DA28B5683F9BC100DAD8956515363F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 09F9
Signing time: Thu 12 Mar 2026 21:00:51 +0000
Manifest this update: Thu 12 Mar 2026 21:00:51 +0000
Manifest next update: Fri 13 Mar 2026 21:00:51 +0000
Files and hashes: 1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: vlpDCFNaW9Zz0CyJaLPoUZK444W4v39vKEAbp4SgsJ0=)
3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:28:b5:68:3f:9b:c1:00:da:d8:95:65:15:36:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Mar 12 21:00:51 2026 GMT
Not After : Mar 13 21:00:51 2026 GMT
Subject: CN=fb0642efb62c4f6092d76fe8001d78b6121fa07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:68:e1:fc:28:56:c6:40:a8:ca:c2:6d:44:
6d:d1:e9:28:11:6d:a0:f5:45:0a:9d:17:5f:55:ad:
b5:e7:a4:5e:9a:23:67:00:78:14:73:b5:05:43:35:
6e:45:6d:ad:dd:bf:7e:48:7d:8a:09:3b:d7:45:fa:
5b:50:33:8e:3c:92:e7:dd:66:b3:00:9e:e6:a6:0f:
62:39:3d:87:51:a6:d9:a0:72:69:d7:5b:c9:6b:db:
24:d8:55:67:e4:54:da:34:f8:5a:8f:d8:20:d4:3f:
3c:f3:c7:c1:0e:b4:1e:10:fc:74:ab:19:a4:49:ac:
91:97:cf:58:53:65:ed:41:07:8d:43:56:55:6c:7b:
3e:60:b4:7a:e8:ed:07:9c:56:62:54:bc:6d:01:28:
3a:0a:2e:66:2f:4f:9e:d2:b7:2c:cc:8e:23:3f:1d:
f5:d1:5a:94:46:ff:34:fb:0a:de:b3:3c:d4:b1:bf:
bc:79:a1:2f:36:d4:49:6b:e4:b8:30:9f:30:c2:cc:
ca:e8:04:55:ee:a2:7e:18:44:64:27:d2:9d:4a:18:
fe:a4:3e:99:34:f4:a5:5a:40:79:0e:b4:e1:f7:d4:
57:86:a5:3c:cc:1b:2c:85:d1:b3:18:b4:87:51:7a:
ed:b4:54:ac:6f:d0:50:5d:3d:bb:7b:25:37:be:df:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:06:42:EF:B6:2C:4F:60:92:D7:6F:E8:00:1D:78:B6:12:1F:A0:7E
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5c:64:ad:dc:cf:3c:80:df:1d:dc:c6:a4:50:5d:f2:a7:8b:
0d:ad:fd:c4:26:79:2d:39:18:8b:04:fb:9e:75:5a:4e:c3:e1:
dd:8d:57:c1:b4:8f:b7:18:0a:20:84:fc:c8:82:fa:15:af:5c:
1f:c5:39:0b:39:ce:b1:ea:8f:98:58:05:e7:a5:a9:6f:03:99:
e1:04:2d:cb:72:0a:5e:0a:de:06:9d:fe:02:60:fc:d3:dc:76:
39:c4:8e:2b:c4:90:34:70:4c:4c:67:2f:f6:77:70:4b:46:4a:
45:bf:08:83:e7:66:7c:a5:0d:36:e1:42:3f:88:f9:98:9d:3b:
ed:33:5a:75:b4:d0:5b:98:e5:bf:9f:ec:d4:0f:5b:76:47:64:
52:3a:4a:eb:46:96:b5:7a:51:ed:f7:39:d0:0f:b0:11:a4:e2:
a7:43:0c:42:af:bd:1c:4a:47:b1:ad:4b:8f:3e:72:08:78:ae:
bd:33:82:55:78:69:9c:dd:88:b9:06:e4:9c:4d:18:ac:e0:0b:
b2:1f:4d:19:74:72:8c:17:39:97:5d:79:a7:c8:51:26:74:2a:
c3:c1:d2:aa:80:fe:cc:e1:12:e2:5e:d0:33:9c:8a:cc:dc:49:
fc:52:6c:05:be:e3:f2:3d:ed:35:f1:74:b7:07:71:0a:e3:43:
c1:ef:cf:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:42:36 2026 by rpki-client