Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: ZZbbtY5kecWFZniIZufwXmy4J60cQAX4yWqdcBaHnc4=
Subject key identifier: 23:29:D0:8A:39:2B:49:A3:B4:F0:00:36:80:34:AA:91:0A:AA:02:BB
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 019DCF75C62F11BC825670B1BDB815B931C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 0A73
Signing time: Mon 27 Apr 2026 15:01:35 +0000
Manifest this update: Mon 27 Apr 2026 15:01:35 +0000
Manifest next update: Tue 28 Apr 2026 15:01:35 +0000
Files and hashes: 1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: S/tEaNz5Y27V3AIMrg/PZY+FhmkzxVSqx+arXZhKX/k=)
3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:c6:2f:11:bc:82:56:70:b1:bd:b8:15:b9:31:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Apr 27 15:01:35 2026 GMT
Not After : Apr 28 15:01:35 2026 GMT
Subject: CN=2329d08a392b49a3b4f000368034aa910aaa02bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7f:05:4c:53:75:8c:3d:89:5a:85:4e:8f:d0:
e8:81:d1:18:c5:cf:b5:a7:50:65:55:8b:0b:05:7f:
d9:aa:9e:18:7a:5e:f8:7b:93:93:df:67:52:0e:2a:
6d:80:29:e1:3f:c0:a0:a9:a0:06:0b:e1:e2:a2:2b:
da:bb:1f:d3:d8:d4:95:18:e1:8e:b8:e2:b4:14:54:
cf:75:ff:b2:ad:31:35:e6:13:25:8b:74:30:33:42:
5b:5a:21:3b:7b:4d:ab:8f:3e:21:6d:05:2d:01:19:
e0:c2:c2:0c:d9:f3:2a:16:f6:2e:b6:af:3f:92:dc:
3b:bc:ef:65:a0:28:05:73:b0:6b:ba:b5:16:9d:fc:
4b:c5:e4:56:0e:4a:88:77:7f:b2:fe:6f:b2:9d:81:
51:3d:78:c1:77:60:39:aa:af:ec:c1:ff:17:1e:f3:
e5:a0:c0:79:2b:1e:e3:1a:9a:55:97:73:56:03:6c:
7f:9a:be:63:f3:4b:63:20:2d:ef:9a:87:2d:a1:aa:
c4:e7:90:f8:11:3e:00:a6:2e:dc:24:c7:da:82:fe:
01:2d:ec:fa:55:f0:68:49:87:3e:11:45:87:ca:fc:
ba:c2:be:dd:77:c1:74:53:8e:76:06:63:63:24:c5:
b8:f8:28:07:73:0d:cb:75:82:87:6a:53:4f:8e:82:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:29:D0:8A:39:2B:49:A3:B4:F0:00:36:80:34:AA:91:0A:AA:02:BB
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8b:d1:95:26:43:57:ad:ff:52:ca:16:f6:43:59:6b:e4:15:
2e:f1:d6:eb:07:03:79:ca:da:fc:3e:e7:f9:dd:95:21:ea:d0:
9d:a6:55:2d:ec:8b:49:e1:18:c1:d9:05:14:28:c1:0e:5e:dd:
cb:7e:e9:e7:b4:3a:04:63:47:d7:7a:27:c8:bd:f6:15:26:3a:
c6:cc:c9:d9:84:92:67:06:81:28:b8:5c:99:e8:78:26:42:87:
d1:50:71:b0:f3:c3:f8:d8:5e:2d:5d:53:66:fa:8c:e2:24:b2:
bb:34:e7:8e:3c:46:71:98:f5:03:dd:43:b0:ee:f3:1c:fe:f0:
9f:00:93:11:9a:29:4a:ea:5a:cf:7c:40:98:21:79:0f:bf:3d:
1e:9f:a0:02:ba:f5:66:d1:96:e3:0c:ad:c2:b2:64:30:3e:57:
74:81:12:cc:5d:30:c0:a2:e5:c8:85:f3:2d:b1:fc:b4:67:d0:
ec:62:80:89:5c:40:cf:9f:d5:ea:4d:8d:bf:a2:6d:6b:3d:12:
4c:8e:4a:90:57:60:75:2b:b5:86:da:48:ff:49:7f:ab:bf:e9:
e9:d4:2c:1f:a6:0a:86:e5:64:d6:75:b5:01:9b:69:1f:40:d0:
71:f8:a2:06:f3:90:32:f6:5d:58:9a:4e:96:17:0e:7c:e4:dd:
06:a2:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:12:26 2026 by rpki-client