Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: iw5xupdzGOGjJw9tpT0Rzt0XYsae3xTRfW6gdZkBJzw=
Subject key identifier: 17:BD:60:C4:48:BF:6E:F9:95:AE:1D:45:E1:AF:E2:9C:E2:B2:1C:F4
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 019FA2CE4A77F02D6116B5C26D288CFACD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 0B65
Signing time: Mon 27 Jul 2026 09:00:56 +0000
Manifest this update: Mon 27 Jul 2026 09:00:56 +0000
Manifest next update: Tue 28 Jul 2026 09:00:56 +0000
Files and hashes: 1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: rHFXs3FmqIcy4tICkp62jmUnEvdxrrxGwX4/WO9P6Nc=)
3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:4a:77:f0:2d:61:16:b5:c2:6d:28:8c:fa:cd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Jul 27 09:00:56 2026 GMT
Not After : Jul 28 09:00:56 2026 GMT
Subject: CN=17bd60c448bf6ef995ae1d45e1afe29ce2b21cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5e:2d:23:8c:e9:72:9e:a1:f7:f8:ee:85:d4:
17:60:aa:64:30:f5:b6:7c:e5:e1:1e:4d:7f:2e:08:
bd:a2:6f:9a:f0:d5:03:47:2f:2d:f0:3b:54:f0:49:
49:b9:67:52:dd:43:23:e1:de:75:4b:14:8c:8c:15:
93:88:65:06:69:19:78:6a:b0:52:db:dc:17:1e:36:
27:24:b2:5c:4e:20:6b:ca:22:91:a0:ce:73:78:29:
3d:9c:e1:13:75:17:3a:a0:7d:61:ee:11:db:7d:c1:
23:88:e7:f9:27:20:44:3b:a2:6c:a9:d6:88:25:5d:
da:df:e8:03:72:3e:bd:26:50:19:63:a1:30:d0:b4:
54:3f:4c:d1:dd:05:9a:41:71:c6:06:c0:64:ca:46:
16:f2:4f:9f:94:9c:c5:fa:75:a5:3e:71:b4:43:4c:
e0:40:52:60:db:bc:31:10:ce:40:42:67:91:f6:be:
ee:ec:1f:fe:cf:c8:f2:a9:58:11:90:90:63:54:3b:
1b:c0:05:50:6c:6f:34:e6:07:d3:df:52:7e:a2:41:
32:45:b0:90:10:a0:75:c6:97:20:f6:fb:9e:da:21:
20:00:ec:f0:c3:b1:f2:98:ca:06:2e:98:23:fd:5f:
f7:3b:54:1b:21:57:2b:87:a4:dd:62:5a:b8:87:ac:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BD:60:C4:48:BF:6E:F9:95:AE:1D:45:E1:AF:E2:9C:E2:B2:1C:F4
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5f:62:47:aa:9d:92:7b:d5:33:14:10:56:a7:cb:c4:25:c4:
31:fd:02:39:1c:49:47:f5:70:ca:e9:92:7a:20:78:76:fe:28:
27:7b:82:35:1c:bd:2c:9f:78:8b:c0:b2:a8:d0:f2:2d:87:e7:
4a:f3:88:cb:a5:10:0d:14:92:d8:36:de:03:da:fd:9d:19:a5:
fc:b6:92:0f:a7:d7:79:05:4a:75:ce:0c:31:29:3b:2d:c2:91:
13:7e:f5:05:16:0f:bc:51:a4:6c:7e:c0:17:8e:fa:67:c0:e4:
69:ea:1c:39:ef:b9:7a:f5:fb:b7:7e:68:db:19:92:3e:73:8a:
b4:fe:0b:e0:9d:69:ba:ee:8f:45:bd:71:a1:74:c5:d0:40:01:
a2:9b:88:22:ac:69:79:c0:29:5f:45:57:a9:be:65:f8:e5:52:
d4:1b:9b:54:c9:8b:27:10:26:33:c6:8f:0c:01:ba:84:2b:7a:
38:dd:b7:a0:31:8c:a5:1e:20:1f:a7:41:f4:be:08:22:16:b9:
12:f4:cb:29:43:4c:2e:34:8d:d4:4d:5e:25:36:82:6a:61:de:
21:41:af:ee:52:c1:3f:d1:a3:81:cf:00:41:67:81:61:94:0e:
5d:31:39:91:8b:78:36:29:09:e6:4f:64:86:5e:89:0c:66:b3:
f9:ef:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:57 2026 by rpki-client