Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: RgI1htu7/B+DfhS9n79qDx9A6sPJKX/cAdHETBccr5A=
Subject key identifier: 45:DE:1B:A2:9C:0C:1E:50:54:68:D9:D2:95:D4:8D:FA:46:81:65:7D
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 01A19130E3BE541830C42B01CC576C9F1FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 0C65
Signing time: Sat 31 Oct 2026 09:01:02 +0000
Manifest this update: Sat 31 Oct 2026 09:01:02 +0000
Manifest next update: Sun 01 Nov 2026 09:01:02 +0000
Files and hashes: 1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: jGl2KRIHl3GaIr3hL/rER6VChYQ99taFZNuAFKLgs6I=)
3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:30:e3:be:54:18:30:c4:2b:01:cc:57:6c:9f:1f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Oct 31 09:01:02 2026 GMT
Not After : Nov 1 09:01:02 2026 GMT
Subject: CN=45de1ba29c0c1e505468d9d295d48dfa4681657d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:4e:b1:52:d8:b4:ef:c3:06:34:c2:3b:89:
0a:67:52:f4:5c:68:07:fd:e4:0b:47:72:13:f1:f0:
80:f1:ce:e2:89:79:ac:0e:89:24:a8:fe:a5:b5:1c:
6a:38:34:bb:c2:17:e3:7e:b7:63:ce:fb:58:42:37:
61:09:ef:34:4d:d2:d4:47:69:da:36:cc:36:45:03:
91:fd:2d:df:bd:0a:42:e9:d0:18:3d:b7:49:46:f7:
41:99:36:2f:0b:f7:0f:d4:ae:a9:2f:87:da:95:bd:
e1:26:c8:d6:07:11:b8:64:fb:5d:16:75:b6:d0:94:
7a:a6:7f:88:b0:b8:57:e0:ec:2f:cd:4b:c3:94:8a:
26:24:77:0c:e2:1b:ad:26:c6:ec:8e:f1:91:bc:dc:
d7:43:20:64:75:78:ee:a1:4b:b1:3f:f9:b9:36:d0:
bc:89:f9:72:2a:5f:94:f6:31:55:21:b4:19:eb:ab:
c9:0c:f7:b2:54:a5:e0:19:a0:30:1f:6e:5b:74:d8:
36:98:9d:3c:dd:6e:1d:95:c4:92:57:2c:dd:c8:bd:
d1:f6:49:e2:e3:2d:f6:75:1a:1c:68:ff:07:f0:90:
84:47:76:40:85:41:6c:08:9e:d5:f3:9d:50:fd:62:
96:ca:d5:de:16:b5:63:5a:f5:7b:c7:17:bb:d8:8f:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DE:1B:A2:9C:0C:1E:50:54:68:D9:D2:95:D4:8D:FA:46:81:65:7D
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f0:e5:58:23:1c:b0:79:15:20:e6:43:f3:b5:c3:68:60:f4:
32:04:05:06:73:24:54:cc:80:a3:09:73:c5:e7:bd:0c:d7:83:
41:39:db:11:4f:1c:db:7a:f3:1e:80:c7:ef:37:3d:3f:53:25:
15:f8:39:19:d4:66:05:76:4c:e4:11:51:54:af:16:86:66:f7:
cb:17:db:53:54:be:99:fe:16:15:2f:45:c2:4c:44:ec:4a:91:
83:60:2e:c3:9b:e7:f4:36:af:87:93:f3:0d:d5:7d:cd:3d:ea:
b4:cc:7d:92:02:93:0e:e9:d8:4c:5b:ff:33:1f:a0:b2:b1:49:
8f:c3:3a:b8:94:52:be:4c:4d:c0:c8:1b:af:1b:fc:cd:59:b8:
2b:d5:69:8b:20:d8:f3:7c:63:09:48:3f:8a:b2:2a:6f:83:cf:
0f:5c:8a:71:bf:f7:d5:8e:aa:ec:06:6f:fb:7a:2a:71:49:4b:
9b:b0:b0:68:ce:f2:99:8f:73:21:5e:53:13:7a:b7:c1:d2:71:
3a:a9:f5:ec:c5:80:f0:98:56:04:cb:5c:af:a7:84:34:c3:17:
72:1b:af:ee:d3:b8:69:36:29:9c:04:cf:59:cd:d7:a3:11:48:
96:2c:72:8d:dc:4d:c1:6f:01:cb:ef:75:50:f0:1a:52:ef:70:
f1:a0:94:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGRMOO+VBgwxCsBzFdsnx+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4
NjZhYWMwHhcNMjYxMDMxMDkwMTAyWhcNMjYxMTAxMDkwMTAyWjAzMTEwLwYDVQQD
Eyg0NWRlMWJhMjljMGMxZTUwNTQ2OGQ5ZDI5NWQ0OGRmYTQ2ODE2NTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D5OsVLYtO/DBjTCO4kKZ1L0XGgH
/eQLR3IT8fCA8c7iiXmsDokkqP6ltRxqODS7whfjfrdjzvtYQjdhCe80TdLUR2na
Nsw2RQOR/S3fvQpC6dAYPbdJRvdBmTYvC/cP1K6pL4falb3hJsjWBxG4ZPtdFnW2
0JR6pn+IsLhX4OwvzUvDlIomJHcM4hutJsbsjvGRvNzXQyBkdXjuoUuxP/m5NtC8
iflyKl+U9jFVIbQZ66vJDPeyVKXgGaAwH25bdNg2mJ083W4dlcSSVyzdyL3R9kni
4y32dRocaP8H8JCER3ZAhUFsCJ7V851Q/WKWytXeFrVjWvV7xxe72I9OJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXeG6KcDB5QVGjZ0pXUjfpGgWV9MB8GA1UdIwQY
MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt
M2VmNWViN2M4NTk4LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4
LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvDlWCMc
sHkVIOZD87XDaGD0MgQFBnMkVMyAowlzxee9DNeDQTnbEU8c23rzHoDH7zc9P1Ml
Ffg5GdRmBXZM5BFRVK8Whmb3yxfbU1S+mf4WFS9FwkxE7EqRg2Auw5vn9Davh5Pz
DdV9zT3qtMx9kgKTDunYTFv/Mx+gsrFJj8M6uJRSvkxNwMgbrxv8zVm4K9VpiyDY
83xjCUg/irIqb4PPD1yKcb/31Y6q7AZv+3oqcUlLm7CwaM7ymY9zIV5TE3q3wdJx
Oqn17MWA8JhWBMtcr6eENMMXchuv7tO4aTYpnATPWc3XoxFIlixyjdxNwW8By+91
UPAaUu9w8aCUjg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 15:22:52 2026 by rpki-client