Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft
File: h87xYB8_i1Dm11QuW7u9xgO1LZI.mft (raw, json)
Hash identifier: Dg8rWu0t1tmv6S5RF3AFtyLs4SYTNgpqFBgLoD7ORs4=
Subject key identifier: BD:61:27:D7:33:53:A2:DB:64:96:66:F7:B5:DE:13:88:A8:9B:BF:5D
Authority key identifier: 87:CE:F1:60:1F:3F:8B:50:E6:D7:54:2E:5B:BB:BD:C6:03:B5:2D:92
Certificate issuer: /CN=87cef1601f3f8b50e6d7542e5bbbbdc603b52d92
Certificate serial: 019D382E5B0E05F4495A2D11C143673858D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h87xYB8_i1Dm11QuW7u9xgO1LZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft
Manifest number: A0
Signing time: Sun 29 Mar 2026 06:00:55 +0000
Manifest this update: Sun 29 Mar 2026 06:00:55 +0000
Manifest next update: Mon 30 Mar 2026 06:00:55 +0000
Files and hashes: 1: h87xYB8_i1Dm11QuW7u9xgO1LZI.crl (hash: kBL83nLhO4i5TX4P6PMBN/4QHSPe88RKmMHi0a4T5TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h87xYB8_i1Dm11QuW7u9xgO1LZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:5b:0e:05:f4:49:5a:2d:11:c1:43:67:38:58:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87cef1601f3f8b50e6d7542e5bbbbdc603b52d92
Validity
Not Before: Mar 29 06:00:55 2026 GMT
Not After : Mar 30 06:00:55 2026 GMT
Subject: CN=bd6127d73353a2db649666f7b5de1388a89bbf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:2a:50:98:46:61:40:fd:b2:a9:99:29:b3:
fc:d6:2f:c4:49:38:46:0c:b2:9e:00:36:27:a4:d4:
f4:dc:a1:59:ab:d9:f1:7f:c4:82:e8:cd:6e:6c:2c:
f0:5f:cd:a4:62:77:d6:1a:2a:ac:b8:a1:2d:10:96:
d4:f1:73:9a:1c:55:7c:d7:8a:d9:01:31:2f:7a:7c:
3f:52:84:7a:42:8a:40:16:0d:76:79:55:9c:f4:04:
bb:fe:4b:89:7e:78:8e:6b:18:c1:56:b6:6b:3d:03:
51:62:73:2a:17:fa:82:2d:26:33:61:3b:95:84:c7:
40:0b:ba:81:67:b5:0e:05:d8:24:82:7f:6c:ba:45:
c5:aa:0f:50:f7:d0:f3:a7:9a:29:9d:fc:b6:38:50:
7b:7f:32:80:cc:27:c6:91:1f:4b:ab:46:fa:af:f4:
b4:6b:6f:30:5c:a0:34:11:90:fe:42:3b:54:d1:18:
61:f3:69:a2:14:44:9b:a9:c8:b8:80:98:41:7f:df:
8b:cf:90:fc:c4:60:6b:68:65:3d:18:70:3e:1e:0b:
74:5d:1b:00:19:5d:83:7c:d6:2a:94:bd:39:5f:c9:
8d:3d:f8:00:60:6a:77:15:b7:c9:0a:ee:53:6a:fe:
13:a4:85:f3:bf:d7:e9:be:9f:d9:9d:3a:9e:ba:a7:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:61:27:D7:33:53:A2:DB:64:96:66:F7:B5:DE:13:88:A8:9B:BF:5D
X509v3 Authority Key Identifier:
keyid:87:CE:F1:60:1F:3F:8B:50:E6:D7:54:2E:5B:BB:BD:C6:03:B5:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h87xYB8_i1Dm11QuW7u9xgO1LZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8e:02:bb:78:75:62:54:79:9c:58:b7:5a:86:14:cf:79:1b:
0c:81:bc:62:6a:a6:3a:be:5e:05:98:9c:3a:1c:47:97:07:aa:
7b:4e:9a:06:7c:6f:5a:65:5e:f4:54:69:a1:7d:30:6b:1a:a0:
d1:1a:fc:60:19:8a:9d:55:3b:5a:43:64:d8:c6:e5:89:6f:60:
09:1a:0c:15:5b:49:85:7d:1d:c5:ad:74:55:cc:82:14:5d:bf:
0c:6f:ec:bf:47:44:5e:56:7b:13:ee:e7:56:74:92:a7:9b:72:
51:0b:7b:07:22:ff:e9:3a:74:24:14:9a:34:a7:78:de:61:b4:
8c:e7:57:b3:93:f5:26:9f:fe:b6:a5:a6:77:13:1e:2a:8b:ec:
fd:9c:03:c1:f5:fb:29:d3:f1:d5:dd:7c:63:3a:51:e4:9b:b7:
18:11:15:5f:5b:5e:05:af:f3:63:4b:c7:92:de:38:45:fa:31:
98:fe:06:a4:90:cc:93:25:cd:52:2c:a5:34:50:9f:32:73:a8:
c6:03:29:d6:11:35:97:a4:ca:a9:31:7e:b6:7e:8e:7e:7d:4a:
7a:9d:d7:43:90:8d:a0:ec:39:88:04:9f:28:16:5a:e2:92:41:
8e:0b:f6:8a:ac:f5:00:1a:3e:6d:4a:3f:74:86:75:fb:e2:4c:
53:fe:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:43 2026 by rpki-client