Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
File: 87WowAlYJeE_Rr2zcLf9ypufilI.mft (raw, json)
Hash identifier: VrCxjrcxWHV6FMidHqo+SnW3evQ/NCSWuuZxeQX2Sjg=
Subject key identifier: D4:0C:AF:B7:3A:EF:AE:1E:92:06:60:94:27:A5:4C:0A:E7:B3:EB:0E
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Certificate issuer: /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial: 01A1DD947C9C3252B1E30BEFDB84189050E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
Manifest number: 0664
Signing time: Sun 15 Nov 2026 05:00:58 +0000
Manifest this update: Sun 15 Nov 2026 05:00:58 +0000
Manifest next update: Mon 16 Nov 2026 05:00:58 +0000
Files and hashes: 1: 87WowAlYJeE_Rr2zcLf9ypufilI.crl (hash: uWyKAJIktQqwu+tIeEutOYom3DYszIGfSUVjk9L+q9k=)
2: kvsR5vGqCUlad7hcwSexC9HOmQU.roa (hash: BQWcBL0pNsLmhZ/6jOKzXhoMqdBErbR1kzhV9E5bnP0=)
3: ps1esgrNwALs0rprEq1u_73GPvQ.asa (hash: FGyORXilz5BNYLMmlVd29mT3+yukVGqZlvtshiP/w0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:7c:9c:32:52:b1:e3:0b:ef:db:84:18:90:50:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Validity
Not Before: Nov 15 05:00:58 2026 GMT
Not After : Nov 16 05:00:58 2026 GMT
Subject: CN=d40cafb73aefae1e9206609427a54c0ae7b3eb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:03:5b:90:69:67:3f:83:dc:54:b8:0d:19:
ba:0e:79:3f:54:64:ef:f3:58:a4:42:60:5b:23:c3:
14:30:11:ea:19:0b:6f:21:c0:74:d7:8d:b5:18:b8:
35:2f:87:d4:a0:f3:e8:bf:00:da:9a:a2:d5:79:fe:
83:13:07:26:7a:e1:ca:06:7b:56:0f:2d:a9:9f:f7:
51:99:53:a1:13:cc:fe:d0:79:46:d4:74:84:67:ed:
d3:d7:bc:e1:ac:6f:70:f1:20:0c:9e:25:56:5b:95:
5d:13:c5:50:d3:8e:10:24:f3:4b:84:f6:2f:7d:31:
64:12:b2:84:04:83:ae:63:d9:c0:e0:83:09:a8:9a:
5b:b0:71:82:5f:01:15:83:fa:29:56:d1:f4:c5:b4:
0b:2c:b0:4d:e7:a8:f4:d3:9e:0e:b1:74:43:15:e0:
88:cc:ee:f8:32:f7:9e:cc:16:e8:20:d9:01:91:c8:
76:ae:ea:3f:62:8a:c4:d2:84:6b:b8:94:89:0f:58:
56:c0:62:25:2b:dc:88:bf:1e:25:ac:4e:42:a6:13:
18:ac:d4:e4:55:d2:0b:d1:69:29:5e:35:f1:eb:1e:
3e:68:18:37:d6:40:35:52:34:c5:11:05:08:46:8a:
e1:2f:ed:0f:18:03:df:cc:d8:49:f0:4a:30:e9:ae:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0C:AF:B7:3A:EF:AE:1E:92:06:60:94:27:A5:4C:0A:E7:B3:EB:0E
X509v3 Authority Key Identifier:
keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d9:e0:81:a6:95:32:c4:e7:f7:88:e2:3f:29:20:56:62:95:
ed:2d:66:b9:32:5a:7f:4f:10:0e:39:e9:53:06:c6:c0:f4:25:
df:41:7a:ac:41:a9:8e:3b:06:f2:16:01:77:0b:7e:ee:7f:85:
6b:39:65:08:d6:2e:ba:3b:10:36:8e:c5:cb:74:c5:a3:c1:9b:
c9:a0:de:d5:ac:5a:5b:08:db:18:91:bb:97:93:62:0f:65:3a:
ed:01:d4:45:e1:3e:db:97:2d:7e:48:21:8e:8a:8d:de:a8:d7:
47:e7:7c:c1:34:fb:34:d4:95:85:62:60:0f:8a:bf:bb:95:09:
d1:1e:c4:5d:9e:e8:44:e6:7f:a0:a0:44:28:e4:69:0f:d5:8c:
52:d8:8d:b2:c4:08:70:77:1a:96:1c:fb:c3:32:3d:45:2d:41:
01:79:6c:95:d0:85:a4:c6:35:80:be:3e:7b:1f:8b:c8:d1:7b:
39:d7:70:95:70:8f:3b:89:42:a8:ec:5a:2c:59:4d:1e:ef:b5:
63:d6:58:18:53:f4:42:a5:47:60:72:ff:6c:10:6f:18:01:d6:
e1:00:3a:36:0a:e2:2c:26:3f:a5:89:7b:18:55:af:96:eb:1a:
42:7c:8b:f4:79:af:aa:f8:ce:38:76:54:39:0a:d1:27:13:7f:
76:33:1c:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdlHycMlKx4wvv24QYkFDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjVhOGMwMDk1ODI1ZTEzZjQ2YmRiMzcwYjdmZGNhOWI5
ZjhhNTIwHhcNMjYxMTE1MDUwMDU4WhcNMjYxMTE2MDUwMDU4WjAzMTEwLwYDVQQD
EyhkNDBjYWZiNzNhZWZhZTFlOTIwNjYwOTQyN2E1NGMwYWU3YjNlYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpcDW5BpZz+D3FS4DRm6Dnk/VGTv
81ikQmBbI8MUMBHqGQtvIcB01421GLg1L4fUoPPovwDamqLVef6DEwcmeuHKBntW
Dy2pn/dRmVOhE8z+0HlG1HSEZ+3T17zhrG9w8SAMniVWW5VdE8VQ044QJPNLhPYv
fTFkErKEBIOuY9nA4IMJqJpbsHGCXwEVg/opVtH0xbQLLLBN56j0054OsXRDFeCI
zO74MveezBboINkBkch2ruo/YorE0oRruJSJD1hWwGIlK9yIvx4lrE5CphMYrNTk
VdIL0WkpXjXx6x4+aBg31kA1UjTFEQUIRorhL+0PGAPfzNhJ8Eow6a4o9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQMr7c6764ekgZglCelTArns+sOMB8GA1UdIwQY
MBaAFPO1qMAJWCXhP0a9s3C3/cqbn4pSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdXb3dBbFlKZUVfUnIyemNMZjl5cHVmaWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lMjY2NmUtNjllMS00MzdlLWEwMjEt
MjkyNmJiYzE2Nzk2LzEvODdXb3dBbFlKZUVfUnIyemNMZjl5cHVmaWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lMjY2NmUtNjllMS00MzdlLWEwMjEtMjkyNmJiYzE2Nzk2
LzEvODdXb3dBbFlKZUVfUnIyemNMZjl5cHVmaWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9nggaaV
MsTn94jiPykgVmKV7S1muTJaf08QDjnpUwbGwPQl30F6rEGpjjsG8hYBdwt+7n+F
azllCNYuujsQNo7Fy3TFo8GbyaDe1axaWwjbGJG7l5NiD2U67QHUReE+25ctfkgh
joqN3qjXR+d8wTT7NNSVhWJgD4q/u5UJ0R7EXZ7oROZ/oKBEKORpD9WMUtiNssQI
cHcalhz7wzI9RS1BAXlsldCFpMY1gL4+ex+LyNF7OddwlXCPO4lCqOxaLFlNHu+1
Y9ZYGFP0QqVHYHL/bBBvGAHW4QA6NgriLCY/pYl7GFWvlusaQnyL9HmvqvjOOHZU
OQrRJxN/djMcBg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:52:09 2026 by rpki-client