Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
File: 87WowAlYJeE_Rr2zcLf9ypufilI.mft (raw, json)
Hash identifier: qkuve07p5w0YtBiRMAp9VWUqzfbcY4kQnwnjIbsa62Q=
Subject key identifier: BA:20:4C:99:C2:87:85:FC:C4:FB:0E:59:A8:3C:34:B2:3B:64:B5:3E
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Certificate issuer: /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial: 019D38D39D1516659A5477F890E517814928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
Manifest number: 03FC
Signing time: Sun 29 Mar 2026 09:01:25 +0000
Manifest this update: Sun 29 Mar 2026 09:01:25 +0000
Manifest next update: Mon 30 Mar 2026 09:01:25 +0000
Files and hashes: 1: 3GSfCOp1qnomvR3CmYO9EsBhC7o.asa (hash: xfoU+Ips6oEaOKv6Fib2vuh0GAZn1Zkx/WZm05j9NRo=)
2: 87WowAlYJeE_Rr2zcLf9ypufilI.crl (hash: 4dTmTfwWHIvdrmZS3rmLfxEF4OM6xSJMvb39aDQEqc4=)
3: kvsR5vGqCUlad7hcwSexC9HOmQU.roa (hash: BQWcBL0pNsLmhZ/6jOKzXhoMqdBErbR1kzhV9E5bnP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9d:15:16:65:9a:54:77:f8:90:e5:17:81:49:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Validity
Not Before: Mar 29 09:01:25 2026 GMT
Not After : Mar 30 09:01:25 2026 GMT
Subject: CN=ba204c99c28785fcc4fb0e59a83c34b23b64b53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5a:06:8a:8d:3e:23:5e:6c:7f:ca:82:42:86:
17:73:3c:d5:89:89:43:0e:2a:6d:a4:80:04:03:ca:
b9:57:c2:f1:81:bb:5b:2c:07:d9:6c:09:e9:7d:72:
be:a7:2a:8e:fd:19:f2:ca:f6:66:8a:e1:d1:31:11:
6a:b7:ac:1f:c2:d5:81:42:b8:48:97:9f:21:dc:a5:
e4:41:5d:5e:89:fd:0d:9c:5a:6b:4c:c2:39:9b:ca:
d5:5b:4e:b6:01:41:ad:4e:42:2e:45:a6:7e:d0:cc:
5d:c2:31:1f:14:46:30:1e:3f:9c:09:28:45:d8:61:
65:9f:73:bb:f3:4b:9e:1a:f3:5d:4c:98:e0:16:64:
42:70:1a:ce:dd:e4:f8:48:a7:db:4f:fa:1c:25:87:
f8:3a:77:72:d1:2b:94:68:06:23:d4:61:90:c5:84:
29:c2:39:ad:49:66:f3:c0:51:77:39:47:28:8c:24:
c7:16:a4:79:7a:5c:59:95:80:71:44:01:fe:0e:86:
2f:59:da:68:3a:5d:90:2d:4a:c7:55:34:f2:2f:97:
7f:05:d2:67:08:2a:b0:34:94:e9:de:6f:a5:76:bf:
73:fe:02:19:5e:f1:b2:5a:b0:f6:2d:ca:18:56:af:
d9:18:23:8b:82:e6:37:4e:00:8b:9e:42:ee:f6:57:
6d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:20:4C:99:C2:87:85:FC:C4:FB:0E:59:A8:3C:34:B2:3B:64:B5:3E
X509v3 Authority Key Identifier:
keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:73:80:99:05:1d:a7:02:15:7b:57:eb:bb:15:3d:dd:ec:85:
69:a1:30:7a:9b:8f:43:35:05:9b:4e:5b:27:47:06:d5:21:89:
18:a5:ce:f2:f1:62:df:37:bd:f0:99:cc:1b:9a:54:b8:74:1d:
50:59:d2:9c:6d:b0:1e:ce:65:05:e3:02:8e:f8:c8:35:72:03:
97:7d:0f:b7:88:16:77:61:91:e8:f7:6d:28:6a:4b:49:72:51:
f0:8f:ab:e9:6b:7a:34:22:8c:4d:df:77:ca:ac:19:14:aa:f6:
5f:bf:91:bd:fb:70:b9:0e:c0:a1:24:70:df:21:f5:1c:a6:6b:
b8:19:61:24:01:1b:e2:b1:ac:2b:3e:2f:01:eb:86:d4:68:7c:
e9:12:fe:5c:ed:bb:ee:c6:4a:f9:ac:38:1a:8b:17:0d:4e:e8:
e3:3f:86:ea:3f:1f:65:96:91:a5:51:fe:0e:58:95:1d:c8:01:
1c:e6:3e:c9:e2:37:8b:6d:7c:e2:83:0c:05:b3:06:b3:6d:28:
5e:00:97:7f:07:c5:69:74:af:11:be:c0:d7:3d:8e:5e:43:65:
c2:50:4b:08:92:85:6a:ce:b7:cb:6c:4d:a7:64:7d:e8:f6:53:
f0:e0:1f:8e:dd:09:4a:93:c8:40:a1:71:be:cc:96:85:f7:a7:
99:3e:d4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:12 2026 by rpki-client