Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
File: 87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json)
Hash identifier: kmwf/B6CiHztz68jFwkvc7kMb4QngSOdoyBLmyx0tnA=
Subject key identifier: 86:40:58:B3:70:21:49:DA:56:49:AA:A8:B7:5D:DC:3F:4A:75:8C:E8
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial: 019F189F0C4E8ED39F9E02F27D928A1555D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
Manifest number: 0EFC
Signing time: Tue 30 Jun 2026 13:01:44 +0000
Manifest this update: Tue 30 Jun 2026 13:01:44 +0000
Manifest next update: Wed 01 Jul 2026 13:01:44 +0000
Files and hashes: 1: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: n4WxJIeyaqVqDew3gTLBuNTClzwTUnpZYBOvBrNpzBg=)
2: NIVEM8a4-ibHr5BVL9xzpmFFk_Q.roa (hash: 87ePAgc5oEPgRD0Bz1av1NhkVh8gPVXJ8VCqVfyz+p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9f:0c:4e:8e:d3:9f:9e:02:f2:7d:92:8a:15:55:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Validity
Not Before: Jun 30 13:01:44 2026 GMT
Not After : Jul 1 13:01:44 2026 GMT
Subject: CN=864058b3702149da5649aaa8b75ddc3f4a758ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:0d:a6:c7:17:bf:6d:be:b7:ce:b8:6c:39:
c2:cd:c8:9b:c9:ba:38:24:18:fa:48:85:73:71:8a:
24:5a:d5:66:e5:f6:94:2d:69:e4:db:35:dc:5b:af:
3c:89:00:11:81:04:39:ef:a4:01:67:f2:92:4e:02:
d2:0a:2e:21:8e:8f:19:c3:e6:37:c2:b3:d3:ea:57:
4e:1f:51:07:11:b3:10:e3:e6:6b:4d:30:e0:fa:c6:
65:14:67:1b:36:36:d6:7f:cb:94:ef:d0:80:ef:3f:
51:6a:e8:f9:54:d8:67:75:83:6f:66:c8:68:89:6f:
f7:2f:63:33:20:f9:b3:cc:f1:f3:4b:96:43:05:30:
0b:d1:07:15:64:a4:e4:e4:ca:ce:dc:b4:2e:3a:fc:
de:86:df:7a:f1:89:9c:b0:36:cd:7d:23:10:3b:db:
71:32:da:1e:ce:a0:27:0b:9b:93:a5:f5:08:41:a7:
c4:fc:5c:d9:2d:2a:a5:37:3b:c9:b3:11:aa:d0:cd:
a7:b2:4d:39:2f:50:95:f1:f1:79:6d:0a:04:ed:2b:
53:d5:79:89:90:4a:ef:71:e7:6c:75:5a:ef:14:b6:
f0:35:7b:3a:04:9f:d2:1f:4f:04:d4:91:fa:5b:4f:
9d:72:ce:da:26:ce:4d:fc:14:ab:f6:28:5e:fc:6d:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:40:58:B3:70:21:49:DA:56:49:AA:A8:B7:5D:DC:3F:4A:75:8C:E8
X509v3 Authority Key Identifier:
keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bd:d8:77:48:e9:3c:af:22:07:9b:05:93:c1:31:74:b2:f9:
89:ab:ca:12:55:2c:dc:aa:0c:06:54:fb:5b:62:e3:d2:95:86:
b3:f0:5b:45:5a:70:6e:e6:71:3f:ff:13:60:03:28:80:23:60:
2d:29:64:4c:5c:92:b0:2d:72:d3:5e:aa:54:cf:45:88:1e:89:
48:09:e3:21:fa:47:00:49:18:e7:e7:e3:cc:b2:70:53:de:62:
3d:6b:21:3a:1b:7b:36:57:ed:b4:9a:74:1a:53:ad:4e:8c:0c:
25:f4:6e:d1:5d:f8:d3:81:10:7a:00:5d:f4:3d:0f:31:4b:f1:
d3:d6:96:92:33:26:4c:29:dd:ea:e8:61:34:1a:75:54:2c:0b:
7a:33:75:1b:d9:56:9e:00:1c:2a:dc:1f:9c:59:6c:c7:ca:25:
5a:e2:da:40:57:12:84:8c:4f:55:33:83:34:36:2a:33:c9:82:
e0:75:0e:5e:bc:ee:3b:5b:48:cb:99:c4:42:fe:26:20:24:5c:
9b:b5:56:c3:9f:38:d1:55:12:8f:88:e9:55:d2:10:92:12:a5:
73:27:88:a7:12:ae:8d:3e:ef:7b:73:1a:57:3f:32:5c:c2:e2:
87:95:fd:13:66:23:67:eb:78:34:5f:4e:31:c6:b2:a1:ed:e8:
f5:2b:4d:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnwxOjtOfngLyfZKKFVXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjdkZDU0ZGFiMDJmZThjZGU4YTg1ZTU2OWY4MjcwODg5
Nzk0MTkwHhcNMjYwNjMwMTMwMTQ0WhcNMjYwNzAxMTMwMTQ0WjAzMTEwLwYDVQQD
Eyg4NjQwNThiMzcwMjE0OWRhNTY0OWFhYThiNzVkZGMzZjRhNzU4Y2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlsNpscXv22+t864bDnCzcibybo4
JBj6SIVzcYokWtVm5faULWnk2zXcW688iQARgQQ576QBZ/KSTgLSCi4hjo8Zw+Y3
wrPT6ldOH1EHEbMQ4+ZrTTDg+sZlFGcbNjbWf8uU79CA7z9Rauj5VNhndYNvZsho
iW/3L2MzIPmzzPHzS5ZDBTAL0QcVZKTk5MrO3LQuOvzeht968YmcsDbNfSMQO9tx
MtoezqAnC5uTpfUIQafE/FzZLSqlNzvJsxGq0M2nsk05L1CV8fF5bQoE7StT1XmJ
kErvcedsdVrvFLbwNXs6BJ/SH08E1JH6W0+dcs7aJs5N/BSr9ihe/G0QVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZAWLNwIUnaVkmqqLdd3D9KdYzoMB8GA1UdIwQY
MBaAFPO33VTasC/ozeioXlafgnCIl5QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS84NDBkYzEtODNmYy00ZjlkLWJlNWUt
MTkzOTg4M2JiMWY4LzEvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS84NDBkYzEtODNmYy00ZjlkLWJlNWUtMTkzOTg4M2JiMWY4
LzEvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdb3Yd0jp
PK8iB5sFk8ExdLL5iavKElUs3KoMBlT7W2Lj0pWGs/BbRVpwbuZxP/8TYAMogCNg
LSlkTFySsC1y016qVM9FiB6JSAnjIfpHAEkY5+fjzLJwU95iPWshOht7NlfttJp0
GlOtTowMJfRu0V3404EQegBd9D0PMUvx09aWkjMmTCnd6uhhNBp1VCwLejN1G9lW
ngAcKtwfnFlsx8olWuLaQFcShIxPVTODNDYqM8mC4HUOXrzuO1tIy5nEQv4mICRc
m7VWw5840VUSj4jpVdIQkhKlcyeIpxKujT7ve3MaVz8yXMLih5X9E2YjZ+t4NF9O
Mcayoe3o9StN5w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:03 2026 by rpki-client