Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
File: 87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json)
Hash identifier: Fc5dSGMhWwfkR6Rlyyr+/ezbSnwqnRw8DO7cJCHZ86E=
Subject key identifier: 49:D4:FE:27:E0:88:20:57:09:85:BE:B5:99:7B:4E:C8:65:4F:09:37
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial: 019D39AECF1FB8FBAE5E914778CFCDE480E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
Manifest number: 0E04
Signing time: Sun 29 Mar 2026 13:00:50 +0000
Manifest this update: Sun 29 Mar 2026 13:00:50 +0000
Manifest next update: Mon 30 Mar 2026 13:00:50 +0000
Files and hashes: 1: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: RcBZ0E47AvQjfl1/jMhJhkgl9hpWThKR38SvtyVDtHk=)
2: NIVEM8a4-ibHr5BVL9xzpmFFk_Q.roa (hash: 87ePAgc5oEPgRD0Bz1av1NhkVh8gPVXJ8VCqVfyz+p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:cf:1f:b8:fb:ae:5e:91:47:78:cf:cd:e4:80:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Validity
Not Before: Mar 29 13:00:50 2026 GMT
Not After : Mar 30 13:00:50 2026 GMT
Subject: CN=49d4fe27e08820570985beb5997b4ec8654f0937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:57:3a:9b:6a:04:67:f6:75:8f:89:dc:2e:
a0:b6:2f:f2:14:09:9f:cb:c0:07:07:8a:04:20:6a:
3b:ab:50:d8:8c:b1:fa:8b:ee:ee:31:34:d2:b1:c9:
ed:0f:db:50:58:75:4f:58:cb:e4:46:57:22:5f:49:
ee:96:32:32:3c:5e:40:ad:15:be:e2:56:e5:73:78:
39:5c:f8:ea:d5:42:04:b1:4d:d9:6c:23:fe:fc:85:
0e:7d:af:08:e7:89:23:c5:ca:4e:b2:ae:cc:fc:62:
07:67:bb:1d:ad:29:96:46:c5:2f:41:20:d5:e4:fb:
8e:01:6c:a0:31:dc:ff:ea:ff:86:34:2c:65:9c:3c:
16:4b:5d:da:8c:66:01:bd:e4:5c:4a:8f:15:94:6c:
63:4e:f6:6f:9a:3d:48:d9:35:97:12:49:1c:a8:5c:
a0:ee:69:2c:5e:34:ee:16:3c:87:8c:bf:2b:54:7d:
05:b6:d4:92:ee:7d:57:f5:72:41:55:5a:46:66:f8:
ba:fa:bd:d8:ba:6e:f0:7f:ce:30:f0:59:56:a9:aa:
d9:a8:fe:52:98:4f:67:12:d6:06:a9:d6:8c:83:40:
ff:03:83:96:79:da:50:5d:e9:71:dc:2f:7b:03:f0:
02:44:da:5b:a9:02:45:84:f6:fa:21:e0:bd:0e:3f:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D4:FE:27:E0:88:20:57:09:85:BE:B5:99:7B:4E:C8:65:4F:09:37
X509v3 Authority Key Identifier:
keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:84:10:e2:3d:eb:76:1b:7c:6e:e7:ed:12:fb:f3:6a:bd:40:
71:1d:fa:ef:8f:f2:cc:84:4c:32:53:65:80:90:01:0f:09:29:
10:77:bb:0a:3f:cb:f6:d2:c0:fc:f0:ef:32:3f:fc:69:72:76:
9e:d3:ec:f1:58:f1:2b:2d:36:5e:af:fd:15:6a:7b:2e:c3:d8:
58:65:ae:c0:e9:ff:a7:8e:fd:04:ae:95:45:a4:eb:b8:77:eb:
c1:e6:fd:21:44:f0:72:1d:91:dd:d2:f2:a5:09:af:b0:10:97:
6d:01:75:1a:6a:e7:05:b4:05:6d:b2:a7:4c:a2:bd:f6:64:9a:
0c:a7:0c:ed:0f:8a:61:57:3a:23:74:f4:3d:7a:17:f6:6b:1b:
27:49:ef:a6:f6:33:85:86:c9:b6:19:fa:20:4f:18:99:ef:b5:
68:07:17:18:8b:5b:4c:53:55:89:a4:2e:63:62:63:a4:4a:94:
7f:92:24:8e:dd:d4:0b:62:a6:7b:89:a5:d5:a3:16:c0:e8:9f:
86:74:52:53:ea:16:1d:a6:51:63:ce:e2:2c:0e:ed:f5:bc:90:
0b:4d:90:c2:e9:54:3c:c4:b0:21:45:d1:cf:fe:64:d6:bd:43:
1d:4b:3f:0a:46:a2:18:73:44:fc:57:be:66:f4:d3:84:f6:e8:
50:e5:94:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:37 2026 by rpki-client