
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
File: 87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json)
Hash identifier: SEW0StaR+RShyQkQLJS3jHo8pe/dq7g4lFdmdwc+qmw=
Subject key identifier: 4E:E5:50:E4:88:D7:E3:FA:0C:11:98:CC:48:20:9C:E5:AC:5E:3E:B9
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial: 01A13F022E10387B8F42F824700BFA7C0BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
Manifest number: 1019
Signing time: Thu 15 Oct 2026 10:01:09 +0000
Manifest this update: Thu 15 Oct 2026 10:01:09 +0000
Manifest next update: Fri 16 Oct 2026 10:01:09 +0000
Files and hashes: 1: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: 7TviGtDfmSu9Mv2v/V19R/fRMmvw8gn/SwBBfcj6uaA=)
2: NIVEM8a4-ibHr5BVL9xzpmFFk_Q.roa (hash: 87ePAgc5oEPgRD0Bz1av1NhkVh8gPVXJ8VCqVfyz+p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:2e:10:38:7b:8f:42:f8:24:70:0b:fa:7c:0b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Validity
Not Before: Oct 15 10:01:09 2026 GMT
Not After : Oct 16 10:01:09 2026 GMT
Subject: CN=4ee550e488d7e3fa0c1198cc48209ce5ac5e3eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e7:94:05:8e:61:fa:24:4e:8a:d8:09:75:b5:
cd:3a:18:9c:71:8c:d9:d4:ca:39:70:b4:03:1e:b0:
00:ab:47:28:18:37:2f:ff:2e:6f:7c:1b:d9:09:01:
96:d0:1c:6d:3a:1b:22:53:06:72:9b:2f:4e:21:ca:
7f:6d:fd:37:d5:1c:18:20:3a:df:0c:21:55:37:a5:
97:2c:51:c3:c3:cf:f2:a9:ad:5d:30:cd:8c:ae:34:
be:73:3f:3d:2a:90:84:03:96:a1:10:91:15:24:43:
1b:6d:66:df:50:24:6d:c5:ee:f7:c9:ea:2e:90:f9:
e3:dd:66:ff:51:d7:b8:c0:65:9d:6f:3f:84:80:94:
76:41:4b:f4:49:c3:6b:21:aa:7c:c5:4f:27:44:3f:
45:53:3e:ab:18:13:30:ea:7b:48:b9:34:15:b5:68:
5a:e2:84:b0:a4:ae:03:6c:b9:42:58:c4:0d:15:d7:
9e:92:ae:13:02:21:d6:b5:d8:5d:e1:1a:29:eb:36:
22:be:37:f4:af:f5:91:e3:0a:60:3f:2d:86:8d:ed:
e6:bf:f3:79:e7:bd:bd:7b:3b:93:d8:42:c1:de:e7:
4c:35:4a:f9:c9:97:7a:0e:e2:18:d1:dc:de:b3:7f:
8e:e9:65:51:ef:46:ce:2d:2d:55:ac:9f:48:5d:78:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:50:E4:88:D7:E3:FA:0C:11:98:CC:48:20:9C:E5:AC:5E:3E:B9
X509v3 Authority Key Identifier:
keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:92:36:10:0b:b8:d5:68:23:7c:15:c4:8c:cf:27:a6:af:da:
f1:68:78:11:a3:07:31:ce:c0:42:a0:d7:fc:c2:ae:89:10:18:
c5:f6:0a:81:16:1c:53:2d:95:7d:e0:5f:43:0c:c1:b9:a5:85:
2d:a6:7f:63:ef:8b:9f:81:52:2f:4a:88:02:24:a6:35:8c:96:
9e:7a:3f:34:de:7d:63:b9:fb:e7:34:33:01:08:72:c7:fd:b8:
30:46:0d:5f:88:14:9b:ce:b4:71:ea:76:24:92:bf:97:9b:a5:
e6:62:6e:35:bb:14:f6:fb:e8:ee:74:c9:2a:e5:68:c8:4c:ce:
1a:2e:aa:db:1d:7c:12:58:6e:30:0a:e2:82:e2:fb:98:57:03:
9a:bc:1f:c7:9b:87:e6:2e:71:20:6d:58:46:28:ba:ac:8a:b0:
5f:7e:16:c9:82:c1:2a:2a:c5:16:ab:12:bc:98:ef:91:86:90:
87:21:40:a2:f8:91:6c:29:c6:c5:5f:cb:8c:1c:67:d8:2a:eb:
1a:1b:de:49:26:92:9a:ac:83:fb:43:c5:d7:19:39:22:7e:14:
1e:c8:b1:93:e9:3d:21:09:0f:f1:5d:62:0f:7f:2a:19:48:3e:
f7:e9:b5:c5:10:2c:0d:d4:39:e5:ad:7c:db:9e:6c:cf:04:af:
e6:b7:bf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:26 2026 by rpki-client