Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier: HbOHgANerW7GDalgeq5CveNhrgr47TMl063yTpKiHws=
Subject key identifier: 2A:BE:A0:7A:E6:9B:8E:B1:EA:C3:42:77:E0:C1:3B:39:95:B5:76:85
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 019D375288D40F228C810CA3F1437A6018F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number: 11C4
Signing time: Sun 29 Mar 2026 02:00:48 +0000
Manifest this update: Sun 29 Mar 2026 02:00:48 +0000
Manifest next update: Mon 30 Mar 2026 02:00:48 +0000
Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: MZ8IE81IKle9UHcY8xwNGt5IbQrev0+46yt4Gi1GIi0=)
2: AspI11raW1W04hjS-S4dOvg7DJ0.roa (hash: vyR9bLbU9Kq6oSRsp+g4vq54T/skGcryAaf7JnoUv/A=)
3: Kt_KSYrDgcjqIw-tzOf1SsEuolE.roa (hash: iGYT2jk0/nojybC7EhwbZ+9UI5BCjZA3DlRVN4V+qoM=)
4: cLMf5Wd9_XCFE1K-8kc5wZs2Fi4.roa (hash: c7+KWt1SdxMn3TTxEN2hC0zORqA9HzBlfBHlbXmPphA=)
5: ehqv0V2Mxbz4tpd2nZ-H0adSaEo.roa (hash: 02XO0vXOdnlzhqYHTi75uxwmBCYXsERvvoqfOYq0+7M=)
6: uYwmLI9IgXoeBYgIJ67lD4M9yaw.roa (hash: KF+AYbOaxFn3R/9fgqU1GbRgcGguP9S+XNTb3CR98gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:88:d4:0f:22:8c:81:0c:a3:f1:43:7a:60:18:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Mar 29 02:00:48 2026 GMT
Not After : Mar 30 02:00:48 2026 GMT
Subject: CN=2abea07ae69b8eb1eac34277e0c13b3995b57685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:c9:8b:d2:8f:64:21:df:47:21:d2:d3:4f:
f6:da:99:85:61:a6:a0:9a:6a:09:f1:fe:45:e0:f9:
06:a3:22:59:58:d0:25:95:5e:83:4b:ca:13:ef:ee:
9b:be:74:f4:f0:b6:69:64:03:29:f5:69:5c:bc:62:
3c:df:7c:0f:7b:9f:44:7a:d3:49:f1:7c:12:ac:9a:
1a:b9:ec:51:2c:c5:c5:9a:17:b6:0e:e8:c0:6c:c6:
5b:da:ab:75:de:fc:d3:d3:04:75:21:85:f4:26:35:
2f:8d:39:d1:ef:a9:e8:46:22:14:a8:c6:96:3e:ab:
5a:86:e2:42:1e:79:15:d2:25:43:fc:82:e6:b3:3e:
82:33:ca:0c:3d:9b:a4:b8:56:ed:55:a5:20:2c:b7:
a2:41:e9:69:fb:25:f9:10:53:2b:82:d8:63:95:42:
1c:90:e2:bf:ab:2f:65:18:c2:09:5b:f1:a6:71:7a:
67:2c:26:f2:0a:cd:78:c7:30:af:43:39:b6:cf:63:
20:98:a1:8f:92:d0:d6:6d:9d:be:52:60:fc:80:5b:
61:6a:2e:a2:1c:5c:65:a1:65:08:86:dc:fe:6f:11:
d2:9f:fb:c3:70:bc:ff:90:1b:9a:43:31:2d:40:7d:
ac:7a:37:40:41:57:e5:7a:2d:f1:78:4d:a7:62:da:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:A0:7A:E6:9B:8E:B1:EA:C3:42:77:E0:C1:3B:39:95:B5:76:85
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:25:99:79:d8:8f:5a:cf:2d:eb:20:18:69:0b:01:74:3a:48:
64:23:67:86:ee:d0:a8:2d:d2:49:fe:fb:40:f5:10:79:d7:a4:
58:30:18:0c:de:e9:40:1a:05:3a:56:b1:a6:3f:45:d5:60:81:
f1:61:aa:9d:b9:50:87:a2:a2:e1:e1:89:af:ab:6d:69:3f:8e:
5a:9e:62:ce:8e:7a:bc:75:cc:60:15:e4:6b:43:7a:42:3c:5e:
55:53:7c:a9:2d:82:41:7b:0f:41:29:17:e7:ed:82:8f:64:e9:
03:d2:04:33:2e:fc:3e:7d:27:14:fe:aa:9d:20:55:26:9e:0b:
c5:ee:ba:93:22:18:7b:30:e2:37:59:31:74:4b:69:70:86:05:
f4:75:c6:b5:81:84:86:0b:91:69:c8:82:a3:eb:7a:0a:b0:b2:
ea:a9:43:e8:6a:0c:70:2a:71:58:d9:28:30:1b:cc:60:95:ec:
1e:68:11:fd:58:ee:90:8f:8d:62:f6:2f:fc:8f:49:8a:b1:9c:
e9:51:65:76:c6:c8:5f:ed:cd:38:2b:0f:91:3e:c5:aa:b1:0e:
81:54:66:5d:f7:71:d4:99:25:a3:c1:8a:69:ae:85:19:f4:8c:
45:c9:a0:80:73:fd:69:b1:93:c2:06:f4:a8:47:13:67:45:c7:
36:cf:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:31 2026 by rpki-client