Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier: PJL44vtWWRuK5YAb2OVzIphbPXMTc4zxG2U5VJDHAmo=
Subject key identifier: AD:20:E4:71:CF:22:BD:A7:6E:9B:B2:30:14:21:E7:A5:14:9A:2E:A3
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial: 019D389C57090B3DDBCE8AFE774647843A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number: 1050
Signing time: Sun 29 Mar 2026 08:01:03 +0000
Manifest this update: Sun 29 Mar 2026 08:01:03 +0000
Manifest next update: Mon 30 Mar 2026 08:01:03 +0000
Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: UJRppid/TQLBiVSn+KCYrAPqxJuCgRz02UUcOZvguRo=)
2: q7302L2OQ1J4JgKpMluxPnKa3L4.roa (hash: CogkGEqQAlbPJasD50LgFH8JZg8Ucl8+7Lw8QmjihaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:57:09:0b:3d:db:ce:8a:fe:77:46:47:84:3a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Validity
Not Before: Mar 29 08:01:03 2026 GMT
Not After : Mar 30 08:01:03 2026 GMT
Subject: CN=ad20e471cf22bda76e9bb2301421e7a5149a2ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:f6:8a:31:be:01:83:46:6f:3f:18:1a:81:
cf:fd:1e:d6:21:9d:c5:27:f5:c9:fc:57:a0:8e:c2:
85:57:42:6d:37:6d:19:85:ba:c2:4b:70:6e:92:b1:
19:c6:7f:71:67:e7:32:9c:db:ad:c9:d9:df:45:42:
5a:2d:0a:45:f5:9a:d5:d7:3c:ba:be:ed:46:fd:38:
75:5e:db:66:a0:68:bf:39:1b:9f:b8:83:77:bb:51:
81:73:9e:19:7e:85:75:0a:d9:11:25:ed:7e:d0:35:
9c:30:1e:fa:f9:0e:20:1a:cb:b0:a6:0c:be:5b:57:
61:98:b6:1b:0d:70:a0:fb:41:c4:85:1f:f3:a7:14:
d7:fa:ec:13:be:e7:12:4d:7e:78:39:f4:3f:96:02:
45:73:bc:44:05:0c:77:dd:1b:21:1b:25:88:be:6d:
22:36:96:5e:d6:b5:30:e4:7d:c3:35:af:11:ae:7e:
a9:e3:09:40:f3:d2:cc:b0:c9:03:d1:6c:35:4a:56:
b3:f0:39:fc:6e:74:a2:68:a1:c4:b1:86:04:be:a4:
9b:88:0f:79:61:76:91:7f:80:2d:61:ca:6b:07:3b:
f0:27:f8:1b:df:26:09:cf:88:5f:57:63:92:cf:3d:
f6:1f:08:81:46:f9:10:b9:b3:df:cd:8d:31:1b:2a:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:20:E4:71:CF:22:BD:A7:6E:9B:B2:30:14:21:E7:A5:14:9A:2E:A3
X509v3 Authority Key Identifier:
keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2a:63:c3:df:b3:b1:b2:77:3c:59:f8:0e:93:28:08:46:37:
c9:5c:d4:f9:eb:05:b0:ca:85:3d:d4:28:17:cf:96:98:66:13:
bf:2d:85:39:6b:4c:1c:f4:d9:a2:3b:8b:2d:10:0e:17:6a:aa:
2b:94:ec:e8:e9:11:94:7f:39:c0:7b:74:fd:12:29:0a:f6:e6:
7e:1c:e1:0b:89:f9:3a:c6:4a:79:0a:9b:88:3e:1b:91:51:b6:
45:90:32:8c:8f:4b:1c:67:3e:14:94:ac:f0:82:64:20:e7:5a:
da:13:27:db:b8:a7:52:76:91:6b:7a:ec:3a:1b:35:99:6e:fd:
40:77:7c:1d:3c:1a:e3:12:6f:56:9f:20:d0:d2:19:86:b0:ae:
27:70:4c:45:80:39:16:9e:1e:8d:5e:9f:2c:44:ce:d9:41:77:
71:8e:0e:82:40:a3:2e:3f:b1:10:0d:1b:9f:44:ac:13:90:a1:
eb:eb:69:2a:00:3c:55:5e:4b:40:87:45:ed:ae:12:53:01:f7:
fa:c0:f1:fd:1d:34:2b:ed:4b:67:fa:28:06:50:ab:95:db:9f:
5e:9a:86:b5:4f:ca:7d:44:c5:51:3f:21:b0:da:a0:52:eb:6d:
32:fa:0b:75:e6:87:04:59:16:76:9e:b9:2b:6d:0c:c9:9b:49:
22:c9:dd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:17 2026 by rpki-client