Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier: 9smRT28nUNnCWTN4aK2rHlgoya6hbcfTqDxTyGiWOt0=
Subject key identifier: D1:9D:69:35:2E:03:48:09:36:34:73:63:44:85:43:B0:52:F5:4E:FF
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial: 01A11560C0FDEE33698A1663FCC14776C402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number: 1250
Signing time: Wed 07 Oct 2026 08:00:24 +0000
Manifest this update: Wed 07 Oct 2026 08:00:24 +0000
Manifest next update: Thu 08 Oct 2026 08:00:24 +0000
Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: 3ua6KvJlx2jLIvrRln37JtHMbMMEKqrk4WC+XMkxndQ=)
2: q7302L2OQ1J4JgKpMluxPnKa3L4.roa (hash: CogkGEqQAlbPJasD50LgFH8JZg8Ucl8+7Lw8QmjihaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:60:c0:fd:ee:33:69:8a:16:63:fc:c1:47:76:c4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Validity
Not Before: Oct 7 08:00:24 2026 GMT
Not After : Oct 8 08:00:24 2026 GMT
Subject: CN=d19d69352e03480936347363448543b052f54eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:b1:2e:bc:50:27:e0:24:e9:b2:c9:cd:cb:
e0:50:16:0b:00:da:92:5f:ee:d3:e6:a7:74:58:e1:
d2:13:1d:ba:ed:8e:fd:da:5d:d9:dc:cd:cb:75:45:
6d:73:ad:4d:22:83:d9:26:37:f4:52:39:dd:9d:81:
01:af:26:29:cc:f0:8c:81:47:20:50:19:7b:b6:aa:
0c:c2:aa:e9:e2:4a:a5:c1:c4:2c:dc:b0:c9:97:ca:
02:61:22:56:fe:f9:f2:6f:47:d8:79:17:0c:a6:3d:
6b:bf:e1:7f:a3:48:3e:6c:4f:46:04:45:ed:94:be:
69:f5:e4:2d:e4:78:88:ef:ed:11:75:c6:d4:d7:6f:
ce:f1:62:f9:62:f6:d4:aa:a1:41:54:ad:e4:fb:ca:
3f:8b:e0:ab:90:0c:99:db:6b:bd:b1:68:f7:f6:fa:
96:19:61:6e:a0:6b:ec:88:70:bb:d4:20:e5:e3:51:
ed:99:36:9c:3c:18:fa:c3:35:b9:f9:b1:26:27:b5:
36:d1:af:b9:06:5b:b4:80:ea:87:8a:52:19:ca:b9:
55:cf:dc:fb:f9:a8:69:fc:29:04:ab:92:c0:d0:69:
0a:14:7f:54:73:f9:8b:b0:32:8d:ff:38:c6:f8:a4:
e2:af:cc:f2:cf:cd:c9:8e:bc:ee:a7:88:98:d2:cf:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9D:69:35:2E:03:48:09:36:34:73:63:44:85:43:B0:52:F5:4E:FF
X509v3 Authority Key Identifier:
keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:09:03:e2:ee:80:35:36:bb:24:53:30:3d:32:13:ab:68:a5:
5a:76:ee:e4:44:bb:80:8e:ad:b4:31:e6:51:09:d4:86:9f:c4:
60:87:98:1e:42:40:50:d7:d2:69:2e:03:5c:9c:e7:5b:1f:ce:
f6:9f:57:41:b4:1f:b2:e9:4a:d4:28:c6:a4:7a:4a:f3:59:e9:
d3:0b:f5:48:5b:92:4c:e0:f7:35:d3:85:b0:17:c0:af:44:b1:
5b:6d:d1:91:93:22:af:11:3d:af:ee:1e:c9:89:4f:af:87:4e:
a3:5f:11:f1:47:25:3d:70:9c:76:7d:e0:e7:52:e4:d1:85:f9:
05:6e:7a:ef:14:b1:cc:20:93:11:6d:77:40:25:37:93:56:1f:
e6:ef:9c:b8:f5:56:31:8d:fd:7a:cd:7b:ca:a8:88:6b:1b:95:
81:0f:d5:f1:6b:63:80:74:e5:8b:22:29:0d:06:96:8a:e0:eb:
f8:ea:b4:7f:5f:3e:3f:02:96:a4:fc:a9:58:6b:ba:02:59:fd:
cf:67:d8:9b:44:7a:e3:c7:61:c0:f2:64:41:a4:fa:e4:c9:1b:
64:c4:20:d9:44:6e:95:18:02:2f:22:8a:ee:cf:16:24:85:db:
42:b7:91:93:97:fd:ad:87:50:84:53:d2:84:cf:6f:9f:2c:11:
1e:dd:83:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEVYMD97jNpihZj/MFHdsQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3Y2VkMDIxZjk5MTRkMTJkNDE4ZDlhYTIzOGM5MzgyNWVh
NWY2MDUwHhcNMjYxMDA3MDgwMDI0WhcNMjYxMDA4MDgwMDI0WjAzMTEwLwYDVQQD
EyhkMTlkNjkzNTJlMDM0ODA5MzYzNDczNjM0NDg1NDNiMDUyZjU0ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYWxLrxQJ+Ak6bLJzcvgUBYLANqS
X+7T5qd0WOHSEx267Y792l3Z3M3LdUVtc61NIoPZJjf0UjndnYEBryYpzPCMgUcg
UBl7tqoMwqrp4kqlwcQs3LDJl8oCYSJW/vnyb0fYeRcMpj1rv+F/o0g+bE9GBEXt
lL5p9eQt5HiI7+0RdcbU12/O8WL5YvbUqqFBVK3k+8o/i+CrkAyZ22u9sWj39vqW
GWFuoGvsiHC71CDl41HtmTacPBj6wzW5+bEmJ7U20a+5Blu0gOqHilIZyrlVz9z7
+ahp/CkEq5LA0GkKFH9Uc/mLsDKN/zjG+KTir8zyz83Jjrzup4iY0s+QOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGdaTUuA0gJNjRzY0SFQ7BS9U7/MB8GA1UdIwQY
MBaAFPfO0CH5kU0S1BjZqiOMk4JepfYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQt
YzM4NjYxZmJmMjJhLzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQtYzM4NjYxZmJmMjJh
LzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAkD4u6A
NTa7JFMwPTITq2ilWnbu5ES7gI6ttDHmUQnUhp/EYIeYHkJAUNfSaS4DXJznWx/O
9p9XQbQfsulK1CjGpHpK81np0wv1SFuSTOD3NdOFsBfAr0SxW23RkZMirxE9r+4e
yYlPr4dOo18R8UclPXCcdn3g51Lk0YX5BW567xSxzCCTEW13QCU3k1Yf5u+cuPVW
MY39es17yqiIaxuVgQ/V8WtjgHTliyIpDQaWiuDr+Oq0f18+PwKWpPypWGu6Aln9
z2fYm0R648dhwPJkQaT65MkbZMQg2URulRgCLyKK7s8WJIXbQreRk5f9rYdQhFPS
hM9vnywRHt2D8Q==
-----END CERTIFICATE-----
Generated at Wed Oct 7 15:44:38 2026 by rpki-client