Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
File: 87qQxx60ywFpyUhD5ccv13dQGQY.mft (raw, json)
Hash identifier: 1qfYSlkL2QKDwigX85jqxeoX934K5vU33d2UqdcBqKM=
Subject key identifier: 18:BE:DC:F9:C5:5D:A1:68:B5:A4:25:EE:80:32:7E:E8:47:6D:01:CA
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 019D38D392BF0AD6C25953C16EA2636F9F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
Manifest number: 16E7
Signing time: Sun 29 Mar 2026 09:01:22 +0000
Manifest this update: Sun 29 Mar 2026 09:01:22 +0000
Manifest next update: Mon 30 Mar 2026 09:01:22 +0000
Files and hashes: 1: 87qQxx60ywFpyUhD5ccv13dQGQY.crl (hash: Pp0wBNo32m2Umpoe+jlVegstKDTfABOhP1dln64CCkU=)
2: HFbNCHkvFA8jkd2sknvleLz36Tg.roa (hash: fi2cqyuRcru8EJ7IltLtB/qriwTw+zg8CNvhM51ultA=)
3: UKaxkQEqDefi6Q-PAxV70oCO_r8.roa (hash: U/xm0eOwS2N25g8rhsisLKcIXoZW3KuS4QAYfKx9zWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:92:bf:0a:d6:c2:59:53:c1:6e:a2:63:6f:9f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: Mar 29 09:01:22 2026 GMT
Not After : Mar 30 09:01:22 2026 GMT
Subject: CN=18bedcf9c55da168b5a425ee80327ee8476d01ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:48:56:1a:60:71:de:a8:6e:43:44:50:d7:
b1:1b:91:9b:fd:8c:c3:46:15:cc:8f:2e:50:76:6c:
90:5d:30:45:2e:f3:9a:09:eb:a6:be:84:f4:6e:f7:
4a:91:bb:53:82:ff:f2:1c:cc:fd:6c:5f:f4:f1:39:
50:35:3e:44:4a:4f:37:4d:26:70:03:c6:c7:7f:e0:
e5:c9:0c:cd:7c:59:28:3d:22:5b:bb:77:2c:09:af:
68:b8:f7:4b:25:c7:56:82:c7:d2:9c:f6:33:d5:f5:
40:cb:91:ae:95:72:67:c4:56:98:6a:73:04:1b:16:
19:97:60:ab:da:06:d7:03:d4:fe:6c:26:da:26:4c:
f4:7b:11:c0:5e:56:3f:ed:db:23:a1:41:0c:35:60:
ef:bb:5a:a1:4a:0d:a2:27:aa:9f:c6:de:6d:fc:51:
b6:8f:f6:9d:f3:93:63:63:3d:ad:d9:04:2a:be:b9:
54:a8:09:41:65:d6:b9:72:ae:ab:d6:22:82:20:58:
de:ce:eb:e8:3b:a4:21:a1:50:cd:9b:60:81:2a:cb:
01:77:1d:33:19:ae:28:f2:78:f1:76:3a:30:d7:41:
2d:dd:89:2e:e9:4b:10:d3:33:25:00:41:d2:ca:b4:
20:2b:7f:64:c5:af:77:40:ae:7f:3a:5f:ca:b0:98:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BE:DC:F9:C5:5D:A1:68:B5:A4:25:EE:80:32:7E:E8:47:6D:01:CA
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:69:53:bf:b4:83:a3:fb:30:d4:cd:4c:f6:7a:c8:f8:9a:07:
da:c1:3a:c5:98:fe:8e:bd:b8:0f:7a:48:c2:96:25:a8:c3:70:
c1:92:89:1b:ad:3d:3f:dc:6f:1a:d6:d2:50:f1:8e:6a:24:01:
64:d1:37:6b:dc:fe:be:bb:2f:7c:44:19:df:26:1d:fc:c6:5d:
51:ee:2b:a6:6b:7f:23:ec:ce:66:a2:22:75:94:93:72:52:82:
37:a7:72:78:b4:1a:42:f4:f2:fe:50:ef:06:73:05:54:f9:e7:
00:f4:d8:02:68:60:37:d4:57:a3:24:42:23:28:e2:23:2f:f1:
48:a4:f6:1d:76:9e:fb:82:c9:eb:f1:6d:7a:0a:f9:ca:0a:3b:
3a:62:7a:e0:cc:a0:63:26:1c:39:f9:a2:36:61:e8:d6:91:11:
11:1c:cd:3a:96:bb:2f:b5:99:e1:f5:c2:70:9a:e5:25:d3:55:
d4:ed:d4:41:c8:b7:58:b0:0b:78:7a:d4:1c:c1:b0:42:d5:83:
24:ec:6a:3d:5f:49:f4:bf:3c:57:0d:b0:e2:0b:1c:c0:f7:e3:
54:17:3b:ba:b3:8c:b8:bd:cb:72:21:5d:fb:78:59:23:68:57:
27:d7:63:9f:2f:f0:f5:a0:67:e1:0f:2c:39:4d:ef:ba:4b:25:
e4:a7:ea:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:44 2026 by rpki-client