Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: dbJmajTOBFq/wrwo+WhFPoiij5RNavuJ2qAj6ENSmGA=
Subject key identifier: 4F:14:CF:DA:BA:FA:B8:C4:03:AA:FE:C4:5D:32:34:BF:24:90:52:25
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 01A0C28D501D7A330737C0DDC4E0161516E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 0BFA
Signing time: Mon 21 Sep 2026 06:00:35 +0000
Manifest this update: Mon 21 Sep 2026 06:00:35 +0000
Manifest next update: Tue 22 Sep 2026 06:00:35 +0000
Files and hashes: 1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: /yjSIKji/wkzB859Lrupg7T9IiAWfSPMrZXrkxmlznU=)
3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:50:1d:7a:33:07:37:c0:dd:c4:e0:16:15:16:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Sep 21 06:00:35 2026 GMT
Not After : Sep 22 06:00:35 2026 GMT
Subject: CN=4f14cfdabafab8c403aafec45d3234bf24905225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:79:ec:fc:7c:4a:80:08:5f:d3:ef:48:bc:
54:87:f6:74:6a:1b:72:ff:0d:8f:95:cc:1e:c9:fd:
24:8d:0c:c3:f6:e9:e6:f2:d0:95:61:df:d0:81:18:
d4:91:de:29:a8:f9:3a:e5:52:3f:a8:68:00:59:b6:
1b:8e:7d:4c:af:e0:90:cc:fe:c5:59:d9:22:fa:4b:
fa:e9:4a:88:02:75:a1:15:cb:7f:81:61:cf:19:75:
5d:a9:65:48:7d:ad:fb:dc:57:35:59:84:47:02:89:
84:fd:6f:57:84:32:58:b6:fd:9a:20:ef:be:0f:7e:
5f:39:ab:a7:ff:e0:74:ed:4e:98:2b:04:ad:64:8f:
c2:9d:5d:69:40:65:5f:fd:77:2f:47:b0:bb:f9:07:
8f:c9:bb:f1:d4:53:87:ad:38:b7:c1:04:69:0b:9f:
8f:4d:9a:be:d9:c4:11:eb:28:3a:bc:f6:06:b8:fc:
45:60:33:dd:66:3d:4b:49:9d:70:47:d5:c8:ed:76:
ec:59:09:9c:54:90:5c:a5:6c:29:bc:f7:f3:d3:52:
91:c8:bc:b5:7e:8d:fd:4c:f6:f3:74:f5:48:f2:77:
55:ef:ab:99:bf:54:9e:aa:bd:c4:69:28:9e:58:25:
54:3a:9b:28:73:33:e3:48:10:9d:48:03:b3:f3:16:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:14:CF:DA:BA:FA:B8:C4:03:AA:FE:C4:5D:32:34:BF:24:90:52:25
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b8:18:1f:ff:c0:9c:78:5d:ff:68:e9:4b:eb:93:ce:93:ca:
68:2b:e0:02:7f:eb:c8:d5:ec:7d:83:62:ac:94:c5:61:6d:92:
38:86:81:1b:c7:b8:d7:00:5d:ae:7a:af:0e:4e:50:42:d5:00:
83:9b:19:47:df:6c:82:d5:d0:f4:da:9f:9a:78:f1:37:38:70:
67:32:d7:2f:bc:97:e6:f2:bc:64:d8:8d:f4:d6:07:49:d8:c3:
e0:2f:7c:cb:6e:e5:4f:c3:a4:22:76:45:fa:63:24:15:1e:76:
55:89:3c:36:2d:7f:3c:12:b4:2e:c7:53:4e:f5:11:de:15:e0:
e8:4c:a6:78:bf:d3:b0:1a:7d:36:02:29:6b:67:e1:5a:fd:d5:
c6:bc:9d:9c:61:63:24:95:5d:1b:02:ea:b3:80:ee:70:9e:f0:
09:3a:de:5d:22:df:20:69:7e:c8:25:3d:07:47:e9:d7:39:d1:
b2:77:88:86:28:27:e8:4e:b4:f0:db:8e:49:2c:56:81:e6:ff:
dd:9c:cb:5d:73:4a:6b:a3:5a:38:cd:1b:24:d2:d7:dd:7e:49:
b1:26:4d:7e:2f:50:04:56:4b:ba:a6:14:55:c5:5b:dc:4e:14:
99:ab:0d:71:ac:12:6a:5d:53:69:8b:5a:8f:b9:52:34:68:d3:
3a:d6:7e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:45:22 2026 by rpki-client