Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: z+9PPLq6WDdhfj7OBQjwEoj+T6XpQ1YaJoeAvhkT+MY=
Subject key identifier: 36:02:64:04:A6:14:95:90:0B:ED:46:61:A8:F3:F2:81:F2:1D:D2:08
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 019CABD99E4C5C67014181213A5558F07131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 09DC
Signing time: Mon 02 Mar 2026 00:01:31 +0000
Manifest this update: Mon 02 Mar 2026 00:01:31 +0000
Manifest next update: Tue 03 Mar 2026 00:01:31 +0000
Files and hashes: 1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: +sjKx/+imCrNSepcS9RltNKJJWSfhMZajc4d6Aj01OU=)
3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:9e:4c:5c:67:01:41:81:21:3a:55:58:f0:71:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Mar 2 00:01:31 2026 GMT
Not After : Mar 3 00:01:31 2026 GMT
Subject: CN=36026404a61495900bed4661a8f3f281f21dd208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:e8:de:ee:dd:7e:a4:96:f8:2b:e9:25:3c:
42:14:e6:c0:10:4a:72:9e:3a:74:7b:1d:90:29:e5:
a7:2f:6f:e0:ad:7f:2d:e2:a8:49:1f:a7:f6:14:99:
01:48:ee:fb:ce:52:31:f2:b6:da:a5:d9:64:ef:8e:
ad:5e:83:16:08:c7:73:88:c6:14:d8:ce:81:6f:47:
7a:f4:8b:f8:87:4a:8b:2a:23:bb:de:67:c0:54:c4:
ae:5c:bb:c6:40:66:10:d0:db:04:51:42:91:e8:7a:
81:a1:1c:68:a2:fe:66:db:ec:89:30:76:b5:b4:46:
55:ff:5f:01:3a:5e:9f:14:e3:67:8a:30:5c:ac:20:
07:61:7f:76:ca:0c:6d:8f:b0:45:5d:b4:fe:02:43:
0f:70:26:4b:2a:29:2f:be:6a:f1:3e:e8:2e:70:45:
82:ec:60:67:ee:db:b2:9f:c8:d6:a4:36:76:62:e7:
ef:57:88:34:be:27:42:27:24:6d:30:17:f1:18:4c:
62:a0:84:0a:cb:bd:85:5c:cf:a0:cb:7c:1e:bc:ec:
1f:bc:2d:cb:57:24:fa:75:31:e5:2c:c9:f5:c4:64:
db:17:13:de:6d:12:7e:cf:79:44:35:96:23:87:a6:
33:6a:ac:83:82:82:e7:ae:fb:4f:0e:66:bd:9d:98:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:02:64:04:A6:14:95:90:0B:ED:46:61:A8:F3:F2:81:F2:1D:D2:08
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6b:b1:d1:d4:f0:43:98:e8:7a:ee:09:38:c5:16:2e:12:c3:
b8:e7:a9:84:79:cf:88:20:6d:93:b6:91:a7:6b:3a:67:19:5d:
bb:fc:48:8f:00:86:11:55:8e:ca:21:7d:f4:e7:03:f7:9c:5a:
32:2b:98:20:da:4b:43:33:f0:da:4b:39:3c:bc:46:da:e0:d9:
1d:24:74:2f:31:1e:1a:8c:a2:3a:7c:3e:06:e0:f8:da:d5:45:
05:8e:92:f7:8e:bc:ff:07:d7:83:cd:ed:b1:4d:66:42:ca:85:
01:18:9f:37:39:e9:c8:1d:0f:28:d1:44:cf:d5:ff:41:c2:5d:
af:94:bc:91:74:4f:0c:5a:19:3f:62:bb:bf:63:77:48:41:a8:
6e:13:dc:f5:3c:a6:09:92:fe:d2:1d:f5:62:2a:7f:38:51:c2:
50:6c:68:67:b0:c2:5e:74:58:68:89:d8:13:01:9c:10:47:68:
27:ad:ff:85:9d:df:82:31:cf:0b:36:3d:6d:4e:10:bc:90:86:
5c:63:2a:9b:4c:c2:f1:f5:fb:d2:24:db:ae:12:68:30:e2:36:
38:11:62:57:0f:1f:40:a2:db:2c:d8:2e:4b:c7:37:7a:de:89:
06:fd:e4:d0:67:93:98:e2:10:75:50:50:ec:1a:04:82:0c:1b:
09:77:cb:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Z5MXGcBQYEhOlVY8HExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4
NjZhYWMwHhcNMjYwMzAyMDAwMTMxWhcNMjYwMzAzMDAwMTMxWjAzMTEwLwYDVQQD
EygzNjAyNjQwNGE2MTQ5NTkwMGJlZDQ2NjFhOGYzZjI4MWYyMWRkMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQvo3u7dfqSW+CvpJTxCFObAEEpy
njp0ex2QKeWnL2/grX8t4qhJH6f2FJkBSO77zlIx8rbapdlk746tXoMWCMdziMYU
2M6Bb0d69Iv4h0qLKiO73mfAVMSuXLvGQGYQ0NsEUUKR6HqBoRxoov5m2+yJMHa1
tEZV/18BOl6fFONnijBcrCAHYX92ygxtj7BFXbT+AkMPcCZLKikvvmrxPugucEWC
7GBn7tuyn8jWpDZ2YufvV4g0vidCJyRtMBfxGExioIQKy72FXM+gy3wevOwfvC3L
VyT6dTHlLMn1xGTbFxPebRJ+z3lENZYjh6YzaqyDgoLnrvtPDma9nZigvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYCZASmFJWQC+1GYajz8oHyHdIIMB8GA1UdIwQY
MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt
M2VmNWViN2M4NTk4LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4
LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmux0dTw
Q5joeu4JOMUWLhLDuOephHnPiCBtk7aRp2s6Zxldu/xIjwCGEVWOyiF99OcD95xa
MiuYINpLQzPw2ks5PLxG2uDZHSR0LzEeGoyiOnw+BuD42tVFBY6S9468/wfXg83t
sU1mQsqFARifNznpyB0PKNFEz9X/QcJdr5S8kXRPDFoZP2K7v2N3SEGobhPc9Tym
CZL+0h31Yip/OFHCUGxoZ7DCXnRYaInYEwGcEEdoJ63/hZ3fgjHPCzY9bU4QvJCG
XGMqm0zC8fX70iTbrhJoMOI2OBFiVw8fQKLbLNguS8c3et6JBv3k0GeTmOIQdVBQ
7BoEggwbCXfLmw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:55 2026 by rpki-client