Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: v/lac6IF6/6PNCf5TMOSYAx5oesA5OZJbQR1hTrMP+8=
Subject key identifier: 0F:F1:B9:9A:0E:0F:73:FE:6B:DD:29:36:03:C5:14:0D:DE:5B:99:BD
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 019D977384F149A23F5CC4A949CABE03AF40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 0A56
Signing time: Thu 16 Apr 2026 18:00:23 +0000
Manifest this update: Thu 16 Apr 2026 18:00:23 +0000
Manifest next update: Fri 17 Apr 2026 18:00:23 +0000
Files and hashes: 1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: AHGatJP/KfC0fsaWQFJD6AX1rC448Yb2272wQg94Aus=)
3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:84:f1:49:a2:3f:5c:c4:a9:49:ca:be:03:af:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Apr 16 18:00:23 2026 GMT
Not After : Apr 17 18:00:23 2026 GMT
Subject: CN=0ff1b99a0e0f73fe6bdd293603c5140dde5b99bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:05:5b:4c:64:6c:f5:be:39:b9:25:9d:e1:
aa:7c:02:97:b0:14:38:da:ad:d4:5b:13:dd:d7:4c:
7e:09:fb:40:b8:d8:ea:87:c4:d7:cd:c6:34:99:d2:
02:0c:27:c9:9a:2f:e7:3a:b8:fb:88:16:cb:df:75:
21:49:60:60:7d:7c:6b:63:5d:b6:e7:f1:29:46:8c:
14:22:33:bf:1a:41:5c:0f:f2:5c:07:bd:ef:82:a9:
5d:9d:c3:29:64:97:74:97:08:bd:84:3e:e3:d4:f1:
d5:a4:35:5c:51:30:30:37:05:65:8d:e4:3b:f9:63:
ed:23:39:5e:34:67:27:bb:a0:73:52:23:79:cd:22:
a2:26:ea:bf:e1:ab:0c:9a:2f:88:2c:72:cc:05:e4:
be:4a:34:c9:3e:db:1c:13:53:8a:9b:82:ce:1a:db:
ce:bd:a6:96:c3:70:c8:b3:63:84:ea:45:cc:5d:c5:
de:47:cd:5d:86:a9:a8:64:81:9d:68:c1:14:73:1c:
ea:31:cf:48:b7:27:98:88:cf:00:80:40:15:bb:5c:
b7:2a:b6:b7:c0:e7:74:aa:11:6b:46:2c:8c:91:31:
fb:de:1d:e8:05:a8:72:9a:8e:0b:61:f7:cf:2e:54:
e1:73:fe:3b:da:9b:9d:69:73:7c:89:92:89:da:f5:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F1:B9:9A:0E:0F:73:FE:6B:DD:29:36:03:C5:14:0D:DE:5B:99:BD
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9a:e2:43:8f:d2:eb:9d:f2:7c:66:13:fa:87:ac:84:0b:ea:
15:f8:ca:af:30:44:f3:0b:ec:7f:a6:ef:8f:2a:88:2e:b4:60:
4f:33:8a:b3:70:5a:6a:32:03:07:11:db:27:ea:c1:60:a7:1e:
7e:44:19:8c:1b:34:b5:7b:c5:c9:d9:47:9a:54:9c:2c:2c:fa:
19:98:1c:36:bb:b7:28:5b:17:ad:6f:6e:80:5f:d1:0a:d9:d8:
93:e9:28:1c:c5:e7:0a:9c:ef:39:2c:89:74:02:27:f5:70:36:
fb:45:f5:10:14:1d:84:a7:24:2c:99:1c:7d:8d:1a:00:59:67:
a2:bf:90:b6:2c:eb:47:0a:8e:bc:63:26:1f:95:40:00:8d:8a:
6f:bd:81:e3:a0:f4:5f:f2:f2:62:9b:be:c7:0c:d9:f0:cc:04:
9a:f4:62:bd:36:61:e1:81:e3:64:c1:a7:70:bd:76:91:e2:a3:
96:87:23:a8:18:73:b4:ec:fa:3c:2b:8f:d5:92:1a:3f:45:74:
eb:a9:8d:74:79:74:63:f0:81:3f:e0:e9:6d:34:9f:8c:96:3c:
aa:74:67:71:5d:0d:58:7b:32:7e:01:7f:6e:50:87:75:51:a6:
93:d0:8d:e2:99:53:ef:ab:c8:9b:ef:02:f2:b5:c3:b5:1c:1e:
10:c2:c6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:54:50 2026 by rpki-client