Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
File: 87WowAlYJeE_Rr2zcLf9ypufilI.mft (raw, json)
Hash identifier: WoVzynGNyZiTswDFl5ukT+sUjlD6zqAZRle7RrO/d9o=
Subject key identifier: FB:8D:F9:E2:61:E9:C2:0F:25:16:35:98:22:3A:CF:56:C6:F6:54:F0
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Certificate issuer: /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial: 019DA4F92240C4EF4EC64016A7D7AFD27494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
Manifest number: 0434
Signing time: Sun 19 Apr 2026 09:01:23 +0000
Manifest this update: Sun 19 Apr 2026 09:01:23 +0000
Manifest next update: Mon 20 Apr 2026 09:01:23 +0000
Files and hashes: 1: 3GSfCOp1qnomvR3CmYO9EsBhC7o.asa (hash: xfoU+Ips6oEaOKv6Fib2vuh0GAZn1Zkx/WZm05j9NRo=)
2: 87WowAlYJeE_Rr2zcLf9ypufilI.crl (hash: IQltp3MBun3uFTBiiHKWbCV9Rr1IvHXjGjsktbxBD08=)
3: kvsR5vGqCUlad7hcwSexC9HOmQU.roa (hash: BQWcBL0pNsLmhZ/6jOKzXhoMqdBErbR1kzhV9E5bnP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:22:40:c4:ef:4e:c6:40:16:a7:d7:af:d2:74:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Validity
Not Before: Apr 19 09:01:23 2026 GMT
Not After : Apr 20 09:01:23 2026 GMT
Subject: CN=fb8df9e261e9c20f25163598223acf56c6f654f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:0f:83:78:70:3e:f5:5c:b7:6f:ec:3c:a3:
c0:7c:4a:3f:f6:a0:fd:9b:a6:80:8a:b7:54:7b:b4:
e7:e4:a2:bb:39:38:1a:42:27:9e:7f:0f:ae:ae:c8:
ba:39:a5:a8:26:61:f7:c7:bc:f6:27:e5:57:b9:19:
c8:a9:1c:f9:a3:fb:8e:db:3c:d9:eb:e0:47:f5:f2:
c6:84:ed:55:5a:66:d5:28:4d:98:27:a1:7f:8f:b2:
63:e0:29:b2:a8:a5:9f:5c:f6:62:dc:9b:fd:8e:9c:
3e:38:f6:5d:e8:9e:39:0d:7e:7f:5c:81:7b:0e:71:
d2:10:64:70:79:ac:7f:09:73:f6:b5:44:ed:a9:63:
52:69:7e:a0:46:29:2f:d3:8a:bd:93:e7:e0:01:35:
8a:ba:2e:fb:79:da:7a:61:7e:71:e6:ff:8b:d6:aa:
4b:08:85:9d:c4:ab:84:3f:8c:fa:8a:be:20:1a:e6:
56:67:3b:15:44:56:93:bf:52:5b:59:ae:a4:f6:fd:
14:28:2d:be:f7:1c:0a:c0:b5:6a:03:11:b0:54:5a:
68:0d:d2:fe:78:00:58:57:29:04:df:1f:48:eb:6d:
c6:06:67:37:1f:42:bf:d4:d7:c2:20:07:b6:ea:b3:
f7:4b:ac:8c:3a:7e:0b:ec:b4:10:c1:ad:90:9f:39:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8D:F9:E2:61:E9:C2:0F:25:16:35:98:22:3A:CF:56:C6:F6:54:F0
X509v3 Authority Key Identifier:
keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:80:8a:62:e2:91:2f:f1:0e:07:7e:7b:f3:45:29:7a:43:dc:
f8:67:19:94:79:a6:a7:45:d4:6d:ae:98:56:9f:13:59:ec:53:
e2:b7:35:0d:d8:ad:19:11:f6:69:ed:5f:d8:e3:3d:f4:47:74:
53:08:87:62:c7:3c:d5:6f:8b:10:fd:7b:6e:f8:23:0a:2d:77:
73:79:7d:6a:b2:57:9a:68:06:28:7c:90:f4:eb:a6:94:0d:a3:
8f:38:30:a0:0e:e9:56:fe:51:ee:08:2c:43:27:7c:23:b1:6a:
a9:d9:3d:07:cd:da:fd:b5:53:7b:01:27:59:a1:ad:2f:93:bd:
76:b7:da:68:e1:4d:a3:52:03:44:f2:59:a0:c8:6e:b1:47:4b:
ff:af:7a:46:d8:98:b3:5b:f1:16:98:c7:04:41:01:cf:ec:12:
a0:83:7e:d0:e3:cf:f5:f8:f7:d6:43:00:bf:62:16:cb:70:f3:
51:1d:57:d8:70:f4:0a:b1:0c:db:2a:92:04:d1:8c:70:13:aa:
79:b9:01:f3:7e:7e:45:e5:75:11:fe:a3:e3:86:d3:32:b2:77:
b0:d0:a8:2f:8e:61:c2:25:92:eb:ca:e1:b8:7f:0d:e1:b4:46:
0c:46:8d:f7:c4:c7:fc:5d:26:a6:0f:af:b4:8b:c5:7c:3b:c3:
7e:a4:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:45:14 2026 by rpki-client