Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier: hNo76cNvOOXXzUPiAolXwufSV1C17tjDPVX22uJmEQg=
Subject key identifier: C9:A0:21:C4:B7:94:A5:CC:BB:D6:1C:41:C3:FB:33:8C:EC:E3:DA:76
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial: 01A0C82181751F01AF2B94A1449663A192AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number: 1228
Signing time: Tue 22 Sep 2026 08:00:34 +0000
Manifest this update: Tue 22 Sep 2026 08:00:34 +0000
Manifest next update: Wed 23 Sep 2026 08:00:34 +0000
Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: E/rC8xEdsmAx9v+mvcusopO+EWnE+39DFQ3l5X1neBU=)
2: q7302L2OQ1J4JgKpMluxPnKa3L4.roa (hash: CogkGEqQAlbPJasD50LgFH8JZg8Ucl8+7Lw8QmjihaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:81:75:1f:01:af:2b:94:a1:44:96:63:a1:92:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Validity
Not Before: Sep 22 08:00:34 2026 GMT
Not After : Sep 23 08:00:34 2026 GMT
Subject: CN=c9a021c4b794a5ccbbd61c41c3fb338cece3da76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:96:82:06:f9:be:bb:48:8e:2d:47:d6:d9:
17:97:c2:7d:ce:30:85:2c:19:5e:f6:27:18:4e:8b:
2e:10:0d:90:f5:b2:04:ae:cd:77:a3:2a:44:86:5d:
54:4b:1a:6d:87:b9:6c:52:d6:3a:02:33:20:86:ca:
89:3e:90:2d:bf:a4:17:5c:85:40:57:f4:fc:e9:ec:
19:0f:c3:26:04:9d:37:36:cf:ab:59:7d:18:ce:e5:
81:2f:33:73:b1:b3:fe:b6:37:ec:57:bc:9f:53:87:
f9:f2:65:a4:1c:83:b9:9b:0b:9f:40:e6:0d:b4:9f:
cf:98:08:c3:89:0c:e0:6c:92:e1:6a:9f:9d:dd:cc:
99:11:e3:06:37:da:db:29:4d:f6:f5:89:4c:9e:68:
9d:0b:3e:36:a6:48:a7:62:ca:48:ab:7d:da:83:00:
da:80:31:fe:1b:c4:08:b9:4f:80:ec:34:ca:09:69:
51:ff:9c:20:28:e5:1c:0d:be:ce:66:05:a5:fc:80:
3f:45:77:af:0d:ef:6b:bc:bf:cf:19:aa:59:74:25:
ee:86:4f:b2:9a:81:01:09:ca:27:e7:0a:f7:76:05:
2c:8d:ff:07:8b:ee:81:f2:1c:f3:de:df:f3:e6:b3:
ee:71:51:33:3c:54:aa:c0:f1:af:f8:15:f3:c7:d2:
90:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A0:21:C4:B7:94:A5:CC:BB:D6:1C:41:C3:FB:33:8C:EC:E3:DA:76
X509v3 Authority Key Identifier:
keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:35:6c:b4:fd:58:90:58:79:c3:74:b0:d7:99:42:9c:f9:41:
6c:e2:cc:04:92:7d:db:20:ef:ba:9d:64:57:86:c4:13:48:99:
85:92:1f:21:c6:03:8f:1e:cf:34:6d:39:87:e7:ce:ca:cb:c2:
77:e3:42:df:4d:bf:0b:e4:ec:2f:1e:4c:4c:33:81:4e:33:bf:
27:82:62:14:3e:44:0b:a1:51:87:28:8f:01:90:87:88:3a:0e:
b0:f8:9c:af:94:7d:4f:b6:29:f4:9e:d2:17:d2:97:da:e1:ff:
c4:e2:fe:44:30:7d:73:87:b1:8d:fa:f2:f1:fd:af:bb:4a:6a:
e5:d7:62:ab:ab:55:7e:e0:a3:38:81:c8:c8:f1:c9:ff:dd:7d:
00:fe:14:45:a6:f2:72:1f:f0:79:6e:0e:01:cf:e2:0e:92:70:
96:aa:77:6d:5a:49:a6:53:0f:8f:c3:ec:a5:68:41:e8:00:3a:
c2:90:e8:a7:7b:8e:08:fb:df:0e:e9:62:96:22:d9:15:91:45:
40:b2:3a:bb:d9:ff:77:aa:7f:68:2b:af:d1:4d:20:e0:03:ca:
11:d9:3b:c0:98:24:02:ba:24:97:57:a1:f7:eb:e4:3d:46:9d:
87:46:b0:d2:74:09:4d:91:83:f9:23:28:e3:c8:a8:fb:0e:3c:
d8:22:9c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:14:56 2026 by rpki-client