Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier: OtqQFm8kd6ZKTpcVl0jlAJqsz18mSmj6pJqV0tgvpqk=
Subject key identifier: DB:24:D1:B8:AD:51:6B:0D:A6:A4:FD:C4:F6:20:AD:67:BE:8A:15:95
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial: 019CABA1CD0D14327DE5EC17B5F01A00218A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number: 1007
Signing time: Sun 01 Mar 2026 23:00:33 +0000
Manifest this update: Sun 01 Mar 2026 23:00:33 +0000
Manifest next update: Mon 02 Mar 2026 23:00:33 +0000
Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: CbuUMjyGAz0ChxAbWjQAsWAIWLj6OrSv0+uhdPFuhdM=)
2: q7302L2OQ1J4JgKpMluxPnKa3L4.roa (hash: CogkGEqQAlbPJasD50LgFH8JZg8Ucl8+7Lw8QmjihaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:cd:0d:14:32:7d:e5:ec:17:b5:f0:1a:00:21:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Validity
Not Before: Mar 1 23:00:33 2026 GMT
Not After : Mar 2 23:00:33 2026 GMT
Subject: CN=db24d1b8ad516b0da6a4fdc4f620ad67be8a1595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:3e:ba:a2:d6:31:f2:28:61:80:3d:e3:9d:
e1:dd:d3:35:5e:f6:8d:95:cf:49:11:90:8f:40:96:
e3:d7:19:82:73:8a:31:e0:67:3b:6a:bf:f9:9c:ed:
32:e5:d8:cd:62:86:fb:51:3a:4a:c8:e6:e1:71:06:
3d:f6:59:8e:5c:b1:4e:44:7d:e9:0a:0e:b7:f0:93:
ac:0a:46:a4:e4:cf:50:dd:a3:22:77:bc:50:97:67:
fa:af:a3:16:c1:ee:db:1b:3d:6f:f9:b2:b0:da:ef:
33:98:f3:03:51:8e:c2:03:e3:e2:8c:48:00:4c:78:
17:04:00:5a:47:9c:7d:de:7e:a1:1e:fc:a8:b2:3c:
ed:77:10:01:29:87:f5:87:1a:d8:f0:19:c4:d5:95:
2e:51:29:f1:fa:6e:30:ea:43:9c:ef:c0:01:29:40:
5a:51:d3:61:9f:7a:5e:29:9c:74:7d:6d:59:05:55:
ea:d7:1b:e3:db:10:32:db:1b:50:06:5d:10:3c:fb:
c0:72:0a:f6:7c:44:61:aa:b5:e4:95:e3:e0:cf:5c:
e5:ab:e1:31:20:e0:d0:b8:65:54:c6:a3:94:ca:66:
09:c5:56:09:b0:cb:e0:1f:06:ad:c4:d0:81:b9:66:
43:5e:9d:a6:6f:30:78:5e:52:f8:69:a4:2e:16:f4:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:24:D1:B8:AD:51:6B:0D:A6:A4:FD:C4:F6:20:AD:67:BE:8A:15:95
X509v3 Authority Key Identifier:
keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6d:3c:4b:dc:71:a7:95:63:a6:34:0f:b0:fb:62:66:09:a1:
a1:d0:a4:5c:d7:24:fb:ce:75:28:0c:2f:0e:67:90:01:de:19:
7b:eb:d7:7b:6c:50:dd:3a:3f:12:01:51:14:b9:de:17:34:08:
e0:5b:fa:5f:9e:7c:fa:1c:79:f8:07:8d:46:99:54:1d:2f:8e:
bd:42:4f:c3:0b:c0:35:d0:45:2a:02:89:ac:67:38:5b:c3:0f:
e4:cc:e4:17:64:0b:12:f0:0d:67:fe:69:27:03:a6:e9:b7:33:
bd:d5:6a:64:24:a8:d6:e6:0f:c4:0d:74:bc:e2:a8:13:e4:55:
5d:3c:29:44:90:00:60:88:11:6b:2b:00:6a:c8:4a:d0:56:e7:
56:70:81:b7:07:54:e5:96:63:20:aa:06:ca:01:fd:a3:4a:63:
95:40:4f:c8:53:b4:32:8a:e8:eb:bb:03:ca:f9:e4:57:f1:8c:
9b:8f:90:60:f3:b9:85:6e:6c:41:c4:f7:42:81:2d:1c:90:ab:
09:7b:d8:c7:bc:69:7f:86:fc:d9:9d:97:72:11:95:93:f4:16:
2f:3f:92:87:09:00:25:6d:6e:5c:d9:c0:db:30:f8:8e:09:15:
a0:cf:f2:cb:30:81:1e:fa:59:1a:78:e3:60:78:ac:6f:aa:73:
52:f6:9d:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroc0NFDJ95ewXtfAaACGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3Y2VkMDIxZjk5MTRkMTJkNDE4ZDlhYTIzOGM5MzgyNWVh
NWY2MDUwHhcNMjYwMzAxMjMwMDMzWhcNMjYwMzAyMjMwMDMzWjAzMTEwLwYDVQQD
EyhkYjI0ZDFiOGFkNTE2YjBkYTZhNGZkYzRmNjIwYWQ2N2JlOGExNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNA+uqLWMfIoYYA9453h3dM1XvaN
lc9JEZCPQJbj1xmCc4ox4Gc7ar/5nO0y5djNYob7UTpKyObhcQY99lmOXLFORH3p
Cg638JOsCkak5M9Q3aMid7xQl2f6r6MWwe7bGz1v+bKw2u8zmPMDUY7CA+PijEgA
THgXBABaR5x93n6hHvyosjztdxABKYf1hxrY8BnE1ZUuUSnx+m4w6kOc78ABKUBa
UdNhn3peKZx0fW1ZBVXq1xvj2xAy2xtQBl0QPPvAcgr2fERhqrXklePgz1zlq+Ex
IODQuGVUxqOUymYJxVYJsMvgHwatxNCBuWZDXp2mbzB4XlL4aaQuFvQRVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsk0bitUWsNpqT9xPYgrWe+ihWVMB8GA1UdIwQY
MBaAFPfO0CH5kU0S1BjZqiOMk4JepfYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQt
YzM4NjYxZmJmMjJhLzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQtYzM4NjYxZmJmMjJh
LzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE208S9xx
p5VjpjQPsPtiZgmhodCkXNck+851KAwvDmeQAd4Ze+vXe2xQ3To/EgFRFLneFzQI
4Fv6X558+hx5+AeNRplUHS+OvUJPwwvANdBFKgKJrGc4W8MP5MzkF2QLEvANZ/5p
JwOm6bczvdVqZCSo1uYPxA10vOKoE+RVXTwpRJAAYIgRaysAashK0FbnVnCBtwdU
5ZZjIKoGygH9o0pjlUBPyFO0Moro67sDyvnkV/GMm4+QYPO5hW5sQcT3QoEtHJCr
CXvYx7xpf4b82Z2XchGVk/QWLz+ShwkAJW1uXNnA2zD4jgkVoM/yyzCBHvpZGnjj
YHisb6pzUvad7Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:13 2026 by rpki-client