Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: uQOUNIeTh+Ji1eN6IQ5og/XuJbwdTGcBVzCHYpu4KSE=
Subject key identifier: 35:42:4D:AC:39:90:16:E9:EB:13:6E:3F:DE:B3:FB:50:4A:6A:A2:D8
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 019FA3054198544E35CE2DAD2F611AF99962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 0896
Signing time: Mon 27 Jul 2026 10:00:58 +0000
Manifest this update: Mon 27 Jul 2026 10:00:58 +0000
Manifest next update: Tue 28 Jul 2026 10:00:58 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: RQmZXr5I9ZB6nYomFHgLoMtElLip8dFLF7v2mnYr3Co=)
2: JimNs2i_obmdv5Qfa9sJ0WhnO_Y.roa (hash: khtm5pt40oNa8FPq78IsRE7crtD9nigpDInHqNXz/Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:41:98:54:4e:35:ce:2d:ad:2f:61:1a:f9:99:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Jul 27 10:00:58 2026 GMT
Not After : Jul 28 10:00:58 2026 GMT
Subject: CN=35424dac399016e9eb136e3fdeb3fb504a6aa2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:a4:a6:8c:72:68:5d:f7:68:b0:b6:a6:0e:
bf:67:ef:8b:7f:8c:3b:10:a9:03:d4:df:2d:b2:88:
2d:5c:33:b0:be:26:01:bb:41:b2:1e:04:b9:ee:3d:
be:98:77:76:da:c5:95:bf:84:b3:c2:30:3d:bc:a7:
43:ef:99:be:0d:45:ab:da:f7:d4:4e:3b:d9:7c:d9:
8b:00:13:79:ef:24:0b:41:d8:bd:ce:fb:3a:c0:21:
91:89:53:03:36:28:d7:1f:8b:7a:f0:12:2c:4d:ef:
6e:66:a9:49:b1:44:a5:08:03:c3:1e:3c:41:0c:4a:
8f:1b:da:27:e8:ac:9e:61:d7:59:b1:e2:52:09:50:
a8:1d:65:cb:29:ee:6b:8c:fb:d1:c6:7f:0c:bc:e8:
01:02:ab:7d:c2:37:cc:84:0e:fc:d4:b7:23:1f:da:
6e:4c:2c:66:e7:c2:91:10:c8:53:2c:9d:de:42:07:
c7:cd:15:46:0a:64:cd:f9:23:c9:2a:87:e4:f4:e3:
44:7a:c5:9e:a0:54:cb:d9:7e:a8:eb:27:12:d5:1e:
e2:01:24:a7:54:f4:e6:ea:d1:d0:05:bf:8c:4f:d2:
41:40:af:4a:61:4b:c1:4d:d7:91:70:47:e6:47:71:
59:e3:db:47:40:01:b8:5b:d2:ac:b4:a4:3b:d9:e2:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:42:4D:AC:39:90:16:E9:EB:13:6E:3F:DE:B3:FB:50:4A:6A:A2:D8
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f2:40:4e:1c:e7:26:31:31:d0:f7:35:e6:9b:31:01:98:8a:
97:43:6d:99:08:5a:86:53:8b:be:77:8a:c5:4e:1b:7f:62:0f:
7a:db:e9:47:94:dc:6e:8b:90:5f:4c:34:b2:41:ef:00:8d:b6:
9e:4e:50:01:1c:e4:9c:db:65:f5:12:b5:fe:a7:1d:f1:8a:be:
0e:d7:c4:35:64:c6:26:f2:8b:ee:39:4f:9b:5e:0b:0e:80:1a:
44:01:1e:c0:a1:2a:6e:62:b2:da:f4:64:91:f2:03:b1:fb:f9:
b5:52:19:f5:96:9a:7d:0e:cf:f2:1f:7f:f7:92:ed:9f:b5:05:
ed:f2:52:67:ad:6c:a7:36:61:b6:8a:32:f8:50:83:bf:d2:d9:
ef:3f:d0:d7:13:37:e9:19:bc:72:52:47:32:9b:22:09:09:5c:
83:94:e5:6f:a8:60:b5:01:83:ca:47:ef:31:e8:8a:5a:3e:c9:
b4:59:b7:37:47:8f:73:57:6e:13:e5:78:b9:f2:fb:4d:e5:da:
61:d1:03:6c:f3:2d:be:40:7e:48:28:37:00:86:0f:bf:80:7c:
10:c6:78:3c:ae:1d:e9:1e:a7:2d:8e:62:82:23:9d:aa:a3:02:
89:91:ce:80:d7:61:d2:10:26:3c:9e:45:1d:f6:74:91:b3:6b:
81:f1:54:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBUGYVE41zi2tL2Ea+ZliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2ViMDlkNWVlYTZhMThlNThkZmRlZmViZjI5YjQxMDVl
MDI2N2MwHhcNMjYwNzI3MTAwMDU4WhcNMjYwNzI4MTAwMDU4WjAzMTEwLwYDVQQD
EygzNTQyNGRhYzM5OTAxNmU5ZWIxMzZlM2ZkZWIzZmI1MDRhNmFhMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuikpoxyaF33aLC2pg6/Z++Lf4w7
EKkD1N8tsogtXDOwviYBu0GyHgS57j2+mHd22sWVv4SzwjA9vKdD75m+DUWr2vfU
TjvZfNmLABN57yQLQdi9zvs6wCGRiVMDNijXH4t68BIsTe9uZqlJsUSlCAPDHjxB
DEqPG9on6KyeYddZseJSCVCoHWXLKe5rjPvRxn8MvOgBAqt9wjfMhA781LcjH9pu
TCxm58KREMhTLJ3eQgfHzRVGCmTN+SPJKofk9ONEesWeoFTL2X6o6ycS1R7iASSn
VPTm6tHQBb+MT9JBQK9KYUvBTdeRcEfmR3FZ49tHQAG4W9KstKQ72eISwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVCTaw5kBbp6xNuP96z+1BKaqLYMB8GA1UdIwQY
MBaAFAPOsJ1e6moY5Y397+vym0EF4CZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEt
MzQwMThkNWM5ZGY1LzEvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEtMzQwMThkNWM5ZGY1
LzEvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPJAThzn
JjEx0Pc15psxAZiKl0NtmQhahlOLvneKxU4bf2IPetvpR5TcbouQX0w0skHvAI22
nk5QARzknNtl9RK1/qcd8Yq+DtfENWTGJvKL7jlPm14LDoAaRAEewKEqbmKy2vRk
kfIDsfv5tVIZ9ZaafQ7P8h9/95Ltn7UF7fJSZ61spzZhtooy+FCDv9LZ7z/Q1xM3
6Rm8clJHMpsiCQlcg5Tlb6hgtQGDykfvMeiKWj7JtFm3N0ePc1duE+V4ufL7TeXa
YdEDbPMtvkB+SCg3AIYPv4B8EMZ4PK4d6R6nLY5igiOdqqMCiZHOgNdh0hAmPJ5F
HfZ0kbNrgfFUcA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:54:16 2026 by rpki-client