Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: URSnWRVc+UmR9jYoPYPStRlofo13vsCRD7/7NeDYOMs=
Subject key identifier: 68:D3:03:E7:E8:06:CA:8A:7B:A1:64:33:2D:D9:C3:DF:3C:50:67:54
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 019E303B1DCF77E5D5213FD04843D98BBC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 07D6
Signing time: Sat 16 May 2026 10:00:41 +0000
Manifest this update: Sat 16 May 2026 10:00:41 +0000
Manifest next update: Sun 17 May 2026 10:00:41 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: 7CsVF5Vof5NwOEPmZILF32as3pCF0y0ySH99mkl8zDg=)
2: JimNs2i_obmdv5Qfa9sJ0WhnO_Y.roa (hash: khtm5pt40oNa8FPq78IsRE7crtD9nigpDInHqNXz/Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:1d:cf:77:e5:d5:21:3f:d0:48:43:d9:8b:bc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: May 16 10:00:41 2026 GMT
Not After : May 17 10:00:41 2026 GMT
Subject: CN=68d303e7e806ca8a7ba164332dd9c3df3c506754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:fd:e8:73:d4:99:ec:e4:db:73:5b:6f:39:
4b:6b:78:d9:d0:79:de:8d:c7:82:95:57:09:18:89:
d0:7d:d7:f2:46:e1:04:77:5d:ca:33:cc:e4:35:9e:
d2:c5:91:73:87:fe:a3:91:c2:5d:83:43:18:e1:54:
fc:02:20:24:6c:85:6f:d5:32:bb:b1:90:a3:7e:8a:
c7:d6:38:ae:41:96:4e:d3:51:99:6e:1d:4e:34:3e:
3d:b5:71:4c:2f:3b:43:64:5b:8f:24:d9:9d:bc:62:
e4:f3:c0:bb:3e:e2:12:df:2f:ee:77:a2:d5:ca:a4:
81:84:88:a4:23:55:ad:27:2a:dd:88:b2:b5:e2:3d:
30:ef:a6:57:11:bf:3a:15:fe:01:21:19:5d:37:4e:
60:72:3b:58:82:69:eb:6f:76:40:6c:fd:f1:a0:0e:
c6:f8:53:5b:b9:0f:47:f2:f5:7a:ee:4a:90:79:15:
95:df:ef:7a:a4:ce:2a:36:25:cc:80:3e:d7:3e:63:
2a:fd:46:c9:7e:fa:fb:08:16:5b:e9:1c:5f:6d:73:
8d:cc:d4:4f:41:4b:78:d5:54:8a:d4:b6:8a:44:b1:
ba:98:f4:c8:13:c6:ee:b1:59:72:3e:5d:16:9f:17:
a6:31:67:5b:10:fb:17:5c:c0:b3:98:a1:2a:dd:87:
2b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D3:03:E7:E8:06:CA:8A:7B:A1:64:33:2D:D9:C3:DF:3C:50:67:54
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b1:09:55:2d:3d:02:f7:2f:50:50:6c:6a:f1:b7:46:db:70:
80:6f:2d:74:4e:64:cd:44:a0:a5:a4:c8:59:04:86:f0:af:70:
8c:9f:28:b2:30:87:0c:bb:4f:19:63:2c:1e:cb:10:1e:71:79:
68:0c:88:92:59:44:f2:82:28:d6:60:51:7c:a8:2a:bf:b4:d8:
ea:f2:b9:24:5e:0c:02:dc:7e:b3:a6:81:97:8b:ee:96:36:ff:
28:c2:32:56:ef:2a:cf:19:ed:17:c3:99:ae:ee:b3:b1:82:b7:
0d:5b:d4:8d:81:d9:9e:4a:5c:ef:9f:13:00:43:36:9d:ac:ce:
82:fe:4f:ab:cc:27:3d:f9:20:4a:1b:ba:c7:ee:d5:bf:a2:20:
69:a3:a4:57:5f:f1:2d:23:37:7a:92:9d:b9:5b:d1:91:56:5c:
7f:ef:c2:27:22:d0:6e:36:2e:dd:1e:8e:b2:94:5a:04:34:10:
69:f6:b6:e8:41:5a:5d:b3:a2:89:9c:60:6f:94:7b:d3:55:da:
b9:7a:4a:67:c4:0e:06:23:32:bb:f0:e7:3d:d1:dc:ce:a9:1e:
b7:6b:38:d1:73:fe:bb:fd:34:a8:41:12:0f:f3:d6:17:4f:24:
09:5c:0e:e2:92:ee:00:a2:84:1e:89:30:26:de:eb:70:98:37:
ab:cc:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:33 2026 by rpki-client