Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File: 86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier: QMglgRSXOShd4LENaNbqq6mnBlf7laLznvrFYKWexfA=
Subject key identifier: 81:E0:7C:DE:03:DE:AE:C2:CD:5B:88:41:55:62:81:39:CA:C6:81:7F
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 01A13DEF3ED3C71DE0ADDF88BE13325958D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 05:00:51 +0000
Manifest this update: Thu 15 Oct 2026 05:00:51 +0000
Manifest next update: Fri 16 Oct 2026 05:00:51 +0000
Files and hashes: 1: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: Cx7JvuRnpUBOxd7IwRPuxytxKVsAgtT/o8u6Q7X7wFE=)
2: WL12YdHQF4v--TkqLhD3Ng1t2wY.roa (hash: 2kBmQB016zd0/AsZ8Bq22A6ptaprPzQDHPqGp8rEVlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:3e:d3:c7:1d:e0:ad:df:88:be:13:32:59:58:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Oct 15 05:00:51 2026 GMT
Not After : Oct 16 05:00:51 2026 GMT
Subject: CN=81e07cde03deaec2cd5b884155628139cac6817f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:a0:d6:f5:6a:b7:2d:9f:2e:cc:57:b2:20:
dc:e4:a7:be:f2:fe:8f:14:66:e9:67:47:5b:1d:6e:
7a:d2:f1:17:0d:7c:f3:2c:9c:f9:93:8c:9f:5e:eb:
95:48:94:9c:0d:d8:d5:f0:c2:ca:6a:f3:fb:c3:c0:
e5:20:32:c5:f1:c8:dc:82:ef:83:46:b6:27:c3:b4:
c1:87:0e:f3:1a:82:64:1a:ba:b5:90:22:91:63:9d:
62:9c:fa:51:5e:eb:d2:4e:7a:1b:c0:53:d3:21:e2:
23:30:76:26:c0:17:0d:2b:e0:0a:79:c8:81:dc:5e:
6b:38:7b:c1:e6:a5:a4:65:8d:48:79:f9:8f:80:c3:
5d:64:1b:e6:d4:f8:be:bc:35:e5:90:94:3d:66:42:
1d:df:d0:bb:3e:d1:d8:94:af:cf:bc:a1:95:8a:43:
4a:6f:d7:bb:94:76:d6:5b:db:6a:f2:ce:83:16:04:
ce:08:c6:4f:32:68:99:78:17:c9:b7:f5:59:f2:42:
dd:98:c6:1c:38:e4:31:e4:55:5b:43:d7:ef:78:94:
9d:e2:73:a6:1a:1c:39:b6:5e:bb:30:20:41:25:ff:
3a:0c:af:ad:71:36:b3:e4:2c:f5:17:ba:90:47:95:
73:fd:6a:9e:67:8e:aa:7d:ee:ea:b3:dd:54:37:7e:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E0:7C:DE:03:DE:AE:C2:CD:5B:88:41:55:62:81:39:CA:C6:81:7F
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a1:2f:04:20:4d:8c:9c:2e:7a:f2:27:aa:93:ce:e4:a6:c0:
ec:cd:c4:2b:3b:e5:5a:14:07:16:8b:fa:f0:5d:35:03:61:09:
42:c9:68:3c:59:86:f8:c7:bc:3a:a5:e2:7e:74:3f:9c:96:1b:
ef:95:bd:c3:80:05:39:12:8c:7f:c1:a6:26:b8:78:e0:91:c6:
23:4e:4f:ba:da:71:b4:b3:56:a7:ba:95:6b:57:80:b0:29:01:
4a:a6:d7:83:c4:49:c2:5b:ed:9e:c0:15:ec:0a:0d:55:e0:17:
07:4f:f0:d6:d2:89:01:6c:28:9e:8b:23:e4:1f:8e:6c:e5:6e:
11:c3:a8:eb:6e:95:1a:da:3a:48:f3:f8:4c:03:70:5f:8b:40:
60:41:28:b9:91:1d:32:47:46:16:d0:eb:05:28:47:4e:26:cf:
c8:e1:be:a6:79:71:cb:4d:19:57:41:29:aa:84:07:14:3e:a3:
26:0a:ba:a0:3f:c0:43:78:0e:73:df:7f:3d:c8:af:b0:ed:04:
89:86:99:87:00:cf:2e:8f:a1:09:5e:e7:08:b9:d2:70:9d:c5:
e9:bd:86:e2:f0:c6:80:46:b1:e9:0a:69:06:9b:06:76:22:a3:
36:25:1c:24:69:3e:a6:68:c4:f3:f2:00:01:6d:8b:12:a0:35:
1f:7b:9e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:29 2026 by rpki-client