Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier: 3J5M/S9enVZKP9sUQ6uCSUjIZBHtbMgiu3IMZAoX9lE=
Subject key identifier: E5:BB:FA:E1:D7:70:6B:E6:83:02:3A:23:FE:55:29:F3:30:01:CE:73
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 01A001011A2FA7F7ED0986CCE60AF7857143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number: 0856
Signing time: Fri 14 Aug 2026 16:00:44 +0000
Manifest this update: Fri 14 Aug 2026 16:00:44 +0000
Manifest next update: Sat 15 Aug 2026 16:00:44 +0000
Files and hashes: 1: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: xGlxGsyNhnXZ9AHCibNdfCbogzhkO3EGsTHMRqGLJPQ=)
2: xCvlhfxkNPRBBz_i6VM9U4-t0BA.roa (hash: I2ugWtRwTmXPZXRdn73fmU0ZbGjpZ9U3l1aWJKFa53A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:1a:2f:a7:f7:ed:09:86:cc:e6:0a:f7:85:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: Aug 14 16:00:44 2026 GMT
Not After : Aug 15 16:00:44 2026 GMT
Subject: CN=e5bbfae1d7706be683023a23fe5529f33001ce73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:a6:ed:f0:f0:82:e3:81:4f:33:8d:6d:f0:
1e:4d:67:f1:16:35:c6:fe:be:85:a1:f2:91:68:97:
05:3d:ae:9d:67:96:cd:9b:74:d4:11:de:5d:f5:34:
4e:9a:33:45:88:59:cd:53:18:17:64:6b:b0:48:f8:
6d:cd:dc:d9:ce:97:82:97:01:2c:89:48:08:e9:5e:
37:0b:76:9f:12:f2:50:c0:19:fd:f2:4f:c0:c0:d2:
0e:25:b6:7a:dd:33:c6:31:3e:c9:53:a2:b9:d0:1c:
43:1b:ca:05:e9:66:35:cc:95:b4:85:fc:23:96:f5:
b1:dd:8b:7d:21:57:f6:f0:6a:1e:af:07:ee:34:5e:
a0:e1:8a:73:d0:ec:5a:1f:ca:49:3d:f1:8e:2b:6c:
d9:82:a9:43:1e:49:0e:6a:1b:2f:9c:b2:49:db:60:
d6:9f:04:d5:5a:9f:c7:b5:c8:d5:46:38:cb:68:3f:
f1:c6:3e:61:d9:39:3f:42:94:f5:26:59:f9:0f:1c:
4b:e5:7f:81:b3:7c:22:57:ba:67:de:2b:80:2d:92:
68:b3:40:b3:86:29:dc:ed:db:4b:38:a9:b5:9b:c0:
39:a8:e9:8b:26:5a:6b:74:13:b9:12:6b:af:6a:a5:
3a:4f:b9:6a:89:04:c8:ea:e4:43:12:cc:6a:09:c2:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BB:FA:E1:D7:70:6B:E6:83:02:3A:23:FE:55:29:F3:30:01:CE:73
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:40:1a:44:a0:59:a5:7a:20:bd:90:64:45:4d:b9:2e:12:ee:
da:e0:2c:58:24:c7:26:84:f2:78:a2:4e:5e:e9:80:5c:ac:ff:
31:d3:82:d0:6b:a8:e0:b0:b7:a6:f6:80:45:e7:2a:9c:f9:1c:
95:91:c3:2f:87:aa:0e:50:4a:df:61:61:e5:04:39:96:17:78:
61:70:fb:ed:83:49:bc:ad:9e:ec:02:e1:dd:a3:ca:02:c5:6b:
03:5c:e1:b1:db:59:52:24:6b:9e:b8:a4:b2:e4:15:08:42:e5:
d4:f7:42:2c:0d:8b:7f:f7:18:0e:7f:60:95:62:72:4e:29:85:
99:a6:6d:ab:95:30:65:83:78:7f:ff:2a:64:6a:a0:9a:44:52:
21:f3:88:c2:92:12:7c:28:36:84:4e:c6:1f:bc:fc:be:ed:d3:
ae:53:34:22:56:b2:5b:bb:bd:6f:09:d4:a6:2e:46:c4:b0:1a:
a8:87:5f:fc:54:67:24:96:ad:c7:8c:ae:41:ed:3c:66:d8:3a:
b7:fe:d1:fb:65:92:ca:35:46:a2:db:59:6c:8b:6d:d2:80:79:
1a:61:68:36:45:ee:35:f2:7b:c8:58:4f:74:88:28:81:96:1c:
82:d3:45:0f:fd:47:2b:ab:1a:90:71:d5:97:de:57:74:47:28:
0c:9c:d7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:05 2026 by rpki-client