
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier: Yw+sXry00sHhnkH5EngmaH3jHB5ZwBOodNiT7stxCB8=
Subject key identifier: 83:B5:E8:62:BC:47:98:23:86:2F:31:4D:5D:1A:1F:60:CD:27:65:75
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 019F1755781D4F9770ADAD9165382C843678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number: 07DD
Signing time: Tue 30 Jun 2026 07:01:44 +0000
Manifest this update: Tue 30 Jun 2026 07:01:44 +0000
Manifest next update: Wed 01 Jul 2026 07:01:44 +0000
Files and hashes: 1: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: b3sCflADMps2VerzRIf9UdI820u0dcegZpZiYOjDnvY=)
2: xCvlhfxkNPRBBz_i6VM9U4-t0BA.roa (hash: I2ugWtRwTmXPZXRdn73fmU0ZbGjpZ9U3l1aWJKFa53A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:55:78:1d:4f:97:70:ad:ad:91:65:38:2c:84:36:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: Jun 30 07:01:44 2026 GMT
Not After : Jul 1 07:01:44 2026 GMT
Subject: CN=83b5e862bc479823862f314d5d1a1f60cd276575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1e:7f:58:e5:91:30:2a:6c:5a:18:b0:9c:10:
07:25:2f:73:f7:57:86:fa:22:3a:2f:55:97:56:a5:
91:a8:c1:6a:e8:9e:19:3c:92:d5:99:e5:84:78:ab:
53:fc:f1:e5:dc:b3:89:49:9b:7a:84:d7:e5:b9:d8:
63:90:a0:95:7e:dd:6f:d1:8c:5c:5a:68:cd:7e:76:
ad:36:4c:47:28:63:5c:2b:09:b0:e8:6e:1a:e0:23:
df:c1:19:05:fa:7a:56:04:c6:8e:27:5c:ad:49:2b:
68:3a:6e:ff:bd:a1:42:a5:75:af:f7:06:28:22:03:
e4:29:3b:2d:ff:70:c1:d7:ec:7d:43:b9:07:87:96:
6f:17:d7:07:07:54:7b:fb:57:b3:ec:29:f5:27:5b:
a7:18:06:ed:0e:06:6a:36:3b:dd:99:52:8e:ab:7d:
95:0d:4c:9d:b7:dc:95:d3:f3:f1:9e:12:01:38:08:
b0:93:e2:55:76:a4:5d:d6:c9:03:12:d3:41:5e:fe:
bb:b4:3e:67:e1:c8:c8:fb:74:58:14:97:41:17:62:
3d:e1:39:c1:e6:0a:d1:42:97:99:c4:e6:53:d3:e7:
da:a2:35:e9:52:09:7c:c6:49:b9:fe:f3:d6:0f:15:
0a:47:2c:59:4a:13:ef:c4:4b:ff:83:3f:1c:aa:55:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B5:E8:62:BC:47:98:23:86:2F:31:4D:5D:1A:1F:60:CD:27:65:75
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9c:c6:e6:67:25:ca:9d:13:b6:4c:e6:f7:97:7c:2a:49:6c:
1d:46:d2:a5:cd:d1:46:e5:61:53:86:96:5f:fa:5c:3a:b5:ba:
d8:2f:64:f4:e4:88:76:e1:62:29:5e:3d:dc:62:cb:cc:0e:b8:
c1:b7:b9:45:16:90:37:8e:bc:f8:f7:25:c6:56:c4:7a:47:a4:
be:44:83:fb:70:c9:cd:b4:29:1a:5c:aa:b3:aa:a0:05:12:bd:
9d:2e:bb:20:8e:74:6e:77:09:7f:6a:62:85:b4:b5:bc:4e:b8:
aa:f7:ca:8a:4c:88:5f:de:b0:2d:14:ae:3a:9b:a7:d4:00:48:
a9:a1:3d:e9:32:19:c6:71:9e:d6:a1:40:9a:22:41:c7:d1:6e:
de:42:e5:1c:28:99:32:31:05:21:fa:d0:a7:c7:cb:d8:ee:95:
2d:fe:80:35:37:1e:5e:91:c3:08:47:6a:d8:dc:61:45:19:e3:
d1:be:ea:1f:5d:8b:07:f2:cc:34:ff:e2:3d:b0:26:21:28:f7:
fe:5c:ba:c2:88:e2:6f:62:9a:6f:5c:a4:b6:78:81:0c:4c:a3:
56:79:98:6d:7c:e8:02:82:e5:4f:8c:a0:f2:15:e0:bf:69:85:
60:94:d3:8c:91:a1:a0:74:b7:b0:17:31:22:72:48:66:b8:72:
8a:53:31:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:07 2026 by rpki-client