Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: dK5YSqEi6xLLKPNVeCIQlfr9m1PiDcguOLF4f4T4J5Q=
Subject key identifier: 3C:80:C0:C1:0A:73:D2:DA:25:54:74:9C:F9:19:58:04:44:7F:E0:0D
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 019A71B8D0F5F46D9D3EE19FBCBACC764A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: 4N6dcyvzBpXCyTJFTybzkKNoFiYWXhCGoYy85uHiPUY=)
2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d0:f5:f4:6d:9d:3e:e1:9f:bc:ba:cc:76:4a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=3c80c0c10a73d2da2554749cf9195804447fe00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:31:72:27:03:d0:10:57:cf:05:da:41:10:
6d:ee:b6:1d:6c:b3:7b:02:9b:af:63:4b:02:5f:2f:
16:cd:5d:77:b6:5d:0d:0a:f3:98:af:e4:a6:33:ce:
de:e6:ed:3b:6c:85:f8:2b:1c:6d:80:e8:96:7c:89:
18:e4:f9:3a:f4:96:3b:ec:19:3e:75:94:f1:97:5c:
b8:93:89:18:18:aa:b8:36:51:8b:ae:ef:76:ac:40:
58:3c:bc:34:41:e1:53:f1:27:23:ab:5b:76:07:9a:
a7:f7:7d:2b:03:db:f4:c7:4c:f2:c8:65:f7:07:d7:
32:a6:60:4e:4c:50:41:9b:fb:fc:07:9b:b1:24:66:
56:b2:63:aa:ad:dd:5f:bc:8c:3e:6e:bf:b3:62:35:
87:58:6c:0e:e7:65:42:a6:dd:81:57:96:d0:39:8e:
26:78:c0:89:39:a9:7b:6f:b5:34:c8:36:d1:89:ae:
a9:38:a8:5c:26:b2:4b:1e:f4:9d:1a:4a:68:31:75:
4f:5b:d4:fa:24:f6:8a:01:b5:14:41:46:96:61:77:
47:e4:5c:ce:66:eb:c3:b1:37:49:97:ed:52:97:bd:
de:d8:4b:96:a1:1b:ec:95:6a:e8:73:b8:2a:09:55:
d5:48:f5:7c:68:49:94:89:a9:a2:2e:35:f8:1d:d9:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:80:C0:C1:0A:73:D2:DA:25:54:74:9C:F9:19:58:04:44:7F:E0:0D
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:94:aa:14:a9:d8:c6:9b:a1:e9:da:80:42:e6:e2:cf:65:de:
ab:4a:3d:6d:27:06:65:2c:73:10:e3:ac:7a:6f:41:56:36:1d:
e5:1f:68:fe:25:8b:51:d6:b8:5e:b9:b4:7d:87:6d:9d:07:2c:
7d:c3:6c:09:45:84:f4:4b:d6:17:c6:4c:57:11:5e:12:da:99:
93:46:51:ef:7e:45:cb:2e:39:5c:99:3d:da:2c:45:67:15:76:
c4:5d:14:b2:f5:14:ab:fd:f0:0a:06:b0:b6:ca:bb:13:53:99:
ab:d5:b7:f2:05:ae:60:44:f4:5c:13:94:5b:63:c6:94:23:46:
79:76:4b:f1:b7:0a:c3:07:2f:82:4e:86:d0:04:bf:2f:22:8e:
55:23:f0:67:d5:c4:0a:1d:45:c8:de:89:8a:9f:16:de:ee:59:
f1:f5:8e:10:07:3a:32:da:ae:52:47:aa:be:0b:11:c2:55:15:
c7:b5:ae:09:1f:12:f3:c3:8b:20:d7:26:c2:73:12:07:8a:09:
57:a6:3d:cc:2e:59:c7:a4:5a:d9:1d:16:93:b8:c4:51:10:a5:
b4:bb:1e:b3:d7:95:d8:2d:e0:99:f7:ba:c8:83:bf:2c:f8:ce:
fb:6e:77:27:16:04:b3:62:b8:cf:fb:fe:9a:5d:bb:5c:bc:ee:
41:cd:9a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuND19G2dPuGfvLrMdkpmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYWM4YzdlMzJiYWY3NzhiOGM0NTFhMmQyNGNjNjgxOTY5
NjRiZmMwHhcNMjUxMTExMDcwMjA4WhcNMjUxMTEyMDcwMjA4WjAzMTEwLwYDVQQD
EygzYzgwYzBjMTBhNzNkMmRhMjU1NDc0OWNmOTE5NTgwNDQ0N2ZlMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseExcicD0BBXzwXaQRBt7rYdbLN7
ApuvY0sCXy8WzV13tl0NCvOYr+SmM87e5u07bIX4KxxtgOiWfIkY5Pk69JY77Bk+
dZTxl1y4k4kYGKq4NlGLru92rEBYPLw0QeFT8Scjq1t2B5qn930rA9v0x0zyyGX3
B9cypmBOTFBBm/v8B5uxJGZWsmOqrd1fvIw+br+zYjWHWGwO52VCpt2BV5bQOY4m
eMCJOal7b7U0yDbRia6pOKhcJrJLHvSdGkpoMXVPW9T6JPaKAbUUQUaWYXdH5FzO
ZuvDsTdJl+1Sl73e2EuWoRvslWroc7gqCVXVSPV8aEmUiamiLjX4HdlqPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyAwMEKc9LaJVR0nPkZWAREf+ANMB8GA1UdIwQY
MBaAFPOsjH4yuvd4uMRRotJMxoGWlkv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjkt
NDVjNTY4ZjhhMjdjLzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjktNDVjNTY4ZjhhMjdj
LzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJSqFKnY
xpuh6dqAQubiz2Xeq0o9bScGZSxzEOOsem9BVjYd5R9o/iWLUda4Xrm0fYdtnQcs
fcNsCUWE9EvWF8ZMVxFeEtqZk0ZR735Fyy45XJk92ixFZxV2xF0UsvUUq/3wCgaw
tsq7E1OZq9W38gWuYET0XBOUW2PGlCNGeXZL8bcKwwcvgk6G0AS/LyKOVSPwZ9XE
Ch1FyN6Jip8W3u5Z8fWOEAc6MtquUkeqvgsRwlUVx7WuCR8S88OLINcmwnMSB4oJ
V6Y9zC5Zx6Ra2R0Wk7jEURCltLses9eV2C3gmfe6yIO/LPjO+253JxYEs2K4z/v+
ml27XLzuQc2aDg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:11 2025 by rpki-client