Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.mft
File: 86zxkUf-JM5v_lHqiFCoBq-uDsE.mft (raw, json)
Hash identifier: Cd0AY8UZLa3wckXhOeAxWy3/NInSLY6NO2PUw0Na5ZU=
Subject key identifier: 45:50:28:BE:1A:C4:CC:5E:15:A7:A0:CA:FC:A1:56:05:C2:22:86:B2
Authority key identifier: F3:AC:F1:91:47:FE:24:CE:6F:FE:51:EA:88:50:A8:06:AF:AE:0E:C1
Certificate issuer: /CN=f3acf19147fe24ce6ffe51ea8850a806afae0ec1
Certificate serial: 01A0404E5BDB18B80DE0A192958AA3E79D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zxkUf-JM5v_lHqiFCoBq-uDsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:12 +0000
Manifest this update: Wed 26 Aug 2026 23:01:12 +0000
Manifest next update: Thu 27 Aug 2026 23:01:12 +0000
Files and hashes: 1: 86zxkUf-JM5v_lHqiFCoBq-uDsE.crl (hash: 4mJwmgGfA2Xzx+8f9K8PEsSTZMiuNSikzgtn5c7u9i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zxkUf-JM5v_lHqiFCoBq-uDsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:5b:db:18:b8:0d:e0:a1:92:95:8a:a3:e7:9d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3acf19147fe24ce6ffe51ea8850a806afae0ec1
Validity
Not Before: Aug 26 23:01:12 2026 GMT
Not After : Aug 27 23:01:12 2026 GMT
Subject: CN=455028be1ac4cc5e15a7a0cafca15605c22286b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:8b:de:e7:01:4c:d9:1d:d8:53:57:25:f7:
f4:e8:a1:99:0e:9c:ed:c3:5b:a7:38:88:60:2c:52:
db:f0:a5:3c:32:a1:b2:94:e1:56:ff:96:e9:15:92:
9f:2b:9f:96:1d:11:4f:5d:77:61:42:cb:b5:9e:dc:
4e:d1:ff:21:90:f7:17:6a:9e:07:7f:3c:73:cd:ce:
97:ac:55:ac:fe:16:32:02:31:3b:e4:01:9f:e1:fa:
df:0a:8e:25:b8:2d:b5:6a:2c:65:62:8a:90:0b:28:
d3:0d:49:3c:53:88:6e:34:9c:4a:38:f5:7c:4d:ec:
ff:aa:a9:93:a8:2d:f2:c7:08:ab:00:3e:1b:fe:c5:
08:b6:5e:eb:ac:bc:08:f0:5d:c7:0e:6d:43:8d:c3:
e7:2a:64:27:40:84:c1:25:ca:c0:62:2b:9d:48:68:
b2:e5:27:f6:d1:bf:87:37:35:25:d0:a2:87:c3:af:
93:ca:57:ab:1e:2f:6f:0b:7a:7b:c4:f4:9a:87:6d:
89:1b:4d:ac:4f:6d:65:09:19:35:3a:0a:0c:f6:19:
bd:b9:f2:2e:e0:aa:89:f5:89:15:78:44:87:a8:9e:
32:10:70:58:38:d2:d1:89:83:c0:8f:2e:c0:1a:f8:
8a:cf:2f:73:81:c0:0c:ba:50:5c:c4:06:e4:89:f6:
23:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:50:28:BE:1A:C4:CC:5E:15:A7:A0:CA:FC:A1:56:05:C2:22:86:B2
X509v3 Authority Key Identifier:
keyid:F3:AC:F1:91:47:FE:24:CE:6F:FE:51:EA:88:50:A8:06:AF:AE:0E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zxkUf-JM5v_lHqiFCoBq-uDsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:aa:9d:95:a3:e4:88:c4:6d:1a:6b:f0:73:a9:5b:d2:fb:28:
a9:0f:a2:81:b2:e9:3e:e9:1d:82:8e:2e:42:b8:e1:49:cc:47:
01:29:74:e0:ef:f3:db:9f:dd:60:f9:ce:11:73:90:ef:fc:b9:
1c:1b:47:8b:48:03:3f:b5:38:95:c8:e4:9f:62:e3:80:42:60:
51:32:f6:d7:ee:c3:91:36:31:cb:51:a7:27:6c:04:5f:99:c7:
1b:a0:11:b4:3d:eb:11:de:dc:40:84:5e:ce:f0:6c:ac:ce:f7:
19:27:b9:cf:3e:c1:42:24:87:07:04:c3:79:87:fb:3f:82:89:
3f:ff:a5:0d:1a:70:ac:2b:11:74:48:53:a0:20:74:e1:e8:b1:
16:33:a4:da:d6:75:01:c0:07:0c:bd:aa:b8:de:09:d6:53:8d:
08:8b:86:8a:be:61:f9:8b:15:7d:e9:9f:49:7a:24:5a:eb:3c:
43:05:31:41:29:ea:05:5d:74:60:76:43:41:3b:91:56:c8:eb:
e3:f7:a8:4a:f0:6f:3e:39:46:50:de:a9:51:b0:ce:8f:93:de:
96:cb:d4:be:4d:4a:d5:19:3a:c9:2e:b7:0c:38:a0:47:94:fc:
eb:2d:33:22:8f:78:6a:e7:4d:49:62:04:c9:25:b5:8f:1f:d5:
ed:97:4c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:40:46 2026 by rpki-client