Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: 1OMhEE/ioZL7NQXmPt71NDKOG7FHR6U1z+4p8eDGP5A=
Subject key identifier: 08:6E:FF:74:36:28:EC:EE:28:9E:F3:2A:74:44:23:2C:69:6A:C4:9E
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 01A13DB86AC1E185F7A2C0504C466914EBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 1453
Signing time: Thu 15 Oct 2026 04:00:58 +0000
Manifest this update: Thu 15 Oct 2026 04:00:58 +0000
Manifest next update: Fri 16 Oct 2026 04:00:58 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: Ao+b5mZqod513q84S6aS/msNUf0IM63h+UfUG77PeU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:6a:c1:e1:85:f7:a2:c0:50:4c:46:69:14:eb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Oct 15 04:00:58 2026 GMT
Not After : Oct 16 04:00:58 2026 GMT
Subject: CN=086eff743628ecee289ef32a7444232c696ac49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:07:19:fe:09:76:0f:0f:b2:35:4b:49:b6:
d7:5b:89:58:2d:eb:eb:57:1a:91:b7:42:1a:8d:4d:
5d:54:e4:ed:d7:32:53:3a:d5:fa:54:d7:ed:e8:25:
9e:da:45:f5:d2:0c:e9:f5:37:11:78:67:58:76:74:
51:27:3d:8e:4f:16:23:ab:2a:f1:28:d0:a1:5f:6a:
9b:c6:83:e7:d9:42:66:d6:d1:58:be:da:02:95:bc:
8d:43:67:0e:7e:ca:24:4d:63:df:4c:1e:3e:c9:4d:
7f:1f:90:fa:6d:97:79:bb:d7:86:2c:e7:f3:bb:a9:
7c:f3:9b:de:65:74:df:dd:1f:b1:37:7b:36:6d:63:
fc:cc:9f:c8:e1:8e:43:48:f4:62:08:08:d6:76:c7:
cb:88:d7:b5:09:24:55:a0:e3:cd:12:28:57:c7:3e:
4a:ec:36:72:e6:55:1c:d7:a4:3d:a5:d0:0a:ed:4f:
51:cc:c5:bd:a5:81:20:3b:1f:13:a1:90:2a:82:1f:
4d:52:6b:5f:f7:aa:71:1f:7d:31:40:dd:c8:6c:47:
fa:e5:4b:fc:dc:dd:06:28:9e:51:39:ab:41:cc:3d:
70:d7:17:88:5b:fc:42:18:82:88:45:8a:8c:2d:d9:
c2:39:68:d4:d4:f1:cb:ad:5b:a0:b5:52:d5:c9:58:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6E:FF:74:36:28:EC:EE:28:9E:F3:2A:74:44:23:2C:69:6A:C4:9E
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:84:ad:da:fb:3d:4a:2a:f9:11:f6:47:72:01:3b:62:d6:70:
d4:dd:26:df:11:a4:0b:f0:63:70:85:36:7d:26:00:1c:f6:b9:
14:01:a5:eb:9e:04:f9:f1:b2:63:20:7d:a8:ec:c2:7e:f9:c9:
ce:11:b5:a2:de:16:37:98:64:f4:7a:5a:3c:61:34:5a:ff:59:
d9:b4:80:af:2e:06:89:b8:57:c2:c8:24:25:a8:1c:2c:f0:e6:
df:c3:08:53:7b:33:88:35:b1:4e:49:76:f2:a1:3b:93:16:48:
09:c7:69:ab:39:ff:4a:50:95:65:5c:e9:42:a7:72:86:88:f7:
cb:ce:da:72:a9:7f:3d:db:36:1e:e1:8d:80:d7:8d:ed:ae:8f:
6f:64:ee:de:a5:82:85:70:98:09:84:f1:22:ce:e0:ae:b4:e9:
16:f4:8b:ca:46:6b:f8:48:d2:ba:0f:49:f4:71:29:b9:95:5c:
ab:fe:dd:4c:43:65:9f:7e:a9:a0:0b:13:81:1b:f3:ab:af:0d:
98:6a:67:f3:9f:a8:09:ad:dd:87:53:fb:70:d4:98:f0:34:8e:
c5:66:de:b6:ec:ee:0f:8a:ef:53:70:4e:29:27:fa:3a:3d:17:
a4:bd:50:9a:5d:8c:59:f8:44:15:e5:9f:98:27:64:a6:78:37:
08:fd:3a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:21:06 2026 by rpki-client