Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: bzz6Y53VD/VIgNv0X3xzNSIgA8MqGvJgdYSzr7Jfejo=
Subject key identifier: 39:CC:07:F2:C2:2C:E8:DA:BF:36:52:7E:E8:3A:C8:EC:64:79:04:73
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 01A13E26E68F8A7A67F4439005AB549F4BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 06:01:38 +0000
Manifest this update: Thu 15 Oct 2026 06:01:38 +0000
Manifest next update: Fri 16 Oct 2026 06:01:38 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: QhEBWMQaFSaxBEMHFloYm6XtjCr4jtP915h/RM8sLZs=)
2: ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa (hash: NVX59SDqnzDr42Kpw57WUClf3jkUfdSkfds/tST6OaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:e6:8f:8a:7a:67:f4:43:90:05:ab:54:9f:4b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Oct 15 06:01:38 2026 GMT
Not After : Oct 16 06:01:38 2026 GMT
Subject: CN=39cc07f2c22ce8dabf36527ee83ac8ec64790473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:0e:94:3d:6a:b2:fb:c0:e0:14:73:1f:0a:
77:3b:7d:f4:a5:01:5c:bb:59:64:be:1f:17:18:ec:
c7:64:a6:6d:89:7e:1d:2e:5d:55:7f:24:34:04:dc:
ca:6e:53:b2:1a:dd:17:ce:8f:4f:cc:46:34:05:d1:
93:b7:7c:9c:49:1b:50:6e:ab:e1:30:ea:70:11:7b:
a2:36:70:36:e1:85:7b:f8:cb:00:52:91:4c:9c:94:
91:80:a0:c5:9b:7c:a5:68:ce:ba:bf:40:82:49:3c:
32:4f:9b:77:8e:8c:bc:a7:ef:ac:e8:0c:5f:34:ca:
7c:73:ac:7b:14:2d:79:3e:97:4e:8c:fe:e6:6b:3e:
19:31:3f:28:7d:06:56:b8:21:a7:9f:e6:05:71:2a:
ea:91:9f:a9:5c:a3:95:88:df:42:bf:0e:6e:39:27:
fb:1a:e3:70:c9:4f:9e:7c:a1:2d:5e:19:ec:fa:7a:
f8:57:db:0a:22:da:45:19:36:03:eb:dc:e1:7f:34:
63:e1:92:d2:20:e1:c0:71:c0:57:3c:80:82:02:b5:
73:21:b0:36:f9:56:f9:07:2a:b0:94:cb:ac:b7:87:
37:2d:ef:ac:4c:07:a4:ce:de:a7:68:83:36:87:58:
a5:34:52:5c:d2:c2:a2:74:84:4a:93:af:d1:8f:9d:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CC:07:F2:C2:2C:E8:DA:BF:36:52:7E:E8:3A:C8:EC:64:79:04:73
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1e:40:4e:5a:66:9d:ba:af:cf:23:50:6e:31:91:f0:c7:a5:
32:84:7f:97:d9:18:48:7b:56:f6:ab:2e:d0:0b:8c:2d:3c:ee:
f8:48:5b:6f:88:01:12:2c:ba:f9:da:36:37:97:69:0c:3a:a4:
23:28:78:09:bc:41:51:7e:5a:c4:fe:91:84:0e:bd:f5:a0:c4:
5f:1e:67:13:f2:ef:71:7b:59:23:19:d7:2a:43:fa:b1:1f:26:
a7:02:76:ce:e9:c1:89:52:6a:7b:3d:02:c9:4e:b4:82:0c:64:
cd:c2:47:fc:f5:1c:d4:6d:31:e6:7a:bd:9b:21:5b:b7:f1:6c:
b8:6f:13:61:7c:03:73:b7:10:14:36:95:ab:61:e4:9c:b0:c1:
7e:79:75:06:09:ef:6f:0b:7b:16:d2:8c:8d:e3:89:25:5e:25:
37:a9:f1:5a:70:03:87:29:db:35:81:8a:9a:eb:4c:f7:08:71:
da:a6:b5:71:00:4c:57:ce:ff:cc:3c:7d:02:f0:17:19:c7:41:
29:f4:56:1a:67:4e:b4:dd:63:0e:e3:ee:19:33:f6:27:7d:c1:
8f:c8:71:d2:f6:09:b5:f1:f8:4f:4b:ae:97:6b:20:73:a1:d1:
d8:3e:19:eb:16:93:eb:83:e0:20:a5:be:38:e7:a4:08:a1:76:
e2:c7:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:19 2026 by rpki-client