Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: FwzxGI404CE3QcVjyYcj1/gK9XlBiN2un4I77vU4MvM=
Subject key identifier: B2:52:8C:8E:FC:F8:50:0F:7F:E5:49:F8:0A:4F:F7:BD:5E:0E:A3:06
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 01A0016F47F0F0E6B2B7656C0747478C3772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 18:01:04 +0000
Manifest this update: Fri 14 Aug 2026 18:01:04 +0000
Manifest next update: Sat 15 Aug 2026 18:01:04 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: kPcN/my/MDzLqEjgp2KT2nlNaGDqzNTO9co4b7t2frE=)
2: ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa (hash: NVX59SDqnzDr42Kpw57WUClf3jkUfdSkfds/tST6OaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:47:f0:f0:e6:b2:b7:65:6c:07:47:47:8c:37:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Aug 14 18:01:04 2026 GMT
Not After : Aug 15 18:01:04 2026 GMT
Subject: CN=b2528c8efcf8500f7fe549f80a4ff7bd5e0ea306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:7b:a1:10:a2:8b:02:12:81:2d:0f:46:9f:
29:1b:b7:66:13:b7:80:ec:a0:5a:7a:43:3a:e9:c6:
62:08:85:24:d1:e2:07:11:23:d5:21:81:ac:0e:dc:
55:b6:97:2a:b9:8e:11:e0:97:15:60:e5:a9:63:38:
16:93:d2:1f:3b:76:a1:13:e2:02:ba:b3:d3:cd:9d:
95:16:46:08:18:f9:c4:a1:e7:73:69:17:65:61:55:
44:a2:ed:69:ca:1c:08:da:4f:2b:89:b7:cd:9a:5c:
69:e7:0b:28:35:50:4f:54:33:1d:b1:ea:7a:cf:3b:
26:ac:67:59:af:57:d5:1c:4c:ac:39:19:de:11:6f:
31:ee:5d:74:77:6b:b4:bb:95:dc:8c:ec:96:d0:de:
7a:37:2a:83:9c:05:ab:52:32:3b:9f:33:cf:4e:7c:
33:48:2e:16:d1:4a:e5:b5:89:b3:b8:9d:cc:5f:f7:
e9:09:5b:32:c2:c2:78:c5:d6:27:c1:0c:47:87:cd:
67:4a:a3:8f:ff:46:0c:f8:af:b2:5b:73:da:a3:db:
95:c5:dc:5e:54:7e:d0:c4:11:3f:8c:1f:b0:90:d6:
7d:74:4c:2c:e4:76:d8:eb:7c:f7:c0:4f:b9:09:58:
9d:a0:b4:57:85:be:48:d4:36:7f:f9:f7:08:dc:a1:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:8C:8E:FC:F8:50:0F:7F:E5:49:F8:0A:4F:F7:BD:5E:0E:A3:06
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:db:3c:01:96:ac:23:08:17:f5:ee:69:fd:26:7e:08:c9:8a:
58:55:98:01:dc:1c:7d:ca:70:ee:ee:88:01:80:ab:34:81:2a:
9f:01:2a:c0:a3:e8:22:a2:b3:4d:70:02:c7:b7:b8:83:49:a5:
cc:d3:d7:09:82:bf:c7:15:54:5e:a9:63:f9:de:a2:21:e2:b0:
2f:e0:46:8b:72:51:02:61:b6:bf:89:f5:9f:26:c4:43:6b:36:
cb:be:33:82:b8:b7:4c:af:ae:19:0c:ee:8b:33:61:7f:58:12:
47:79:fe:de:86:e9:5e:c3:02:cd:ff:ec:c3:71:cb:d5:f3:84:
03:b5:71:9c:2d:98:be:9d:d4:a2:58:73:04:3c:03:d0:52:44:
97:27:82:7c:e3:1b:36:83:82:d1:b7:97:43:87:84:ab:60:d1:
3e:21:e4:c7:6e:b0:69:bc:19:4e:16:55:01:87:0c:9d:e8:55:
64:d3:b2:51:e6:3a:58:90:3d:be:d1:a1:10:7d:79:58:97:ba:
61:da:1b:18:f8:7d:d0:be:01:e8:a9:de:f0:d9:bd:bc:49:4b:
c4:2f:cf:29:54:bd:51:6e:75:1b:0b:9b:5f:64:6b:3e:f6:b7:
1b:77:52:a4:58:29:b6:3c:6b:56:e8:93:93:07:95:ca:ec:6a:
0b:9e:a0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:32 2026 by rpki-client