Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: j7YL0Cvhby+uo/xEJ6CSW70eoBahHmjodA/ZbyNkc4o=
Subject key identifier: D4:DC:BA:61:24:B9:5B:98:B1:7C:D5:DB:3C:3B:5E:7D:12:9B:ED:11
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 019D38D3A9367E4B569F6430F35BF8E4099F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:28 +0000
Manifest this update: Sun 29 Mar 2026 09:01:28 +0000
Manifest next update: Mon 30 Mar 2026 09:01:28 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: QcJznnz3NQMvpAMP18Q816eywY6Q9PWOKY17OIWNCj0=)
2: ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa (hash: NVX59SDqnzDr42Kpw57WUClf3jkUfdSkfds/tST6OaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a9:36:7e:4b:56:9f:64:30:f3:5b:f8:e4:09:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Mar 29 09:01:28 2026 GMT
Not After : Mar 30 09:01:28 2026 GMT
Subject: CN=d4dcba6124b95b98b17cd5db3c3b5e7d129bed11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:b3:3d:ee:a0:3e:ad:f7:a4:33:89:c8:48:
25:69:73:43:81:b6:8b:1c:e7:d5:8e:54:99:36:7f:
73:1d:6d:4d:16:5f:62:89:3f:47:fc:3f:72:0d:91:
1f:ac:dd:93:b2:ad:35:81:9c:ea:f2:3c:06:ba:0d:
e3:3b:75:da:b7:7a:21:e6:e5:06:31:78:44:f1:4a:
9b:b1:ff:17:52:1a:1f:7a:0c:8f:4e:64:72:03:b3:
32:5f:32:c1:3f:cb:24:b6:61:c2:54:f6:d0:0a:b7:
86:f1:ad:30:6c:e2:57:ac:56:2e:77:26:ae:b2:c1:
7d:22:3d:c1:3f:ad:4a:0b:46:7c:2b:61:b0:76:bc:
6c:9b:0b:3e:e7:ce:91:b8:3b:21:c9:71:a8:c5:07:
44:b5:b2:09:f7:c2:1e:63:cd:a2:74:2e:53:15:d4:
c9:48:e8:f7:4e:4f:90:ef:cf:3f:b2:17:b2:68:59:
ff:ea:75:b6:4a:b4:68:f7:61:96:d4:60:31:50:23:
00:3f:dd:a2:7d:c3:c7:33:53:7e:6e:28:65:1f:d7:
25:ca:71:90:43:99:f0:de:5a:d5:78:a7:64:63:b9:
9d:89:cc:ad:7f:3f:d0:6c:87:9c:ff:c1:0c:01:e2:
7a:c9:3b:c1:f3:d4:ab:d3:32:46:72:e4:b2:7d:f5:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DC:BA:61:24:B9:5B:98:B1:7C:D5:DB:3C:3B:5E:7D:12:9B:ED:11
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c3:63:ad:6b:95:98:14:bf:66:1c:24:cb:96:98:d1:95:b7:
ca:0b:ff:88:85:05:1d:95:c1:c5:31:9c:6d:53:2b:0f:4b:0a:
83:67:71:71:94:52:73:73:fe:3d:b0:e5:98:03:c6:94:e4:3f:
cb:82:fc:e4:92:8d:06:be:b0:74:ff:7d:04:73:fe:b3:58:05:
d3:d3:7e:cf:a5:02:7d:51:cb:5a:e6:f7:de:63:c1:a9:2f:aa:
a7:e1:4a:e3:4d:34:df:6f:ec:38:83:b5:20:80:93:6a:a8:93:
d3:d8:c4:dc:b2:46:bc:70:86:b3:d8:97:32:df:71:1d:2d:7c:
60:e9:19:ee:e1:2f:e2:78:16:05:36:70:a6:9c:2c:af:d3:d4:
1b:25:02:9f:b6:ec:cf:34:83:4b:5c:3c:b0:f8:20:a8:e2:ed:
66:2a:9d:e3:67:1a:70:23:40:0f:dd:7a:7c:e3:fe:41:ba:96:
b0:ae:de:70:09:ee:ec:6e:58:a8:a8:d1:92:e9:22:b5:e9:31:
aa:34:61:85:f4:b4:25:82:ab:1c:7a:47:32:28:84:9e:a4:08:
cf:66:8b:26:95:8b:c6:0c:00:b4:f4:1e:e9:79:63:5e:22:48:
eb:cc:25:2d:e6:9f:a6:3c:4e:2a:09:19:23:b1:4c:8e:ba:e6:
4e:bb:a8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:39 2026 by rpki-client