Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: TOyi0aZ1yRC8yJWM8Se4A9imnetjk7NKYFDBidoAE0Q=
Subject key identifier: DA:09:6A:20:99:D4:1B:AD:CA:CE:C3:05:8E:49:50:0E:C9:6F:B9:40
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 019F17C2B416C3DD6C719E09A0D3BD1188D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 09:01:03 +0000
Manifest this update: Tue 30 Jun 2026 09:01:03 +0000
Manifest next update: Wed 01 Jul 2026 09:01:03 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: hodD3lENWOUxeyLMl/i26yql0yEbIYAxbnY6uqi0xzo=)
2: ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa (hash: NVX59SDqnzDr42Kpw57WUClf3jkUfdSkfds/tST6OaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:b4:16:c3:dd:6c:71:9e:09:a0:d3:bd:11:88:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Jun 30 09:01:03 2026 GMT
Not After : Jul 1 09:01:03 2026 GMT
Subject: CN=da096a2099d41badcacec3058e49500ec96fb940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:42:48:3e:70:9f:e7:84:a2:33:a6:89:36:
81:bb:e9:a8:27:cf:b9:f9:4d:57:d7:81:68:4b:ed:
1b:c0:16:1e:81:9d:b6:c5:52:83:6a:ea:be:16:ed:
05:fc:6d:a3:e9:e7:e9:99:78:8a:bc:6e:bd:c9:7f:
27:e6:d3:02:fb:5b:db:94:73:a9:88:5d:25:bc:48:
2f:3f:cb:3b:09:4e:08:20:ca:3c:96:4a:38:dc:24:
04:97:72:8f:99:c0:26:b9:79:da:cd:f8:91:af:04:
de:14:8c:19:cc:36:84:f9:8e:90:ed:30:0a:19:04:
e8:72:d0:8e:92:a2:71:75:15:0b:c8:64:b5:3f:61:
45:c1:b4:ba:e0:e6:50:ff:c0:7b:5a:bf:76:0b:68:
e4:cb:92:75:c6:bb:fe:ab:55:65:1d:31:63:03:9b:
8b:7e:09:84:a5:27:c6:ac:7e:6d:1b:0e:e7:11:f7:
23:da:29:63:82:1b:fe:14:45:cb:17:6b:b2:2d:a9:
e6:80:2b:41:32:64:d6:b2:a9:54:b0:26:f6:57:50:
ed:99:32:d5:9a:f4:18:47:d0:2b:60:8c:3e:90:6a:
e8:01:76:72:50:56:30:6f:07:aa:eb:0b:f5:e7:76:
59:b3:90:96:b7:b9:ee:4d:b6:c4:16:79:74:da:98:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:09:6A:20:99:D4:1B:AD:CA:CE:C3:05:8E:49:50:0E:C9:6F:B9:40
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:34:2a:0b:29:2b:fd:bb:c7:80:14:fd:50:ce:d0:22:b6:4a:
38:30:29:e9:64:79:75:d4:17:cc:a9:d7:af:ac:b6:a7:4c:69:
3c:f2:b0:42:ee:9f:56:ec:85:3c:1e:e1:d5:12:f3:c1:fc:4f:
f5:3d:f6:3c:b3:d8:4b:1b:53:c2:0c:9c:eb:9a:57:57:42:3d:
1e:25:f5:84:84:b6:ce:33:4c:8f:a3:1a:5a:83:7a:43:a6:5c:
3b:2c:5d:59:64:ba:37:b1:cc:42:89:87:28:55:e0:d7:64:a1:
6c:44:ef:73:1e:af:01:1f:2d:ec:cf:62:bf:ef:dc:08:05:ad:
92:a7:41:cd:b8:35:62:0c:59:a4:69:43:cd:03:6a:ef:3a:18:
f7:c1:15:34:de:bd:48:1a:f0:5f:77:55:ab:fe:09:dd:fe:55:
b0:a7:2e:af:01:28:3b:c5:c9:bb:97:08:0a:23:46:a7:a6:06:
bf:9f:38:1c:f8:8f:9b:e6:66:cd:df:48:ae:ee:07:4f:d0:5b:
90:b1:1f:fc:96:bc:fe:6f:d7:a9:e3:6b:d4:d9:50:20:b6:2b:
1e:c1:e8:9f:02:bc:b4:94:dc:72:30:ff:42:47:ba:5c:ea:e4:
bd:fd:87:e6:69:0b:ae:41:df:10:76:18:14:c4:63:bd:54:41:
85:67:ac:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:22 2026 by rpki-client