Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: +HkrEJOyFcsplaC6xqzutmBE2nYThcknMFPzC0gt3LA=
Subject key identifier: 21:30:EB:BC:64:3C:BA:85:FA:12:CD:26:44:C2:C5:35:69:4E:0A:B2
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 01A13DEEE5A9818120114E6CD67A75C3B22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 07E7
Signing time: Thu 15 Oct 2026 05:00:28 +0000
Manifest this update: Thu 15 Oct 2026 05:00:28 +0000
Manifest next update: Fri 16 Oct 2026 05:00:28 +0000
Files and hashes: 1: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: YgztPyCE0xOIA7/wCYQ1+/lbCPzV/sKNsO8IOWSMays=)
2: XuITUG_nXLtJk8wz6ifMhssSuak.roa (hash: 5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:e5:a9:81:81:20:11:4e:6c:d6:7a:75:c3:b2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Oct 15 05:00:28 2026 GMT
Not After : Oct 16 05:00:28 2026 GMT
Subject: CN=2130ebbc643cba85fa12cd2644c2c535694e0ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:8c:75:a2:8b:3e:79:3c:25:d3:3b:60:d0:
13:50:ad:18:a0:37:5f:1c:63:82:fe:42:07:d7:59:
72:b2:b4:cf:d3:eb:3b:c8:be:77:92:cb:e7:37:de:
09:7c:c5:63:5a:9c:ea:b3:54:a7:5a:4a:e9:03:7f:
22:4a:01:5a:0d:a6:62:c5:af:f2:cb:2f:85:1c:8d:
c9:c8:a3:86:94:d8:b6:c9:c5:38:3c:6e:e5:ef:09:
cc:d2:65:c6:6e:14:9e:df:e4:1f:c6:90:d2:3e:94:
39:b1:fc:c8:e0:5b:39:32:b9:9a:05:eb:0a:8b:1d:
7f:f2:b4:9a:fb:f3:05:d6:dd:18:aa:aa:66:6e:b9:
f6:7b:4f:1f:1a:10:1b:02:31:87:7f:5f:01:bd:55:
7a:de:ee:e1:5d:de:f1:54:04:df:66:db:68:a5:97:
6d:05:10:26:2b:34:72:02:b0:33:4c:6d:61:ea:72:
dd:d6:9e:18:53:6a:a9:88:22:25:a4:0c:54:ad:ae:
a4:25:c1:e0:6d:52:79:5f:cc:00:35:2c:ff:e6:7f:
ef:a3:ac:d7:25:d9:78:ae:f7:00:13:25:a7:27:ce:
e8:7d:0d:17:4e:26:ee:c9:bd:04:b6:25:2b:78:70:
2e:4a:d5:e3:c0:09:2e:68:40:cb:8e:3d:90:a8:aa:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:30:EB:BC:64:3C:BA:85:FA:12:CD:26:44:C2:C5:35:69:4E:0A:B2
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:34:41:ad:a5:14:a5:6b:45:b3:37:17:2a:49:53:32:60:31:
08:74:39:c4:47:93:16:ba:b6:20:03:04:b4:b4:55:0d:a6:06:
44:33:e6:c4:44:81:ce:37:f2:fd:27:d9:15:08:b2:cc:51:5a:
e9:e1:7c:dc:72:14:df:1a:f5:7c:24:e5:58:9f:97:99:db:45:
26:96:0b:23:8d:27:e3:82:0f:cd:74:21:2b:73:9f:90:57:08:
df:15:e5:0c:44:8d:e0:be:14:b1:9e:0b:6c:2b:c8:54:2e:16:
92:4d:1a:db:ef:f5:c4:54:41:45:39:b4:46:35:77:6e:5e:88:
62:2d:5f:41:17:a0:00:72:a8:40:2a:5b:2e:c8:e0:4f:49:45:
24:19:e7:af:e0:2a:05:8c:cf:45:59:58:22:b3:b4:a8:b7:c5:
06:d1:24:15:8b:43:3c:d4:c7:54:52:28:f8:06:ca:3a:44:f2:
75:5c:a9:67:19:e3:de:ba:86:ad:ce:39:38:a6:31:99:a8:4e:
f2:45:44:b8:fa:1b:b1:af:e5:ad:32:30:53:74:f8:67:ec:c4:
71:53:34:42:8f:8d:5f:35:8a:f2:e6:d5:a7:9e:ea:fc:1f:20:
e8:89:0a:dc:ff:d2:05:9c:2f:73:c1:c7:9f:71:65:c9:37:46:
fd:cc:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:25 2026 by rpki-client