Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: LFpYmXjvfxahZD+s9VaoZOE+eCNMSGnCbPllqB1VSjU=
Subject key identifier: 2A:F4:EE:B6:12:28:A6:47:8F:8C:EC:B4:B1:9D:C1:26:E3:C3:93:7B
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 019CB926B86445F1FE07540145B0B7690C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 0590
Signing time: Wed 04 Mar 2026 14:00:48 +0000
Manifest this update: Wed 04 Mar 2026 14:00:48 +0000
Manifest next update: Thu 05 Mar 2026 14:00:48 +0000
Files and hashes: 1: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: UMgpsTfwXeE9tWEReLJno0zaTH5gsBnYsxKRx4Vh5ho=)
2: XuITUG_nXLtJk8wz6ifMhssSuak.roa (hash: 5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:26:b8:64:45:f1:fe:07:54:01:45:b0:b7:69:0c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Mar 4 14:00:48 2026 GMT
Not After : Mar 5 14:00:48 2026 GMT
Subject: CN=2af4eeb61228a6478f8cecb4b19dc126e3c3937b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:2c:83:94:e6:76:f2:ea:fc:7f:68:b2:55:
b0:b9:96:6b:2d:71:da:2d:fc:71:f9:72:b9:a7:e5:
cf:58:91:2f:0a:72:1e:18:6f:7f:e6:92:02:6a:ae:
eb:a4:88:9a:51:7e:b6:72:db:23:77:e3:b9:2f:10:
07:d0:8f:f9:55:5f:05:2e:99:1e:08:c2:8b:d0:c9:
02:ef:b0:55:a0:9b:9d:3b:c4:a0:c8:84:a6:fe:82:
79:b5:5a:20:ce:8a:b2:f2:61:32:52:9e:ff:66:de:
2c:fc:d0:c8:ef:07:5b:e7:17:6c:15:37:fb:7a:d6:
e4:b7:23:47:38:81:3a:d7:25:e8:6f:b4:35:1c:e9:
74:1c:1b:1e:67:fb:37:8b:0b:0b:81:fe:97:3e:29:
c8:c8:9d:58:f0:7e:00:fa:de:03:53:0c:9a:b5:08:
86:e6:df:e6:b9:fa:a7:46:4f:76:87:fd:4b:e5:82:
ad:67:ba:f0:1e:6a:e9:9e:9e:c9:fe:84:53:99:97:
25:1d:44:a3:fe:cd:fb:7f:69:d8:68:de:74:94:e9:
36:ca:4d:a1:d8:62:e4:e6:72:34:7a:d8:6b:41:57:
e3:d7:17:72:c4:50:1a:88:f7:3e:67:d6:2d:74:4e:
cd:e5:dd:49:b6:d0:b1:7c:dd:d4:2f:83:58:5f:a3:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:EE:B6:12:28:A6:47:8F:8C:EC:B4:B1:9D:C1:26:E3:C3:93:7B
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6b:00:0e:b3:7a:f8:35:6f:92:a0:75:5a:c2:87:d8:df:13:
25:75:8f:07:b0:d5:bd:27:79:fe:ff:6e:f4:e4:f1:34:7f:00:
f0:81:5b:59:60:e6:a5:00:f6:cb:e7:25:bf:54:66:3b:23:03:
6a:67:37:6c:3b:56:4f:dc:70:37:6e:e8:1b:7a:60:dd:1b:b6:
91:c5:9b:52:22:d1:e3:b2:b3:d7:3e:0b:34:b1:e6:27:82:70:
92:5c:29:6d:7b:37:6d:a0:64:45:4b:77:92:a1:b7:fc:e3:9f:
57:15:ca:1c:60:7d:7b:58:07:fa:27:ee:ec:29:c4:4a:25:88:
9b:83:b3:98:30:99:64:d4:db:dc:d4:21:17:be:bc:23:dc:39:
78:c8:e0:36:8c:6e:9a:a4:4b:97:f7:e4:ba:19:e1:2b:ec:ac:
ee:36:d1:cc:88:96:4a:26:33:e5:04:ba:56:d0:38:e3:3e:b2:
c8:7c:d4:94:bb:21:cb:e7:aa:a5:37:a6:d0:26:cc:a9:c7:e8:
38:27:0e:63:2d:db:53:36:85:21:2d:4f:7a:28:27:0c:78:41:
4b:0f:f8:56:a1:2c:11:02:b4:d2:f5:41:9c:7c:9c:5a:a9:c0:
3e:67:6e:ef:7e:9f:d6:ba:52:e9:94:bb:eb:30:cc:dd:82:45:
94:ac:87:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy5JrhkRfH+B1QBRbC3aQxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTgwYzQ4MzM3YmYyN2RiMmZkMDgzYzE3MmM2YTFjYzVk
MWQxN2MwHhcNMjYwMzA0MTQwMDQ4WhcNMjYwMzA1MTQwMDQ4WjAzMTEwLwYDVQQD
EygyYWY0ZWViNjEyMjhhNjQ3OGY4Y2VjYjRiMTlkYzEyNmUzYzM5MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIIsg5TmdvLq/H9oslWwuZZrLXHa
Lfxx+XK5p+XPWJEvCnIeGG9/5pICaq7rpIiaUX62ctsjd+O5LxAH0I/5VV8FLpke
CMKL0MkC77BVoJudO8SgyISm/oJ5tVogzoqy8mEyUp7/Zt4s/NDI7wdb5xdsFTf7
etbktyNHOIE61yXob7Q1HOl0HBseZ/s3iwsLgf6XPinIyJ1Y8H4A+t4DUwyatQiG
5t/mufqnRk92h/1L5YKtZ7rwHmrpnp7J/oRTmZclHUSj/s37f2nYaN50lOk2yk2h
2GLk5nI0ethrQVfj1xdyxFAaiPc+Z9YtdE7N5d1JttCxfN3UL4NYX6PnQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr07rYSKKZHj4zstLGdwSbjw5N7MB8GA1UdIwQY
MBaAFPOoDEgze/J9sv0IPBcsahzF0dF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjkt
MjY2NGRhY2U5NTgwLzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjktMjY2NGRhY2U5NTgw
LzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWsADrN6
+DVvkqB1WsKH2N8TJXWPB7DVvSd5/v9u9OTxNH8A8IFbWWDmpQD2y+clv1RmOyMD
amc3bDtWT9xwN27oG3pg3Ru2kcWbUiLR47Kz1z4LNLHmJ4JwklwpbXs3baBkRUt3
kqG3/OOfVxXKHGB9e1gH+ifu7CnESiWIm4OzmDCZZNTb3NQhF768I9w5eMjgNoxu
mqRLl/fkuhnhK+ys7jbRzIiWSiYz5QS6VtA44z6yyHzUlLshy+eqpTem0CbMqcfo
OCcOYy3bUzaFIS1PeignDHhBSw/4VqEsEQK00vVBnHycWqnAPmdu736f1rpS6ZS7
6zDM3YJFlKyH9g==
-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:31 2026 by rpki-client