Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
File: 86s6YdwOB9DHYXN-TcPPDo96how.mft (raw, json)
Hash identifier: UtbNv5ZqxnK7ho92zOFkzRCZMFq0Ol/teZsLi2INZik=
Subject key identifier: 58:35:E4:72:30:14:DE:35:9E:DF:87:D4:A3:FD:D4:2C:EC:25:EC:FC
Authority key identifier: F3:AB:3A:61:DC:0E:07:D0:C7:61:73:7E:4D:C3:CF:0E:8F:7A:86:8C
Certificate issuer: /CN=f3ab3a61dc0e07d0c761737e4dc3cf0e8f7a868c
Certificate serial: 01A0CA0FB457FC0FF5132311E8397AEF4E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86s6YdwOB9DHYXN-TcPPDo96how.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
Manifest number: 0181
Signing time: Tue 22 Sep 2026 17:00:21 +0000
Manifest this update: Tue 22 Sep 2026 17:00:21 +0000
Manifest next update: Wed 23 Sep 2026 17:00:21 +0000
Files and hashes: 1: 86s6YdwOB9DHYXN-TcPPDo96how.crl (hash: m/fVQJLFdmhgjSn3f5qcofyBMiSFu+CBKGtSrt4zqCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
rsync://rpki.ripe.net/repository/DEFAULT/86s6YdwOB9DHYXN-TcPPDo96how.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:b4:57:fc:0f:f5:13:23:11:e8:39:7a:ef:4e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ab3a61dc0e07d0c761737e4dc3cf0e8f7a868c
Validity
Not Before: Sep 22 17:00:21 2026 GMT
Not After : Sep 23 17:00:21 2026 GMT
Subject: CN=5835e4723014de359edf87d4a3fdd42cec25ecfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:3f:45:48:23:9c:64:de:2f:d0:95:e3:59:
c6:47:26:88:48:b5:6d:17:1f:b2:ec:a2:e5:c3:20:
ed:df:16:48:77:f6:22:31:6b:dd:3e:b1:6c:45:70:
8c:7b:dd:f9:1d:63:b1:56:91:0e:2e:1d:55:52:fa:
4e:01:6d:e4:08:38:8d:0c:76:29:6f:d3:56:8a:46:
e3:4d:a3:17:cf:de:ae:3e:bc:2f:0d:02:62:d5:c3:
5e:32:15:3f:ae:76:48:ed:32:c1:56:f0:64:3b:18:
97:97:05:9d:93:39:ba:f9:2e:f8:5c:a9:ae:ff:92:
9b:48:f2:8b:fb:b8:c1:bf:c5:ec:f5:ab:5c:f7:b9:
b1:b2:d0:7a:5b:e5:38:dc:e2:f7:14:46:fd:2c:c8:
b2:f3:b6:6b:b4:8e:e7:2e:3f:29:1d:0e:cb:8b:a3:
2a:6c:1a:a3:97:f1:20:9d:78:fe:aa:3f:d8:a9:e2:
90:f2:63:85:f8:3a:1e:66:f7:a6:e8:db:37:f2:56:
f5:bc:98:4d:04:27:f5:d1:be:80:50:c5:73:7a:f0:
7c:c3:a1:35:75:61:9d:ff:34:5e:a0:43:54:15:88:
76:07:bd:07:df:2a:fd:ae:89:e9:2a:4e:23:cb:aa:
07:2f:89:f3:8c:83:5e:0a:3f:e4:af:a7:71:f0:85:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:35:E4:72:30:14:DE:35:9E:DF:87:D4:A3:FD:D4:2C:EC:25:EC:FC
X509v3 Authority Key Identifier:
keyid:F3:AB:3A:61:DC:0E:07:D0:C7:61:73:7E:4D:C3:CF:0E:8F:7A:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86s6YdwOB9DHYXN-TcPPDo96how.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:93:03:13:40:7e:ea:ca:e6:b7:f2:96:93:07:ac:db:e8:db:
da:b5:b6:14:e6:a1:2c:42:f0:2f:0d:20:32:b2:52:fc:2b:cb:
dd:fb:c9:33:49:c2:f6:b9:2b:54:42:9e:6c:59:17:bc:c1:09:
e4:ae:21:3b:f7:50:ed:b6:8c:dc:d3:20:37:3d:f2:d4:5c:e8:
50:5f:fb:a8:1a:a4:4e:9f:5a:6e:06:b7:97:e0:15:1f:f1:f2:
1a:db:38:ce:43:c3:1c:14:a5:74:d3:d1:6f:72:bf:61:3a:42:
28:45:26:a3:dd:94:cb:d7:ab:90:7f:85:a1:1c:c7:cf:87:23:
a1:e3:da:26:ce:f9:0c:95:81:11:ca:26:3d:c7:8a:80:0a:fb:
b5:67:5a:38:ca:6f:ed:e8:f8:eb:fe:a3:2b:56:6f:5a:73:31:
df:04:99:7b:e3:c6:f0:d8:73:12:0c:1c:e8:2a:18:3c:9b:33:
5f:67:47:ee:4d:f9:4e:fa:68:ab:bd:7d:66:bf:c3:04:87:58:
fd:16:de:65:ff:5e:18:ae:f8:6a:4b:a4:3c:17:98:fb:fd:94:
ed:d7:68:ee:3c:5c:a5:f0:45:91:ff:0d:0b:fe:fe:02:01:be:
3b:1c:8f:9e:e1:0b:bf:6c:4b:2b:73:5d:e0:be:03:41:07:24:
50:78:7e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:10:43 2026 by rpki-client