Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
File: 86s6YdwOB9DHYXN-TcPPDo96how.mft (raw, json)
Hash identifier: jHIJY9vDP5mwrtuTDR4uFJvvpzvDUAVLjFfI/vP7seg=
Subject key identifier: 45:38:FB:1D:AE:C7:B7:54:FF:29:6A:4F:4F:24:A1:61:E3:21:E0:4A
Authority key identifier: F3:AB:3A:61:DC:0E:07:D0:C7:61:73:7E:4D:C3:CF:0E:8F:7A:86:8C
Certificate issuer: /CN=f3ab3a61dc0e07d0c761737e4dc3cf0e8f7a868c
Certificate serial: 019E1C7DEDD57F70BE57926C7FA492AA8C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86s6YdwOB9DHYXN-TcPPDo96how.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
Manifest number: 1E
Signing time: Tue 12 May 2026 14:01:15 +0000
Manifest this update: Tue 12 May 2026 14:01:15 +0000
Manifest next update: Wed 13 May 2026 14:01:15 +0000
Files and hashes: 1: 86s6YdwOB9DHYXN-TcPPDo96how.crl (hash: 1BR60AYnvh8j8X6HoIApCaXU+sxPRYhMn/jX/42NDxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
rsync://rpki.ripe.net/repository/DEFAULT/86s6YdwOB9DHYXN-TcPPDo96how.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:ed:d5:7f:70:be:57:92:6c:7f:a4:92:aa:8c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ab3a61dc0e07d0c761737e4dc3cf0e8f7a868c
Validity
Not Before: May 12 14:01:15 2026 GMT
Not After : May 13 14:01:15 2026 GMT
Subject: CN=4538fb1daec7b754ff296a4f4f24a161e321e04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:55:06:f5:e3:5d:2c:5a:b9:47:24:c6:37:
7d:80:62:e2:ed:4c:65:fa:f0:99:f6:3c:2b:b2:04:
cf:78:cf:69:33:33:53:d9:a4:ba:a2:30:a4:7d:9d:
9b:2b:2a:71:87:66:74:c3:05:b4:45:51:25:47:7b:
7b:46:4a:7f:69:67:0f:22:93:6b:cd:98:a1:ce:8b:
07:bc:d4:4e:59:e4:03:3b:60:5b:f0:39:d4:fa:9a:
2d:a5:c1:22:76:93:b5:38:1d:dc:be:0a:c0:0f:3d:
a1:a8:4a:e5:e5:f4:b1:83:52:7d:8d:e7:0b:01:d2:
d7:39:e4:ba:4a:57:a9:ba:d8:78:5d:67:54:c7:83:
26:d4:5b:85:61:c5:62:b6:f7:31:8b:da:4d:25:f6:
c5:ca:49:5a:93:3e:c8:11:88:6f:fd:d1:fc:65:dd:
f6:b4:79:00:85:bc:bd:f8:ad:71:c2:6a:74:25:26:
e6:31:9d:dc:02:db:f1:bd:3b:da:3f:1c:fc:6e:a0:
70:9e:a4:84:30:f9:e2:a6:e3:09:96:fa:b8:98:fa:
a9:f8:fb:08:4a:3f:6c:3c:f5:d4:2f:f7:13:c2:13:
a2:cb:54:17:d7:18:3e:30:ea:2b:32:57:c9:49:e6:
bb:ad:68:e8:27:86:26:19:c9:21:40:0b:2c:1b:92:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:38:FB:1D:AE:C7:B7:54:FF:29:6A:4F:4F:24:A1:61:E3:21:E0:4A
X509v3 Authority Key Identifier:
keyid:F3:AB:3A:61:DC:0E:07:D0:C7:61:73:7E:4D:C3:CF:0E:8F:7A:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86s6YdwOB9DHYXN-TcPPDo96how.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:6a:99:ae:ff:9a:1b:44:c1:a7:31:80:20:90:db:93:be:18:
74:d6:ed:a1:a6:31:d9:91:3a:0d:d4:38:e8:ce:2d:3c:82:57:
67:14:56:b7:f3:cf:17:7a:d0:a8:ea:8a:33:22:be:ac:b0:f3:
98:24:39:d2:39:38:98:3b:70:cb:ad:8c:e5:51:80:61:bf:6e:
41:40:02:e3:39:60:f7:28:f2:0f:f1:6c:f5:74:ad:67:7d:d7:
f7:50:8b:05:32:2e:a7:1c:6c:36:50:6d:f8:eb:d8:35:fe:64:
b8:6b:aa:f0:0a:8c:b4:db:e9:49:e0:27:ab:be:60:b4:8c:b9:
9f:4b:89:58:e9:11:8a:a6:a6:aa:3a:6c:18:22:bc:a6:15:c1:
1b:bb:d1:2b:3d:31:e2:ac:f9:f5:60:1a:1c:46:92:9e:11:d6:
9b:f6:fd:3f:c0:38:cb:90:bd:c0:85:6c:b6:6d:a7:a6:a4:95:
33:bf:fa:a1:e4:1f:44:28:78:f1:1b:a6:f9:ae:5f:42:5a:54:
70:22:9b:3d:72:e0:1f:6d:d5:0c:56:49:df:16:04:f4:82:19:
fe:3e:05:d5:f5:e0:4c:3b:bc:6b:36:18:bb:8e:a1:9d:16:1b:
54:06:9c:88:ef:11:b8:cd:2b:b6:f6:d2:8a:b1:26:1f:e7:8e:
e1:4f:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:14 2026 by rpki-client