Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
File: 86s6YdwOB9DHYXN-TcPPDo96how.mft (raw, json)
Hash identifier: PUNFFm4dqOALbxdCrMvhVFUgQkYJ6DIVuIVOZQwM/bc=
Subject key identifier: 4B:AB:0E:29:0C:8E:67:36:7E:2E:16:5D:61:DF:B1:18:6C:7F:D2:30
Authority key identifier: F3:AB:3A:61:DC:0E:07:D0:C7:61:73:7E:4D:C3:CF:0E:8F:7A:86:8C
Certificate issuer: /CN=f3ab3a61dc0e07d0c761737e4dc3cf0e8f7a868c
Certificate serial: 019F913554D4C78937D42088B31159C3FAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86s6YdwOB9DHYXN-TcPPDo96how.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
Manifest number: DF
Signing time: Thu 23 Jul 2026 23:00:19 +0000
Manifest this update: Thu 23 Jul 2026 23:00:19 +0000
Manifest next update: Fri 24 Jul 2026 23:00:19 +0000
Files and hashes: 1: 86s6YdwOB9DHYXN-TcPPDo96how.crl (hash: 4332q47DdRUPoLrNQv6foTmPMgOAqRyoFuDWaddS49g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
rsync://rpki.ripe.net/repository/DEFAULT/86s6YdwOB9DHYXN-TcPPDo96how.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:54:d4:c7:89:37:d4:20:88:b3:11:59:c3:fa:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ab3a61dc0e07d0c761737e4dc3cf0e8f7a868c
Validity
Not Before: Jul 23 23:00:19 2026 GMT
Not After : Jul 24 23:00:19 2026 GMT
Subject: CN=4bab0e290c8e67367e2e165d61dfb1186c7fd230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:09:12:5e:2f:fd:ed:a6:72:d8:cc:0a:16:
0d:27:84:9f:77:0d:f6:82:f2:09:41:7a:72:90:46:
50:00:b5:80:c4:f8:84:04:a4:30:4d:0f:6e:bc:0b:
3c:70:4b:a2:a7:20:50:0b:06:8a:21:87:fe:b4:01:
67:64:43:72:94:4f:d8:c1:e0:31:0a:0c:8d:a2:1f:
7e:af:bf:7f:38:96:01:3c:cb:13:8a:9b:e6:fa:f1:
57:79:86:db:c2:26:4a:87:3d:ff:ca:9c:f5:cb:cd:
75:18:c8:c6:e4:a6:97:f4:75:47:08:22:5b:2a:17:
42:ad:45:f3:e6:5a:ef:36:d2:94:a0:64:f7:b6:5b:
79:b8:46:11:91:13:8c:04:07:2f:cf:b2:5f:86:d4:
ba:d0:c3:a0:43:89:80:61:13:de:32:5c:2b:ed:cc:
ec:40:61:7a:db:54:49:79:f2:b4:0f:23:a4:e2:44:
07:a1:a7:00:85:fe:8a:f2:ea:96:33:f6:ad:ef:d1:
09:c9:2e:74:fb:cc:d0:9c:47:f8:81:2c:a9:94:2e:
d0:e1:1a:28:8b:17:70:2c:1e:dc:de:52:29:42:78:
c2:8e:ca:b3:cb:4b:fa:37:e9:7c:93:69:3f:d4:ca:
5b:7d:66:80:11:16:0c:2f:28:25:f1:86:db:e4:d9:
a9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:0E:29:0C:8E:67:36:7E:2E:16:5D:61:DF:B1:18:6C:7F:D2:30
X509v3 Authority Key Identifier:
keyid:F3:AB:3A:61:DC:0E:07:D0:C7:61:73:7E:4D:C3:CF:0E:8F:7A:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86s6YdwOB9DHYXN-TcPPDo96how.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/799088-99ce-482e-8ca4-bff4def35b20/1/86s6YdwOB9DHYXN-TcPPDo96how.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:42:cc:76:39:ea:5f:fc:fb:97:74:fa:77:7f:9f:2e:f3:c4:
00:c2:dc:0c:79:32:b9:ba:16:e4:ae:e8:c6:9f:72:56:07:9d:
15:72:07:aa:c7:d0:9c:cc:42:38:17:21:4b:87:33:c0:f3:f9:
c1:e0:ef:d5:31:c4:5e:15:d6:df:40:d4:41:77:9c:7c:20:67:
ca:c2:e4:8d:7c:90:fe:2b:7c:33:36:c5:f7:4d:c7:b7:66:0e:
4b:95:b8:06:31:4c:2f:f6:b7:53:77:89:07:23:d1:d1:96:5e:
f9:77:99:f4:be:5b:34:d0:c9:3e:2e:36:e3:7e:3d:4b:59:f8:
1b:15:d6:67:33:21:24:b6:f1:2a:ae:09:ec:ac:86:06:6f:29:
a5:24:7a:52:2c:ad:04:7d:48:36:46:a7:58:7b:b7:f1:d0:02:
d7:a0:8c:68:9f:2d:9e:a8:da:6a:8b:3a:24:0a:0d:64:84:e4:
ad:62:f6:63:4a:7b:73:25:94:99:37:59:a3:64:b1:11:e5:59:
c0:17:6d:7b:dc:42:45:25:94:89:44:2f:00:74:37:2a:8d:70:
85:de:62:3a:8a:97:08:66:72:cb:47:a0:4b:3a:37:e4:59:08:
7d:b9:ba:db:e0:78:2c:ff:24:00:d9:7a:93:99:4d:13:1e:38:
c8:21:75:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:36 2026 by rpki-client