Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: 31CEdRDvcir9tM1nJ6lQNlAs0HPV9sO/ybG1ryLeoNs=
Subject key identifier: 35:A6:16:39:E3:C2:90:1E:C2:3D:1B:B2:1D:DD:B8:9F:96:50:D8:91
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 019F93928309864E552A812D1066FBC77A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 088E
Signing time: Fri 24 Jul 2026 10:01:20 +0000
Manifest this update: Fri 24 Jul 2026 10:01:20 +0000
Manifest next update: Sat 25 Jul 2026 10:01:20 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: xrPWsXGDGAKR92l0XQ5vRFCHLeucyCUVoMlqum7OSvs=)
2: JimNs2i_obmdv5Qfa9sJ0WhnO_Y.roa (hash: khtm5pt40oNa8FPq78IsRE7crtD9nigpDInHqNXz/Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:83:09:86:4e:55:2a:81:2d:10:66:fb:c7:7a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Jul 24 10:01:20 2026 GMT
Not After : Jul 25 10:01:20 2026 GMT
Subject: CN=35a61639e3c2901ec23d1bb21dddb89f9650d891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:1e:7b:8a:e8:f7:98:47:c7:f4:9d:42:9b:
fa:34:96:7d:c6:70:0b:60:a9:a3:85:fc:40:dc:e1:
ec:ff:03:7b:5b:92:61:0d:bb:a5:16:72:0f:c8:c2:
72:7d:c5:9e:e0:da:a5:c9:cc:85:bb:18:46:ca:6a:
43:2f:a2:e1:62:e2:ca:1f:03:77:77:6d:89:ce:d5:
db:d0:95:ea:66:b8:0e:88:a7:4c:c4:05:a9:51:ea:
cb:9c:a2:c7:7c:ad:99:45:b1:51:7f:fa:d3:71:12:
f6:85:48:1d:35:19:14:cd:15:c6:f2:36:59:e8:88:
e2:01:ba:7f:7a:c0:74:db:2f:4c:a3:4e:a5:cf:5c:
6e:55:64:cd:ef:13:84:08:96:77:43:6b:cf:fd:15:
66:03:30:b9:2c:4b:2e:dc:76:92:f8:3b:a7:fe:88:
06:37:e8:67:cd:ca:b7:92:84:7d:69:e2:15:d0:fa:
11:e6:af:2e:30:7f:ad:13:0e:17:76:4c:a7:3a:83:
0d:b8:fa:51:56:2c:32:35:23:f7:6d:cf:a2:34:95:
c8:1f:fd:37:d7:70:8e:a4:ed:b0:01:f6:72:c5:c4:
89:cd:db:53:56:59:24:0a:10:f7:a1:3c:f0:da:b6:
b3:d1:b6:9f:27:d3:1c:1e:28:07:29:30:3c:94:b5:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A6:16:39:E3:C2:90:1E:C2:3D:1B:B2:1D:DD:B8:9F:96:50:D8:91
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a1:46:36:f3:ce:5d:3c:d4:10:cd:5e:42:3b:19:a1:ee:0b:
92:71:2a:1c:3d:7e:18:55:15:ec:07:5b:01:81:42:fb:f8:14:
6f:43:4f:b6:c4:6b:9e:6c:05:1e:af:83:99:dc:0f:14:3a:16:
1d:81:97:4e:1f:28:a2:7a:94:99:af:3e:a0:d9:fb:93:c0:20:
0d:a5:fa:e2:db:3f:0c:09:22:51:51:3c:6b:43:86:0f:2b:ec:
b9:de:8b:13:a5:54:68:4d:61:1f:15:58:45:a2:03:8e:09:42:
f7:57:f7:f5:60:53:f8:cf:d2:91:3e:8a:20:51:ec:c0:36:d6:
85:e8:be:68:9f:d1:e8:56:61:2e:d1:bc:2b:42:80:cf:2a:f9:
8b:89:2a:1d:78:8e:f6:94:b0:3a:92:7a:96:39:b1:1b:4f:36:
93:a4:55:16:2d:b3:cc:81:5f:4d:fa:cb:05:66:64:74:10:24:
11:e3:43:7f:53:74:d3:75:27:fa:63:7f:97:69:18:e0:8a:39:
89:a9:26:6c:cd:c0:f7:72:aa:c4:a6:6c:19:95:9b:f4:0c:11:
3c:a1:6d:22:8a:7d:9f:5c:06:89:98:33:67:e3:9e:02:76:27:
fe:80:61:55:df:4c:f8:e8:0d:68:e9:52:61:fe:9a:04:8f:25:
b0:37:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:46 2026 by rpki-client