Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: 4nQ1uFQ+p3NW200M2EYEqwcjem65RTlpGZtRaKYi8qo=
Subject key identifier: B2:AD:09:14:39:71:64:C7:A8:DC:E2:EB:1C:75:10:C3:47:18:99:0B
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 019D2B8511A689EBB85CF37AA2F441BFFE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 074F
Signing time: Thu 26 Mar 2026 19:00:34 +0000
Manifest this update: Thu 26 Mar 2026 19:00:34 +0000
Manifest next update: Fri 27 Mar 2026 19:00:34 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: RStCFZWbf9b2Pyn/P/qncwYdHgqw8M5/vpPWRQOd/l4=)
2: JimNs2i_obmdv5Qfa9sJ0WhnO_Y.roa (hash: khtm5pt40oNa8FPq78IsRE7crtD9nigpDInHqNXz/Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:11:a6:89:eb:b8:5c:f3:7a:a2:f4:41:bf:fe:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Mar 26 19:00:34 2026 GMT
Not After : Mar 27 19:00:34 2026 GMT
Subject: CN=b2ad0914397164c7a8dce2eb1c7510c34718990b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:09:dd:e8:55:9e:f9:f0:cd:10:9a:b8:19:
86:f3:15:88:28:17:08:fd:4d:35:95:0e:85:7d:c5:
3d:d0:58:32:5e:52:a1:73:25:8b:12:f7:5c:ab:04:
15:3a:91:6d:e8:b0:d9:dd:a9:76:26:1c:6b:25:e8:
19:38:df:59:20:cc:49:1a:34:27:7d:92:d9:b6:8f:
db:2c:87:8f:07:c4:61:de:3a:ef:e3:28:fd:6b:2c:
95:c5:09:79:70:8b:1f:71:35:de:7f:a1:69:f3:5e:
9e:89:ce:74:e6:8b:38:bf:d0:0a:13:52:5e:84:e4:
8a:56:c8:aa:e4:5c:ea:d8:ce:9b:04:74:e9:f3:58:
9f:3d:f9:63:c9:34:22:aa:87:1b:dc:49:da:7a:37:
2a:f3:f3:2d:f0:f1:31:90:46:82:68:7b:75:7a:b4:
07:71:ea:d2:9c:f8:f1:f2:76:27:a5:1e:1f:cf:93:
5a:42:82:4e:d2:bf:cb:3e:5f:8e:af:0f:20:6a:b1:
d1:be:9d:57:14:ce:9f:dc:14:25:08:e2:bf:c9:6c:
5a:d2:3a:08:fe:59:33:66:f8:2b:9d:19:3f:31:0a:
ec:20:76:73:36:2b:7e:70:d8:e6:d4:3f:bd:0c:f5:
e4:0c:32:4b:77:3e:13:7a:09:d4:c9:9f:47:bb:0a:
80:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AD:09:14:39:71:64:C7:A8:DC:E2:EB:1C:75:10:C3:47:18:99:0B
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e0:53:b0:03:b2:0e:e1:b8:c8:87:48:ba:ae:45:40:b9:9c:
fd:aa:5f:b6:ea:f5:e2:22:a2:30:0d:d0:7d:5e:45:f1:68:80:
55:9f:39:19:1f:5b:f7:cb:e7:70:f7:30:e2:b9:27:2e:c6:0a:
d0:e4:64:e1:18:08:ba:13:f3:d9:1f:3d:0b:91:46:ad:7c:fe:
b7:fc:4a:c7:be:eb:1d:58:04:49:9f:77:5d:20:3f:a6:1e:4d:
ef:6a:55:d5:6c:85:ae:2d:25:d7:ae:c2:8f:bd:c7:ce:d2:b3:
53:50:6d:66:0c:4f:e1:7c:79:bc:71:98:8e:02:57:a3:ee:34:
bc:41:06:5c:27:68:51:39:6f:55:0b:57:94:44:ef:b9:87:37:
c7:9b:dc:ce:b2:39:ac:be:b5:80:b2:f0:3e:30:d5:59:76:03:
f6:91:a2:49:c1:01:9f:65:d9:b7:66:3a:a1:3b:ee:c7:02:ef:
4f:a3:2c:a9:22:a2:91:91:1f:fc:12:39:b2:c1:6d:23:9d:c2:
c8:10:cf:1f:27:aa:32:c6:99:4d:bb:be:ab:b6:a1:9a:f6:69:
40:f8:c4:f0:58:cf:03:fb:1a:da:22:a0:ff:95:cd:ae:f0:39:
df:16:dc:a4:e7:17:5b:fb:a4:28:9c:9d:fc:bd:95:ba:8d:33:
5f:01:39:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhRGmieu4XPN6ovRBv/4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2ViMDlkNWVlYTZhMThlNThkZmRlZmViZjI5YjQxMDVl
MDI2N2MwHhcNMjYwMzI2MTkwMDM0WhcNMjYwMzI3MTkwMDM0WjAzMTEwLwYDVQQD
EyhiMmFkMDkxNDM5NzE2NGM3YThkY2UyZWIxYzc1MTBjMzQ3MTg5OTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzYJ3ehVnvnwzRCauBmG8xWIKBcI
/U01lQ6FfcU90FgyXlKhcyWLEvdcqwQVOpFt6LDZ3al2JhxrJegZON9ZIMxJGjQn
fZLZto/bLIePB8Rh3jrv4yj9ayyVxQl5cIsfcTXef6Fp816eic505os4v9AKE1Je
hOSKVsiq5Fzq2M6bBHTp81ifPfljyTQiqocb3Enaejcq8/Mt8PExkEaCaHt1erQH
cerSnPjx8nYnpR4fz5NaQoJO0r/LPl+Orw8garHRvp1XFM6f3BQlCOK/yWxa0joI
/lkzZvgrnRk/MQrsIHZzNit+cNjm1D+9DPXkDDJLdz4TegnUyZ9HuwqAPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKtCRQ5cWTHqNzi6xx1EMNHGJkLMB8GA1UdIwQY
MBaAFAPOsJ1e6moY5Y397+vym0EF4CZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEt
MzQwMThkNWM5ZGY1LzEvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wYzQ2NTAtNzk2NC00OGFmLTk4NWEtMzQwMThkNWM5ZGY1
LzEvQTg2d25WN3FhaGpsamYzdjZfS2JRUVhnSm53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluBTsAOy
DuG4yIdIuq5FQLmc/apftur14iKiMA3QfV5F8WiAVZ85GR9b98vncPcw4rknLsYK
0ORk4RgIuhPz2R89C5FGrXz+t/xKx77rHVgESZ93XSA/ph5N72pV1WyFri0l167C
j73HztKzU1BtZgxP4Xx5vHGYjgJXo+40vEEGXCdoUTlvVQtXlETvuYc3x5vczrI5
rL61gLLwPjDVWXYD9pGiScEBn2XZt2Y6oTvuxwLvT6MsqSKikZEf/BI5ssFtI53C
yBDPHyeqMsaZTbu+q7ahmvZpQPjE8FjPA/sa2iKg/5XNrvA53xbcpOcXW/ukKJyd
/L2Vuo0zXwE5IQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:17 2026 by rpki-client