Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: SFvZUTMAL3TLBK90zkSA0sHfLvQ3msE4ExY1oQjSof4=
Subject key identifier: 2A:1E:53:A0:B4:58:C8:5E:08:54:C6:97:92:19:78:9B:D9:A7:B2:2B
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 019E20C830FFA663ECFD1517D53E4AD20081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 07CE
Signing time: Wed 13 May 2026 10:00:51 +0000
Manifest this update: Wed 13 May 2026 10:00:51 +0000
Manifest next update: Thu 14 May 2026 10:00:51 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: WKGnsPx2yZuUoYrm6WXfK+5jHhv86X7KviJcKeqShL4=)
2: JimNs2i_obmdv5Qfa9sJ0WhnO_Y.roa (hash: khtm5pt40oNa8FPq78IsRE7crtD9nigpDInHqNXz/Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:30:ff:a6:63:ec:fd:15:17:d5:3e:4a:d2:00:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: May 13 10:00:51 2026 GMT
Not After : May 14 10:00:51 2026 GMT
Subject: CN=2a1e53a0b458c85e0854c6979219789bd9a7b22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:81:2a:7e:3f:e8:eb:cc:2d:29:d7:ec:7c:aa:
87:10:21:99:bb:10:ca:26:07:3a:c4:cd:33:c2:83:
af:24:32:b1:65:9d:19:85:56:76:0f:18:15:fd:3a:
89:c3:ea:fd:6d:91:61:3a:48:ef:83:d9:0f:67:1b:
17:aa:ab:cb:a6:ed:1e:95:96:94:39:21:79:a8:c3:
b8:27:2a:16:20:d0:8a:f2:af:d1:6e:39:76:d2:6a:
e6:f6:c2:ee:4e:8c:f1:b9:4a:5e:66:1e:dc:2a:8c:
1f:2d:2c:bb:a5:1f:30:4c:5b:86:8f:94:8d:a6:d1:
85:85:d3:56:6a:d9:8b:45:6d:59:51:62:90:e2:01:
f5:45:59:6d:fe:59:1a:a1:39:12:e0:eb:7a:17:32:
02:9b:37:0d:7d:ee:4c:99:79:32:d1:a1:c5:8d:f8:
ec:9f:69:31:e3:97:d6:db:44:07:51:63:56:11:19:
50:2c:4e:b5:2e:f4:71:50:d3:33:66:29:77:50:94:
dd:c4:60:74:3b:2c:b8:22:5f:86:46:2b:40:13:de:
b3:37:e0:f6:94:ce:10:7f:a2:5c:c0:f6:57:71:a3:
d6:3c:a5:44:54:c3:22:46:7a:78:cc:e4:4b:30:26:
da:05:57:3f:4a:8a:58:d3:01:13:a9:a8:1b:45:42:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1E:53:A0:B4:58:C8:5E:08:54:C6:97:92:19:78:9B:D9:A7:B2:2B
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:79:e2:39:ca:a7:6f:25:bb:a7:1d:11:3e:9a:96:e6:db:5e:
c7:4e:57:96:23:5c:f7:01:b2:2b:67:ef:aa:27:23:82:03:f5:
7f:2a:cf:de:19:fe:8e:dd:88:3a:7a:8a:92:42:f3:bb:97:a3:
93:aa:b4:e8:bf:9f:9b:76:9b:e2:0b:78:f8:2c:0f:f3:90:23:
f3:f3:8c:5f:29:2d:09:96:d8:35:33:6f:8b:b0:5d:1d:5a:3e:
fd:c3:05:54:0b:89:e1:65:84:40:73:87:2a:5e:28:24:86:29:
82:3e:b7:59:d2:2d:e8:2b:ce:c2:e6:3f:17:8c:32:b1:74:df:
94:62:68:33:4e:98:4f:e9:42:f5:7b:5b:db:e3:77:3a:3b:c2:
84:2a:09:a9:bb:37:1d:1b:0b:a8:a7:f0:18:f1:f6:92:6a:34:
6e:ad:3f:be:ca:49:8a:1b:ca:94:5b:56:5f:b3:02:8d:89:3c:
2d:70:eb:32:28:b0:b7:64:fd:45:97:b2:24:15:a2:07:4f:42:
15:d6:14:28:16:5c:40:ed:e6:c7:9f:01:fd:4d:22:5c:5b:53:
e1:65:50:58:ec:17:8f:bb:f1:55:a8:7d:75:fd:d8:b2:ea:34:
06:6b:32:9a:70:dd:62:71:4f:4f:05:46:2b:35:18:b8:83:d6:
f7:27:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:08:59 2026 by rpki-client