Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File: 86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier: cWq10uQdeuk0u4i8Tqm4hHaEzev9p/IuxT4b8opu4vg=
Subject key identifier: 1E:E4:39:6C:A3:11:16:35:0D:0C:00:FD:88:DD:B7:6B:EE:86:78:7B
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 019D29298895DDD258F64047CEB596A6C5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 08:01:20 +0000
Manifest this update: Thu 26 Mar 2026 08:01:20 +0000
Manifest next update: Fri 27 Mar 2026 08:01:20 +0000
Files and hashes: 1: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: H5k7rVvogIm+anLGNhbRXS4uYWzVpHRxfkRCGT5jfzs=)
2: WL12YdHQF4v--TkqLhD3Ng1t2wY.roa (hash: 2kBmQB016zd0/AsZ8Bq22A6ptaprPzQDHPqGp8rEVlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:88:95:dd:d2:58:f6:40:47:ce:b5:96:a6:c5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Mar 26 08:01:20 2026 GMT
Not After : Mar 27 08:01:20 2026 GMT
Subject: CN=1ee4396ca31116350d0c00fd88ddb76bee86787b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:43:54:43:e0:44:42:d5:3a:ea:b2:a0:c8:
0e:ef:12:be:15:2c:cf:b2:b9:15:cc:25:31:2b:1b:
46:69:6b:92:40:e5:67:c9:fc:b0:ec:93:e4:59:f2:
22:09:19:ee:3a:a3:ab:d7:68:a7:a4:f2:d2:c2:b9:
c0:c9:b7:45:78:31:b1:00:5a:95:f7:ec:99:d2:79:
56:df:ce:0a:82:5f:9b:a3:cb:b2:af:22:51:b2:a3:
69:82:3c:9e:5d:9a:09:9d:45:22:54:a1:16:d2:f4:
49:e7:a8:0a:c0:19:78:f2:c9:32:95:fa:41:03:32:
59:6c:10:06:b4:d5:29:85:6e:db:7f:ae:b8:ac:db:
1d:b5:c5:10:ef:03:b3:3e:12:74:5c:c5:87:5f:b1:
09:f1:e3:7f:cd:ed:d9:52:1c:a5:cb:38:08:f0:25:
a6:f6:52:9c:5c:d0:f1:00:18:fd:75:fa:03:f0:95:
38:4f:2f:99:74:a3:9e:91:ae:dd:dc:17:3d:ce:fc:
75:eb:e4:6d:13:3c:da:19:d2:44:96:37:08:07:36:
5b:ae:02:1d:af:6d:e3:ef:36:4d:a5:ac:de:4c:36:
31:b7:79:4e:6b:10:fa:cf:fd:07:3e:7a:21:a2:54:
d2:f2:0a:f2:91:3b:e6:3e:dd:6e:5b:8b:31:00:56:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E4:39:6C:A3:11:16:35:0D:0C:00:FD:88:DD:B7:6B:EE:86:78:7B
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ee:04:42:6b:44:d3:f0:9a:22:90:f2:e5:34:b2:4b:d3:6c:
d4:84:96:8f:17:0f:89:85:c8:9b:5d:47:c2:8a:c4:4c:8c:18:
78:6d:35:d3:2c:b1:bd:ee:a0:e2:87:c8:6d:25:2a:12:2c:96:
7b:83:cf:b3:bf:77:3c:72:ae:3e:86:cf:01:e3:97:d9:03:2c:
c6:a3:fd:1e:6a:7c:92:74:87:67:17:24:69:da:1e:e2:7f:38:
3a:55:1a:5c:cd:e6:c5:90:4b:79:cb:7f:9b:3c:ba:3e:e2:8e:
7f:80:89:05:d2:f5:48:98:c6:d7:f2:d8:a0:92:b1:0a:82:9d:
38:c8:52:6d:78:2c:b6:5a:59:cc:16:89:96:82:90:eb:72:be:
27:87:44:17:3a:51:51:f0:d6:27:8a:0b:cd:be:60:d4:3c:82:
5e:d2:b1:d0:19:17:ab:4a:ae:e2:80:cf:5c:dc:a4:94:21:cf:
6d:0c:0d:87:f2:91:da:39:a7:2e:e8:93:6c:50:7f:37:2c:8d:
dc:4c:82:08:b8:e5:ee:d7:d5:02:27:b2:3a:d6:14:05:62:28:
a2:d1:65:16:5b:10:2d:c7:79:ee:07:c6:10:e4:3a:10:e7:38:
e1:5d:c6:cd:4b:2e:19:c5:18:03:fa:08:cb:28:59:9a:07:cd:
51:dc:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:00 2026 by rpki-client