Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File: 86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier: SF7ihlUH9V+ubOHBZXk+LOeBL5LmFx73IP9Q3lPt4Zc=
Subject key identifier: 9E:D1:B4:EB:CB:61:49:8C:4D:05:5F:15:DC:D0:8F:50:32:04:07:81
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 01A0CDEC6DD88845DF7DA6F35A7D038DCA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 11:00:18 +0000
Manifest this update: Wed 23 Sep 2026 11:00:18 +0000
Manifest next update: Thu 24 Sep 2026 11:00:18 +0000
Files and hashes: 1: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: 8MSXh0yRNl/SffFnIUrA+W0pSn/ZPDe9C2tvYaeTqsM=)
2: WL12YdHQF4v--TkqLhD3Ng1t2wY.roa (hash: 2kBmQB016zd0/AsZ8Bq22A6ptaprPzQDHPqGp8rEVlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:6d:d8:88:45:df:7d:a6:f3:5a:7d:03:8d:ca:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Sep 23 11:00:18 2026 GMT
Not After : Sep 24 11:00:18 2026 GMT
Subject: CN=9ed1b4ebcb61498c4d055f15dcd08f5032040781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f8:f6:aa:d8:7c:33:02:00:a7:8e:af:67:5b:
b6:f5:61:b6:51:c6:f4:e6:47:15:2e:10:b7:8e:1c:
10:2f:ae:c4:8b:3d:10:0c:d5:0d:88:10:28:5c:8a:
83:1f:3e:e5:a5:29:a7:56:a8:cb:5d:1e:cc:37:99:
ee:35:c4:29:66:e6:06:c6:9e:96:be:94:5a:f8:82:
92:d4:52:55:f3:db:14:33:29:1c:91:af:4c:32:03:
0a:e4:01:41:bb:0c:f4:85:65:c3:28:26:47:ba:d7:
ed:2a:94:8c:9a:8c:33:e3:a0:33:27:88:c4:cf:16:
d8:cb:6c:91:9a:b3:b0:74:37:a8:c2:d4:7c:46:cf:
35:56:d0:a9:d9:67:91:12:c0:88:a3:83:c9:52:f0:
75:e4:91:b8:a7:9c:5d:bd:17:d8:29:2a:45:09:5d:
e0:26:b4:6d:7b:ea:6f:16:f3:3e:ac:30:f6:2c:08:
84:6a:ec:84:b7:a8:20:9c:0d:cc:bd:19:6f:51:37:
8e:69:d4:36:ec:7f:43:c3:51:b6:3a:56:f5:6a:81:
c5:84:f2:1b:43:b3:63:40:b8:21:81:e7:8e:b8:88:
5a:a8:49:a7:d1:e8:17:0a:50:81:5d:37:c3:1b:94:
cc:ae:d7:92:bf:c9:9b:91:8c:ff:4c:0c:2a:81:0f:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D1:B4:EB:CB:61:49:8C:4D:05:5F:15:DC:D0:8F:50:32:04:07:81
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:07:12:43:cf:b6:cc:48:34:42:df:05:b3:21:1a:1c:9c:94:
f0:83:c1:4c:57:0b:73:88:2b:8b:73:c8:8c:4e:d7:25:c1:7a:
f5:d3:06:4f:4d:8b:cf:5e:63:21:61:2e:63:a9:1b:eb:8c:ba:
5b:50:d6:cb:c0:6a:c9:85:7c:59:f7:d4:0d:4b:e9:c7:05:8f:
95:5a:3c:1a:6a:b6:0c:43:4f:cc:7c:73:c5:0c:4f:8c:af:f6:
2a:76:fb:5e:8b:e8:77:0e:3b:1a:12:cf:3f:16:fd:7a:86:5d:
26:45:89:48:08:5c:45:22:0c:0c:5c:45:5c:8e:32:e0:ea:d4:
bc:0f:13:97:8a:aa:25:58:e2:c0:04:a7:3f:af:4c:43:4c:ae:
65:27:ab:a7:ff:09:71:c7:c1:55:15:ed:8f:5d:f2:d6:e7:f8:
85:ed:a9:31:90:9d:d4:90:52:c0:27:05:5d:5e:ca:4f:62:51:
cc:55:56:0d:e5:bd:2e:58:97:25:31:c5:41:e1:2b:94:20:8f:
b7:01:7a:bc:9c:98:55:6a:6f:e3:d4:26:33:fe:a4:48:da:ed:
e0:ea:de:93:2e:87:c2:9b:b6:69:ff:e7:51:a4:b8:ad:94:ef:
18:24:1c:c6:91:00:67:94:53:31:ef:78:3c:58:98:50:02:72:
fb:81:8e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:54:22 2026 by rpki-client