Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File: 86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier: /92jzodHzxOsKTWAwUNpV1CJpaJHLtUs5q2EVOWoPnw=
Subject key identifier: F2:63:97:50:2A:A6:D5:9E:5E:57:86:B6:9D:26:72:31:79:7F:3B:1C
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 019F9135C7F285D5B9F076B5910C2C70960D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 23:00:48 +0000
Manifest this update: Thu 23 Jul 2026 23:00:48 +0000
Manifest next update: Fri 24 Jul 2026 23:00:48 +0000
Files and hashes: 1: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: Y7vmmGIMQyQ/frgpYi0YDMqKe89vzoOEN0w1TWbkFP8=)
2: WL12YdHQF4v--TkqLhD3Ng1t2wY.roa (hash: 2kBmQB016zd0/AsZ8Bq22A6ptaprPzQDHPqGp8rEVlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:c7:f2:85:d5:b9:f0:76:b5:91:0c:2c:70:96:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Jul 23 23:00:48 2026 GMT
Not After : Jul 24 23:00:48 2026 GMT
Subject: CN=f26397502aa6d59e5e5786b69d267231797f3b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:25:d5:6b:f1:4a:e7:90:3e:93:ed:4f:5a:
a2:92:c6:a4:ff:0f:0e:2e:54:c4:2c:ff:67:15:78:
e0:91:d4:57:b5:c9:bd:24:82:66:99:0f:c4:36:3b:
99:9e:66:ba:7a:95:01:7f:83:fd:d5:d6:6a:4e:57:
44:b6:a2:32:1e:11:1a:ac:c6:1a:d5:71:a4:56:7b:
b7:c6:c6:dc:59:d5:29:d3:44:e3:4e:49:8d:ff:e8:
85:db:f9:f3:3c:62:0e:1a:bb:26:85:7f:93:57:b2:
d0:46:fb:60:f5:e3:ba:c0:46:b1:03:a6:10:3e:08:
25:f3:a9:8a:56:21:cb:a1:db:86:37:a9:c6:c0:e6:
44:8f:13:7c:1e:44:cc:41:55:ce:b5:50:18:22:bc:
6c:98:f8:a4:ee:39:01:41:ff:c5:00:03:78:cd:97:
17:c6:41:6a:7b:5e:47:67:3d:83:d2:e7:de:4b:d4:
6b:3e:49:50:c6:38:64:f2:98:ab:7f:d5:6a:cc:71:
6d:52:73:4b:de:e8:48:5b:7a:0f:08:a4:eb:00:f0:
49:e5:69:a4:b0:34:fc:65:0c:73:8e:52:18:3b:40:
b5:c9:7f:8f:f1:3a:08:50:3b:eb:2a:d6:92:98:f3:
50:10:1b:2a:39:ba:57:56:5f:d5:68:a2:50:76:92:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:63:97:50:2A:A6:D5:9E:5E:57:86:B6:9D:26:72:31:79:7F:3B:1C
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e2:9f:15:6e:30:aa:94:bd:a6:1d:1d:98:fb:91:38:f8:2d:
87:54:cd:09:bb:ee:f2:fe:83:d2:30:25:38:4c:88:36:50:62:
86:1f:06:5f:df:69:b2:b1:21:ff:da:d0:a9:e6:c1:15:7a:a1:
41:55:92:2a:4f:61:48:9c:78:5f:08:16:de:32:2f:c5:fc:c1:
cf:17:7b:1d:8e:6e:e7:0b:39:67:53:c0:59:20:8f:11:64:03:
a6:7a:eb:3a:fc:b2:0c:80:8a:f5:cf:df:09:c0:66:59:5f:da:
2f:b3:78:35:5d:93:0b:b1:3b:0d:04:29:4a:9b:74:41:ab:0a:
b4:d4:ad:79:da:de:36:97:bc:95:1a:0d:83:3a:e1:79:9e:3b:
d3:e6:09:a1:32:70:f9:fa:e2:19:5c:51:24:94:e3:37:54:3d:
8a:15:8e:c0:dc:ea:1a:79:e8:b1:b2:38:13:02:46:34:3c:d4:
9d:ab:12:32:60:9f:80:df:ff:94:d3:d7:a5:f6:b5:79:11:ca:
c3:8e:dd:71:39:98:b8:38:32:ce:10:15:89:b7:1b:9d:f3:8b:
85:78:ab:6c:2e:7b:5b:1d:5b:0f:da:97:67:2b:c6:79:b1:fd:
b0:a5:e8:18:57:26:cf:60:73:8c:4a:ac:6c:10:6b:59:40:82:
09:60:6d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:13 2026 by rpki-client