Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier: 6c+WrUOQ/y/S+czc8zVayg2Vrt5A8Chf3n0qH91Y6mk=
Subject key identifier: 38:71:B8:CE:D5:76:44:B0:90:86:46:0B:C9:31:86:D6:B2:58:1A:F9
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 019D2703EB9EF8AE75D70EEC5F33636776C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number: 06DC
Signing time: Wed 25 Mar 2026 22:01:01 +0000
Manifest this update: Wed 25 Mar 2026 22:01:01 +0000
Manifest next update: Thu 26 Mar 2026 22:01:01 +0000
Files and hashes: 1: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: s3zvp9/8mh82YHvL9WNlA4FLEWDP0zrWqN1gyPadCpA=)
2: xCvlhfxkNPRBBz_i6VM9U4-t0BA.roa (hash: I2ugWtRwTmXPZXRdn73fmU0ZbGjpZ9U3l1aWJKFa53A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:eb:9e:f8:ae:75:d7:0e:ec:5f:33:63:67:76:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: Mar 25 22:01:01 2026 GMT
Not After : Mar 26 22:01:01 2026 GMT
Subject: CN=3871b8ced57644b09086460bc93186d6b2581af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:d0:01:a9:58:32:83:da:1c:43:97:49:b9:
39:01:4c:58:e3:af:d3:67:f0:61:ff:f5:3c:19:bf:
7b:b2:81:97:d4:5f:dc:2c:bb:13:70:e0:e0:86:cb:
01:85:20:0a:db:d0:57:df:9d:d7:bc:1d:57:d3:1e:
da:6c:4c:10:99:64:cb:ec:9f:8e:30:dd:b3:4e:c8:
86:cf:cb:ae:9d:4f:69:06:40:da:97:8d:15:b4:d9:
da:60:20:f6:a7:ce:0c:ba:12:d6:d1:48:63:61:d4:
b5:cc:7c:6b:18:aa:a9:cb:81:21:8c:39:35:28:39:
e6:41:ee:ac:8a:a1:17:fa:69:b4:aa:36:78:a0:1b:
67:bf:6b:a8:65:e0:5e:fc:60:b3:00:d8:ae:37:3e:
8c:29:cf:98:a7:f2:5b:8c:48:9d:d2:b4:37:5b:9d:
4f:9d:9c:49:72:f9:2e:f5:4f:1e:0f:51:52:99:5e:
6c:32:24:33:6f:07:ac:c0:70:38:38:a5:34:de:56:
9c:c8:1d:a9:e2:b7:13:f1:64:d7:46:11:8a:4e:7b:
af:00:2b:27:b3:26:e5:fe:0a:e1:45:81:a2:08:37:
a2:7f:45:9c:0d:16:4c:72:12:93:83:ae:d1:97:0f:
08:45:b7:5b:58:a0:67:2d:37:c6:dc:d0:9e:08:f9:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:71:B8:CE:D5:76:44:B0:90:86:46:0B:C9:31:86:D6:B2:58:1A:F9
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b9:3d:1f:63:b6:bd:b8:36:96:fb:68:08:70:1f:52:81:6d:
e8:d5:9e:d6:36:fa:da:bb:dd:48:9e:a0:b9:ac:6c:dd:57:59:
09:a6:e2:51:3d:d9:0d:a6:7d:ad:09:dd:bc:42:77:3b:54:f4:
2a:8b:15:72:7e:2b:d5:be:a6:8b:50:f5:5c:21:11:be:5a:dd:
41:87:da:21:b4:a4:66:5b:cb:a3:de:b1:7c:67:71:2e:fc:f3:
7c:9e:43:6f:1e:f0:f3:d6:18:b2:63:6d:7b:30:82:6f:fc:df:
26:e7:e6:9b:d1:ea:6f:a8:4e:bd:40:b0:48:7e:eb:25:3e:c9:
f7:67:96:88:0e:c6:01:f9:07:c8:1e:a5:f3:26:cc:6c:66:66:
fb:c0:a1:4c:d3:73:a8:be:c4:2c:fc:ba:47:00:fb:c1:7d:d0:
14:9b:41:90:ea:f3:fd:2a:46:fa:cb:17:37:0a:04:38:19:74:
70:24:97:0b:17:ac:b2:45:23:69:12:b2:80:b5:b5:8c:2e:de:
78:ce:0f:7f:26:a2:1e:9c:61:5e:f2:d3:5d:dc:bd:e0:07:a8:
86:68:aa:dc:91:b0:01:dd:1c:2c:3f:04:20:e7:81:88:eb:7b:
ab:25:1c:a2:e9:98:de:d3:1c:6d:24:8d:00:da:c2:f8:a2:d1:
19:7a:f5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:06 2026 by rpki-client