Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier: f/Qwux7oByHksDu1BsKq0FJqOG/hyZ/m9GbdLAlUaMI=
Subject key identifier: 68:E6:73:86:2A:B6:85:ED:FC:6E:47:FE:DE:4F:FE:D7:FD:07:C0:3E
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 019F90FE93D68687B3E4FE6DA737043A7D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number: 081C
Signing time: Thu 23 Jul 2026 22:00:30 +0000
Manifest this update: Thu 23 Jul 2026 22:00:30 +0000
Manifest next update: Fri 24 Jul 2026 22:00:30 +0000
Files and hashes: 1: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: S6QKptuyxS95drvO7HTUr+wFaz5KO71c3hP7l67Xa8k=)
2: xCvlhfxkNPRBBz_i6VM9U4-t0BA.roa (hash: I2ugWtRwTmXPZXRdn73fmU0ZbGjpZ9U3l1aWJKFa53A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:93:d6:86:87:b3:e4:fe:6d:a7:37:04:3a:7d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: Jul 23 22:00:30 2026 GMT
Not After : Jul 24 22:00:30 2026 GMT
Subject: CN=68e673862ab685edfc6e47fede4ffed7fd07c03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:aa:b5:50:43:da:dc:42:22:5e:ca:02:4f:
b2:a3:07:d7:28:81:a7:bd:8e:84:78:f0:5a:65:3f:
6f:14:a5:f0:7f:05:22:c3:5d:ee:07:26:58:87:1e:
ed:53:79:34:2c:e8:34:01:d9:7a:55:88:e0:65:48:
8d:de:d7:1d:74:2a:c0:d1:36:65:da:16:d2:2d:4d:
10:51:b4:be:d7:47:f6:67:41:e0:e2:ee:11:35:17:
c2:40:3b:a7:32:51:f3:fc:f3:d4:6e:b4:cf:3c:be:
0a:ee:f2:14:37:b1:15:e1:01:56:0f:e4:90:74:a1:
f2:da:e8:f6:6d:03:f9:ef:2e:35:ac:a0:52:d8:56:
a2:60:eb:b6:b3:ce:3a:5a:ca:3e:06:01:d2:5a:63:
1c:12:37:67:b9:da:4f:64:74:e7:d4:32:cb:c8:f8:
bd:89:57:6a:29:30:02:31:42:2d:2c:44:59:9f:4f:
94:b6:0d:43:c6:ab:49:08:a3:f0:a9:8a:12:c5:31:
00:9c:32:9f:cf:9d:51:86:6c:29:70:7e:3c:a3:02:
09:f6:bd:77:98:a1:5a:52:6b:fd:0e:fd:4e:38:54:
4d:fa:66:91:e4:d6:e7:ad:81:be:42:0b:bf:60:b2:
d7:9b:80:2f:1d:f3:d1:33:50:c8:de:ea:1f:06:7b:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:73:86:2A:B6:85:ED:FC:6E:47:FE:DE:4F:FE:D7:FD:07:C0:3E
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:24:5d:01:92:41:dc:62:10:32:18:2c:3a:05:b1:a6:5b:25:
66:1b:49:f2:dc:de:5c:d6:f4:c9:8d:05:80:a5:f5:5a:56:43:
c1:5d:33:f3:41:9e:78:64:8e:6a:26:81:92:d2:a6:92:90:96:
81:d2:95:bf:4e:7c:bf:5f:cd:6d:bc:45:31:a6:dc:56:e6:55:
2c:0a:3d:98:d3:63:94:56:54:5e:23:6b:59:90:0b:5c:5e:cd:
55:b6:ec:3c:7e:82:fe:12:8d:ed:a6:15:56:ed:fc:df:fe:48:
17:74:36:82:b1:62:73:45:25:ff:90:12:52:5e:c1:e6:48:f3:
dd:f4:d3:73:9a:cb:2a:27:6f:f2:e5:59:c5:ce:d2:19:c7:9a:
01:b1:7e:09:25:24:dc:98:15:d8:9f:5a:13:d5:80:a9:72:78:
80:69:16:52:f9:64:5a:57:d1:46:5b:10:f7:a5:c3:c6:c8:3c:
58:8d:1b:b0:2e:be:be:6c:db:31:eb:6d:0c:43:9c:c5:07:d1:
ac:74:27:17:90:fd:0c:e2:12:93:70:e3:4b:09:e8:5e:0c:bf:
a2:f5:f1:ca:f2:8c:e6:cf:8a:d5:56:53:06:52:8c:eb:6b:09:
67:f6:30:ab:af:5e:64:25:43:01:9d:9a:2a:33:31:22:78:c9:
21:e2:ca:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/pPWhoez5P5tpzcEOn2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTE5NDA3ZWRhNmRiMDg2M2NkYzlmMTg1NzM0ODJkNmFk
MTIwOTgwHhcNMjYwNzIzMjIwMDMwWhcNMjYwNzI0MjIwMDMwWjAzMTEwLwYDVQQD
Eyg2OGU2NzM4NjJhYjY4NWVkZmM2ZTQ3ZmVkZTRmZmVkN2ZkMDdjMDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7KqtVBD2txCIl7KAk+yowfXKIGn
vY6EePBaZT9vFKXwfwUiw13uByZYhx7tU3k0LOg0Adl6VYjgZUiN3tcddCrA0TZl
2hbSLU0QUbS+10f2Z0Hg4u4RNRfCQDunMlHz/PPUbrTPPL4K7vIUN7EV4QFWD+SQ
dKHy2uj2bQP57y41rKBS2FaiYOu2s846Wso+BgHSWmMcEjdnudpPZHTn1DLLyPi9
iVdqKTACMUItLERZn0+Utg1DxqtJCKPwqYoSxTEAnDKfz51RhmwpcH48owIJ9r13
mKFaUmv9Dv1OOFRN+maR5NbnrYG+Qgu/YLLXm4AvHfPRM1DI3uofBnvilwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjmc4YqtoXt/G5H/t5P/tf9B8A+MB8GA1UdIwQY
MBaAFPOhlAftptsIY83J8YVzSC1q0SCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgt
ZmFjOTA0YTRhYWI1LzEvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgtZmFjOTA0YTRhYWI1
LzEvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACRdAZJB
3GIQMhgsOgWxplslZhtJ8tzeXNb0yY0FgKX1WlZDwV0z80GeeGSOaiaBktKmkpCW
gdKVv058v1/NbbxFMabcVuZVLAo9mNNjlFZUXiNrWZALXF7NVbbsPH6C/hKN7aYV
Vu383/5IF3Q2grFic0Ul/5ASUl7B5kjz3fTTc5rLKidv8uVZxc7SGceaAbF+CSUk
3JgV2J9aE9WAqXJ4gGkWUvlkWlfRRlsQ96XDxsg8WI0bsC6+vmzbMettDEOcxQfR
rHQnF5D9DOISk3DjSwnoXgy/ovXxyvKM5s+K1VZTBlKM62sJZ/Ywq69eZCVDAZ2a
KjMxInjJIeLKWA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:34 2026 by rpki-client