Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier: AFyeLyEoaEVdg1t/oiDnASbfwNZgryuv3f2AH1vD+Vo=
Subject key identifier: E2:E2:22:0D:CA:BC:89:D2:3A:12:C8:5C:E5:70:F3:10:FD:0D:2A:01
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 01A0D56FA48FDC10DFB5778050D3FBBCFD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number: 08C4
Signing time: Thu 24 Sep 2026 22:00:58 +0000
Manifest this update: Thu 24 Sep 2026 22:00:58 +0000
Manifest next update: Fri 25 Sep 2026 22:00:58 +0000
Files and hashes: 1: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: UAuUgL5fCiuseXOl9PRVpEkSFxwxNu0k5WKi/t3bRyY=)
2: xCvlhfxkNPRBBz_i6VM9U4-t0BA.roa (hash: I2ugWtRwTmXPZXRdn73fmU0ZbGjpZ9U3l1aWJKFa53A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:a4:8f:dc:10:df:b5:77:80:50:d3:fb:bc:fd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: Sep 24 22:00:58 2026 GMT
Not After : Sep 25 22:00:58 2026 GMT
Subject: CN=e2e2220dcabc89d23a12c85ce570f310fd0d2a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:24:7d:a0:37:38:49:d1:74:37:79:f7:da:
b3:6e:e8:27:cc:06:b5:81:81:e0:27:a8:0e:8b:ca:
e1:50:95:a3:60:59:8b:b2:05:45:5e:2e:53:64:30:
dd:7a:31:27:e8:be:1c:8a:30:98:68:93:79:78:81:
51:83:b0:b5:eb:86:11:16:4c:ad:86:9d:46:dc:69:
44:9c:39:d4:ca:16:5c:ea:6d:82:0a:31:aa:b5:b7:
54:e9:e9:e2:30:fd:53:4a:f8:84:17:18:83:00:2d:
c1:c3:77:da:4d:3c:1a:01:9b:53:87:b1:e9:bd:c0:
fa:ec:92:a0:32:a8:bc:72:7c:95:88:48:d6:c3:63:
2f:fd:ba:a0:39:c2:cc:4e:46:c6:ab:0a:70:ff:07:
97:42:46:97:5d:93:10:a1:a2:b1:23:30:a3:b2:78:
b3:f2:d6:0c:a3:57:cf:1f:0a:c9:cc:62:68:4f:21:
fb:ed:ec:f5:21:46:a2:c0:36:2f:e6:1a:2e:b7:e8:
21:69:60:5e:92:a9:8e:5e:3f:42:5e:87:9e:d4:aa:
ea:ff:17:5e:e5:08:16:ec:07:af:d9:51:9b:5b:e7:
f0:56:c1:8a:9e:0e:6f:4c:32:cd:01:8d:ad:be:9e:
06:85:14:a9:d3:e2:8d:3e:fb:98:76:92:4d:af:d6:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E2:22:0D:CA:BC:89:D2:3A:12:C8:5C:E5:70:F3:10:FD:0D:2A:01
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cc:bd:4c:97:f5:b8:e2:b9:25:bf:02:7b:f4:12:97:01:82:
f8:54:93:89:8d:4c:4e:83:1c:5b:84:bb:13:e6:81:c6:96:b5:
c1:55:25:5d:ff:a7:d7:5f:31:c4:11:68:63:72:b8:9c:33:13:
e7:b5:ea:39:e1:a2:0c:3b:79:5c:53:39:2a:b0:72:3f:cf:8c:
f7:10:22:25:ae:f0:35:72:af:18:b8:e6:e1:75:cd:06:1c:ef:
69:21:9c:92:53:14:2a:6d:25:86:e0:4d:ab:f1:af:29:36:09:
62:c1:76:81:d5:dc:2d:c4:e8:74:72:c4:39:3c:88:55:3a:3e:
71:1a:78:96:da:11:2c:25:c0:59:28:99:b6:f9:b7:9f:04:7b:
99:f3:59:cc:81:4c:8f:34:69:89:9f:08:38:12:f4:4c:d0:1a:
04:bd:10:2a:5b:86:3b:bd:6a:a0:64:c2:e9:7f:ff:f5:2a:17:
3f:4e:c4:5b:a3:83:e1:f6:f6:c7:7a:e6:4f:2a:7f:2c:7b:31:
e2:87:e7:6b:c3:a5:e5:81:3f:ad:d8:c5:2d:a1:4e:24:a8:d8:
14:c4:57:a5:0c:a4:15:3a:d6:c7:ef:a6:04:fe:f5:a3:ea:1e:
8b:96:1d:5d:c3:3f:ae:c7:c0:b3:f3:2d:78:0b:97:84:51:08:
01:47:32:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:47:44 2026 by rpki-client