Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier: bIfFh2X0SrxOOsHZKcoLqgkKODHtlgadX/0RgIXfojM=
Subject key identifier: E3:46:8B:53:C8:C7:87:DE:32:1C:1A:67:58:C1:EA:47:2B:F7:9C:2E
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 01A0D19215E2F266BB2B139B63975C4C9A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number: 08C2
Signing time: Thu 24 Sep 2026 04:00:06 +0000
Manifest this update: Thu 24 Sep 2026 04:00:06 +0000
Manifest next update: Fri 25 Sep 2026 04:00:06 +0000
Files and hashes: 1: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: 3Z/b55Q0PHvDOORQy2gQZw3Ix+VIa76iUeZqea/dpYE=)
2: xCvlhfxkNPRBBz_i6VM9U4-t0BA.roa (hash: I2ugWtRwTmXPZXRdn73fmU0ZbGjpZ9U3l1aWJKFa53A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:15:e2:f2:66:bb:2b:13:9b:63:97:5c:4c:9a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: Sep 24 04:00:06 2026 GMT
Not After : Sep 25 04:00:06 2026 GMT
Subject: CN=e3468b53c8c787de321c1a6758c1ea472bf79c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:a3:74:e9:12:d1:86:53:7a:8c:fa:00:27:
a0:ae:82:f5:df:f0:76:37:3d:62:a2:8b:bf:96:34:
3c:14:45:64:f9:9a:f5:b6:d1:2c:bd:69:d8:49:7f:
e9:a4:78:57:4d:10:4c:04:57:a6:d4:01:48:b0:26:
78:78:8d:38:15:b3:94:86:0f:74:c7:37:ab:73:7d:
8d:39:75:c3:1c:1e:cc:e8:09:03:71:ff:52:60:6e:
16:23:20:38:fd:15:df:57:a8:47:b3:63:aa:78:c0:
22:1d:a7:e0:9f:69:a8:8d:1f:6c:66:97:15:4c:f4:
59:03:2b:db:df:32:49:45:fd:51:f9:db:32:8d:24:
1d:c3:27:e4:32:d5:83:d6:2e:ec:08:2b:bb:c8:b3:
7b:01:de:d7:ff:89:7a:43:29:a8:4f:29:18:58:bb:
ca:2b:4c:02:69:17:45:31:6a:1e:f8:a9:b6:6b:14:
d4:33:63:fa:21:40:0f:99:1f:60:1d:df:69:c7:ad:
b5:46:3b:d7:74:41:06:89:66:95:10:5a:6c:f1:c7:
32:d1:7f:43:de:bb:46:d3:1c:83:4d:f9:85:d4:af:
7a:5d:85:f6:7e:c9:95:fe:f2:3d:83:68:55:81:ce:
86:43:6d:71:19:13:49:c6:9b:fe:e3:7b:b6:93:f9:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:46:8B:53:C8:C7:87:DE:32:1C:1A:67:58:C1:EA:47:2B:F7:9C:2E
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c4:9b:48:0f:40:3a:84:1c:a0:ea:37:72:23:82:0a:30:86:
88:03:4c:47:71:ae:0b:48:a0:85:42:7d:e6:24:3d:97:8c:d7:
9a:c3:ee:63:b7:a1:cb:58:91:da:2b:1d:d1:2c:34:5b:b4:6d:
43:3a:8e:44:3a:6d:84:42:09:cd:c9:5e:13:6e:04:5d:1e:be:
11:8a:03:f0:92:6c:54:f8:5e:8f:86:06:80:1b:f0:29:5a:69:
c4:f5:64:09:8b:8c:4c:3b:8d:b2:dc:ae:9c:d8:77:69:f3:a5:
ce:e8:41:de:6d:a0:0b:37:05:61:1e:1f:ea:6c:14:b2:be:aa:
d7:6d:49:6a:4b:7e:5d:71:6c:90:45:ee:a5:a6:01:1f:54:89:
56:c4:64:9d:bf:36:7c:14:bd:e4:f6:5f:36:36:3c:1a:35:98:
2a:20:e4:9d:f3:49:eb:84:04:f3:a2:b8:41:3c:67:21:92:1c:
0b:0f:27:fc:1e:73:d3:1f:b8:10:33:98:e6:75:5b:05:64:d0:
84:35:69:c3:89:c5:d5:b4:bb:8b:96:ce:fc:ff:3a:a7:ca:d4:
34:75:e7:73:ed:d3:de:0a:e2:17:0f:a7:b0:18:b1:82:1a:00:
3b:26:af:dc:1e:52:5f:76:1d:7b:5c:a4:fb:99:0b:49:94:e6:
8b:69:85:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkhXi8ma7KxObY5dcTJoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTE5NDA3ZWRhNmRiMDg2M2NkYzlmMTg1NzM0ODJkNmFk
MTIwOTgwHhcNMjYwOTI0MDQwMDA2WhcNMjYwOTI1MDQwMDA2WjAzMTEwLwYDVQQD
EyhlMzQ2OGI1M2M4Yzc4N2RlMzIxYzFhNjc1OGMxZWE0NzJiZjc5YzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDqjdOkS0YZTeoz6ACegroL13/B2
Nz1ioou/ljQ8FEVk+Zr1ttEsvWnYSX/ppHhXTRBMBFem1AFIsCZ4eI04FbOUhg90
xzerc32NOXXDHB7M6AkDcf9SYG4WIyA4/RXfV6hHs2OqeMAiHafgn2mojR9sZpcV
TPRZAyvb3zJJRf1R+dsyjSQdwyfkMtWD1i7sCCu7yLN7Ad7X/4l6QymoTykYWLvK
K0wCaRdFMWoe+Km2axTUM2P6IUAPmR9gHd9px621RjvXdEEGiWaVEFps8ccy0X9D
3rtG0xyDTfmF1K96XYX2fsmV/vI9g2hVgc6GQ21xGRNJxpv+43u2k/kKMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONGi1PIx4feMhwaZ1jB6kcr95wuMB8GA1UdIwQY
MBaAFPOhlAftptsIY83J8YVzSC1q0SCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgt
ZmFjOTA0YTRhYWI1LzEvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgtZmFjOTA0YTRhYWI1
LzEvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsSbSA9A
OoQcoOo3ciOCCjCGiANMR3GuC0ighUJ95iQ9l4zXmsPuY7ehy1iR2isd0Sw0W7Rt
QzqORDpthEIJzcleE24EXR6+EYoD8JJsVPhej4YGgBvwKVppxPVkCYuMTDuNstyu
nNh3afOlzuhB3m2gCzcFYR4f6mwUsr6q121Jakt+XXFskEXupaYBH1SJVsRknb82
fBS95PZfNjY8GjWYKiDknfNJ64QE86K4QTxnIZIcCw8n/B5z0x+4EDOY5nVbBWTQ
hDVpw4nF1bS7i5bO/P86p8rUNHXnc+3T3griFw+nsBixghoAOyav3B5SX3Yde1yk
+5kLSZTmi2mFPg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:34:02 2026 by rpki-client