Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: LPRJGHmYvEkg5txbiEziRmCL0eieflEFHTf+uQPReyc=
Subject key identifier: 85:2B:E1:59:26:3A:0A:B2:E2:AB:AD:F2:4C:A4:DE:75:29:18:90:27
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 019D28BB41FA808D557862F9532875BE5ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:53 +0000
Manifest this update: Thu 26 Mar 2026 06:00:53 +0000
Manifest next update: Fri 27 Mar 2026 06:00:53 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: jCL1C04quKQ3178qYV3qWYD+LBnQb+ttW1bxj4qiD1c=)
2: jG7UljAuuxYHX96gS0QyREMzdRQ.roa (hash: 19kVtm64m/XsZnVHfeflpspzTQFT7lMVc8YGmtMpmeY=)
3: sL_kO6glXhgKCKzZJakKCk1w7pw.roa (hash: QnUXfnVCoxqWyTYKHVanM+qXpxh9bvdVjRpLXx6NLxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:41:fa:80:8d:55:78:62:f9:53:28:75:be:5a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Mar 26 06:00:53 2026 GMT
Not After : Mar 27 06:00:53 2026 GMT
Subject: CN=852be159263a0ab2e2abadf24ca4de7529189027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:ba:9c:22:e1:11:a0:0e:ee:6a:b8:3e:00:
42:ce:ac:f8:c4:a8:0b:78:62:fa:19:d9:57:a3:28:
dd:93:ad:5b:15:d3:61:e1:6f:b7:25:5b:0b:01:4f:
b4:6d:91:2e:ca:53:16:7e:77:7d:94:97:b2:3b:66:
37:4c:40:0f:59:4d:f7:58:0f:2b:63:3f:ec:e2:71:
54:0a:ff:34:ed:2b:5b:4c:0b:dc:ba:84:53:ab:c8:
9b:52:eb:af:14:b5:ca:c9:81:ee:c5:d9:5b:cc:91:
ce:43:70:8a:27:f3:81:9f:3e:69:2b:7a:6f:4f:5e:
0b:26:10:30:5a:01:27:1e:1e:fe:30:a4:21:6e:ab:
c5:f8:ca:3f:ca:08:f7:6f:2e:dc:b4:78:fe:34:81:
8e:63:38:29:d9:3c:cb:8d:32:8e:85:a8:b6:98:aa:
0a:15:99:3e:a0:a0:f6:ed:d1:05:6e:84:d5:34:3e:
53:53:f2:0f:12:37:38:4d:bf:e4:b2:00:c9:93:6e:
0a:63:ae:a8:91:a7:97:77:64:ff:e1:d0:24:07:cf:
f0:e8:64:ef:9d:57:ee:44:3c:c2:3c:25:17:d0:8e:
39:a5:74:92:94:db:62:e5:bf:c1:f9:7a:5a:dd:8b:
fc:ad:d3:ae:5e:8d:4b:64:7d:55:ae:cd:19:c8:48:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2B:E1:59:26:3A:0A:B2:E2:AB:AD:F2:4C:A4:DE:75:29:18:90:27
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4f:d1:9f:3f:97:9e:79:23:ce:3f:8e:d8:ee:26:7d:30:3c:
1e:63:66:56:bf:36:2b:79:6e:ad:fa:ec:cb:b0:c8:0a:aa:69:
59:e6:d8:7d:2a:7c:4a:fb:0c:ad:81:cd:46:5b:36:c7:e0:56:
1e:67:71:b6:9e:6d:2e:2f:1a:99:f0:0d:8a:36:26:d8:11:d3:
4d:34:85:15:c1:72:7d:ca:75:b4:d1:79:08:2c:a2:94:48:1d:
32:3a:a5:7c:23:5d:a0:a3:25:29:1d:77:6a:7e:d2:be:f9:1e:
9a:27:50:43:9d:a3:13:28:14:a1:a3:07:db:74:35:20:85:62:
a5:11:c3:96:48:ee:0e:a6:6b:07:52:7b:10:7b:52:dd:b3:53:
42:41:86:b2:d2:5f:1c:fd:13:ad:ce:0c:5f:90:b2:5f:2c:56:
50:1b:37:b5:71:d0:fc:ac:e6:99:42:d2:5a:bd:a1:1f:75:6f:
ce:4a:9b:86:d2:ac:fa:20:ce:7b:21:f5:6d:ee:21:ce:43:ce:
02:21:25:42:0c:54:00:34:e0:5d:69:9b:db:88:ad:ef:6b:bb:
3f:cb:e1:50:71:7e:b5:26:15:1f:65:2f:a0:47:f1:e6:a9:5e:
23:ab:0a:95:fa:c3:67:2f:07:34:30:40:9a:61:1f:e0:6d:e0:
20:dd:ff:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:05:56 2026 by rpki-client