Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: 4Nv2gB7R6AwPPN5ccyNZjTAZRGVA49+eRwpW5J6hPXo=
Subject key identifier: 42:75:3B:3E:02:9D:89:C4:CC:64:E3:88:06:66:0F:3F:F1:5F:E1:8B
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 01A0DC4D8AF86F2E478A03DCBD664369A713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 06:01:04 +0000
Manifest this update: Sat 26 Sep 2026 06:01:04 +0000
Manifest next update: Sun 27 Sep 2026 06:01:04 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: vWeu4aEpBzeORCz+1fPnynltX2cZEGY9Im3FVgmoW2w=)
2: A1svWquksBLsw1tkAPvMH2GC1KE.asa (hash: 4sQBLnDGVPqeYFwcrtC8bPxXhKO1F6JM2AclKYKY30E=)
3: cdYFH7FndPkk9XFjLmZWMdC-X34.roa (hash: X+oP6qr3yuDKLXewVnLvgNrAI77qSCbRkzjQ0jlv6zQ=)
4: sL_kO6glXhgKCKzZJakKCk1w7pw.roa (hash: QnUXfnVCoxqWyTYKHVanM+qXpxh9bvdVjRpLXx6NLxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:8a:f8:6f:2e:47:8a:03:dc:bd:66:43:69:a7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Sep 26 06:01:04 2026 GMT
Not After : Sep 27 06:01:04 2026 GMT
Subject: CN=42753b3e029d89c4cc64e38806660f3ff15fe18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:03:ff:c9:cc:0e:20:cd:66:1e:56:e7:50:
2e:2d:c6:fe:8e:c7:6c:cd:99:ad:3c:18:71:b0:c9:
c2:54:03:67:3e:d1:92:51:d0:2d:8a:87:1d:aa:9a:
a2:15:92:f2:6b:69:53:e1:73:93:b9:07:41:8d:77:
30:c6:e4:c3:aa:3e:4a:03:7f:51:05:01:d4:ca:87:
cf:76:0e:b9:7b:4d:1d:8a:c4:4b:0d:94:da:0e:a2:
b7:e4:a2:0c:19:de:26:5d:24:fd:3f:3a:70:c6:eb:
ce:4c:fe:0d:f8:60:84:18:38:7b:2e:a9:28:c2:f2:
27:2b:c3:d3:4d:d9:ea:06:ae:b0:4e:88:a0:95:24:
a9:ef:66:c8:5c:0c:bf:36:26:4e:de:28:3c:05:71:
bb:d3:b7:f0:22:a6:64:2b:94:cc:96:58:86:5f:44:
49:46:de:32:ed:8c:77:a9:33:16:4b:ec:97:4b:aa:
f0:19:37:6c:c7:6a:40:48:6d:4b:f4:f1:94:7f:3a:
c7:ff:fb:ea:bd:6b:5c:59:6e:b2:47:76:55:8c:20:
e3:91:1a:12:0b:32:f6:be:46:c4:65:08:be:b5:8e:
db:b1:8f:b0:52:2e:58:1c:31:4e:82:8e:6e:08:be:
68:41:bf:f2:16:8c:c9:bc:68:68:a7:0a:73:73:10:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:75:3B:3E:02:9D:89:C4:CC:64:E3:88:06:66:0F:3F:F1:5F:E1:8B
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:25:a3:99:a1:d4:ef:5d:06:87:d7:93:b2:6a:2b:87:bf:9e:
75:a1:45:6e:25:fe:27:e9:ed:75:f8:af:ad:ad:ca:f3:3b:21:
40:f3:5a:2c:02:54:8f:9d:a2:ca:a5:f7:f4:c7:66:d7:d8:5f:
e4:d6:67:92:93:b1:46:a4:f6:e3:8a:a9:a4:d0:2c:83:1b:db:
f2:ec:05:59:8d:22:8f:d4:f3:f6:64:b1:76:39:0d:48:6a:de:
50:ee:37:9e:5b:65:1e:78:f5:8c:2a:9c:9b:9c:a4:bd:da:db:
2f:65:78:f2:45:3c:9c:9c:76:c1:b3:65:0b:e3:31:1c:29:6a:
4c:3f:99:95:81:2b:e4:16:fa:9a:51:e2:4f:f8:94:e3:cb:66:
20:e1:b6:8b:13:85:bf:2c:d3:44:2b:2d:5d:35:72:0c:1e:a2:
18:56:9a:bd:26:1f:de:2a:7f:bb:8b:60:ce:db:96:8d:3f:dd:
05:97:34:4f:13:0b:5e:b3:f5:fb:c5:15:38:7a:d0:e9:61:49:
11:bd:6c:11:83:e6:d0:d6:fb:2d:a0:9f:e2:33:be:2c:c2:2c:
8f:42:c4:4a:43:1f:3f:29:97:9e:44:03:0b:68:89:bb:4b:10:
43:9f:b8:6a:89:c5:9e:4c:82:eb:a3:d7:eb:f9:9f:eb:ed:82:
23:72:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:43:17 2026 by rpki-client