Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.mft
File: 86zxkUf-JM5v_lHqiFCoBq-uDsE.mft (raw, json)
Hash identifier: ZHXzC9a88zQy4WQ+8Uh/gT66BjjbXzXqXJFt9esw4iM=
Subject key identifier: 5F:57:9E:59:E2:06:5F:24:94:84:B0:EB:11:12:08:00:67:52:8D:3E
Authority key identifier: F3:AC:F1:91:47:FE:24:CE:6F:FE:51:EA:88:50:A8:06:AF:AE:0E:C1
Certificate issuer: /CN=f3acf19147fe24ce6ffe51ea8850a806afae0ec1
Certificate serial: 019F8EA292583B79A7BD167A960169189134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zxkUf-JM5v_lHqiFCoBq-uDsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.mft
Manifest number: 3E
Signing time: Thu 23 Jul 2026 11:00:46 +0000
Manifest this update: Thu 23 Jul 2026 11:00:46 +0000
Manifest next update: Fri 24 Jul 2026 11:00:46 +0000
Files and hashes: 1: 86zxkUf-JM5v_lHqiFCoBq-uDsE.crl (hash: 53k2FEFYeSaAKTdzQH8jxM9gLIPVf06lN3qLonPdlhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zxkUf-JM5v_lHqiFCoBq-uDsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:92:58:3b:79:a7:bd:16:7a:96:01:69:18:91:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3acf19147fe24ce6ffe51ea8850a806afae0ec1
Validity
Not Before: Jul 23 11:00:46 2026 GMT
Not After : Jul 24 11:00:46 2026 GMT
Subject: CN=5f579e59e2065f249484b0eb1112080067528d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:45:64:ce:b7:a5:ad:fb:b5:84:5b:ee:80:
de:e3:d4:9f:c5:9f:4f:98:de:07:4e:a6:f6:79:40:
8b:77:49:21:1c:f3:85:ea:4c:30:99:ac:da:6e:a1:
24:80:10:08:fa:27:93:42:d9:8d:d6:0c:84:d1:4d:
1d:ea:a1:1f:30:c3:a8:bb:34:3b:c5:0d:da:9a:37:
ef:62:91:20:90:6b:23:c6:3c:86:c5:09:07:88:5a:
a6:38:f3:6c:5a:73:94:4d:ae:1f:7a:80:61:54:45:
50:72:3c:4d:e6:fe:f7:6a:4c:cc:24:74:91:7c:71:
de:d4:a7:f0:e6:6b:91:80:ed:ae:82:75:4b:6a:ec:
da:a2:68:b0:70:4a:d1:aa:fb:53:48:5c:c3:d4:8c:
e7:d8:47:c5:bd:27:7f:50:39:63:b2:9c:8d:79:69:
52:ca:79:48:e1:23:d8:fa:c0:f0:a5:0e:29:b3:d5:
43:b7:64:7b:fd:f3:d1:f1:bb:e0:4b:d4:50:b1:c8:
b3:f8:ba:06:66:27:ba:19:6e:82:79:f3:78:c4:cf:
7d:8d:ff:83:aa:22:46:76:f3:a4:d5:32:6f:08:c7:
35:b2:33:2a:f5:90:7c:74:c7:2b:67:0d:e4:80:40:
c8:6d:9b:4a:1e:2d:af:de:7f:cd:db:e3:84:a9:e4:
a4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:57:9E:59:E2:06:5F:24:94:84:B0:EB:11:12:08:00:67:52:8D:3E
X509v3 Authority Key Identifier:
keyid:F3:AC:F1:91:47:FE:24:CE:6F:FE:51:EA:88:50:A8:06:AF:AE:0E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zxkUf-JM5v_lHqiFCoBq-uDsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:21:c1:52:2b:26:c4:7f:49:52:64:6e:8a:56:43:17:1c:1d:
88:e7:14:4d:2d:0f:a6:70:d8:18:cd:4c:77:ac:54:bd:b3:de:
f4:d4:ee:df:c4:60:58:0e:1e:1f:cf:84:4a:a3:0c:6a:6a:db:
74:b3:c0:cf:3e:71:74:2e:d7:6f:7d:d5:86:48:23:d8:6d:c4:
7e:30:13:72:e3:10:ee:24:89:03:7b:78:a6:5c:07:7d:f5:d3:
c7:fa:d4:3d:6c:a8:40:13:3b:f1:37:ff:51:0a:8d:7f:ab:de:
81:e4:00:3d:1c:b2:40:84:89:00:2f:16:3d:2b:22:8e:10:6f:
d9:33:d1:52:01:fd:61:58:c5:09:78:3d:54:d6:b2:99:77:c1:
fc:8b:1b:02:3a:a7:35:ca:1d:b4:c6:f1:dd:3a:ba:4e:fd:75:
12:3a:27:54:79:b7:39:8f:29:df:cc:fb:3e:99:05:c8:8b:22:
4c:6a:d6:1b:85:ba:75:f5:f3:b6:1f:e5:2c:ba:8c:67:f0:c1:
98:71:13:aa:4f:9b:af:2e:bf:3a:fc:5c:8c:22:62:a9:11:a5:
19:b9:b6:a1:9f:66:6f:74:77:38:cb:b8:fc:d1:21:d5:4e:97:
76:cd:66:f7:20:96:08:cc:2e:fc:c1:07:90:2e:7c:7e:0e:a0:
2d:bb:54:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:39 2026 by rpki-client