Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.mft
File: 86zxkUf-JM5v_lHqiFCoBq-uDsE.mft (raw, json)
Hash identifier: KTDrj+Hq5zGgBJq8QU0qw3JOe9xgwBRN++ZhJFqH0sI=
Subject key identifier: A8:17:27:12:72:36:D6:97:78:5D:BF:B9:B3:B5:0D:9A:8F:31:14:5B
Authority key identifier: F3:AC:F1:91:47:FE:24:CE:6F:FE:51:EA:88:50:A8:06:AF:AE:0E:C1
Certificate issuer: /CN=f3acf19147fe24ce6ffe51ea8850a806afae0ec1
Certificate serial: 01A1DD94BC2E8F4106814B199B936131533A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zxkUf-JM5v_lHqiFCoBq-uDsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.mft
Manifest number: 0170
Signing time: Sun 15 Nov 2026 05:01:14 +0000
Manifest this update: Sun 15 Nov 2026 05:01:14 +0000
Manifest next update: Mon 16 Nov 2026 05:01:14 +0000
Files and hashes: 1: 86zxkUf-JM5v_lHqiFCoBq-uDsE.crl (hash: /bkO4RLQZdjHDbxavRHYvpSXmsrkwFAT+Fas6MxMV2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zxkUf-JM5v_lHqiFCoBq-uDsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:bc:2e:8f:41:06:81:4b:19:9b:93:61:31:53:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3acf19147fe24ce6ffe51ea8850a806afae0ec1
Validity
Not Before: Nov 15 05:01:14 2026 GMT
Not After : Nov 16 05:01:14 2026 GMT
Subject: CN=a81727127236d697785dbfb9b3b50d9a8f31145b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0f:0c:f0:3a:d7:f2:b1:22:64:28:29:19:14:
dd:96:74:0d:b4:c0:01:d9:53:60:be:e2:08:d3:54:
c9:e0:85:df:d3:62:76:b5:c6:6e:47:1b:cd:50:1c:
b8:99:3d:86:09:b1:4f:aa:5a:2a:e7:c5:6c:43:30:
72:0f:b6:e5:3f:c2:7b:28:80:fa:35:1a:a1:62:14:
a0:85:4f:4a:6e:0a:04:ee:d1:be:63:c6:a6:f6:1d:
d7:f6:5e:3e:1d:cb:64:da:de:4d:bd:0b:54:65:e3:
ab:63:ae:b7:01:60:01:99:4a:fe:b5:1f:26:01:ed:
dc:36:4a:c3:93:2d:d3:34:be:9d:b0:72:7b:c9:d3:
49:d3:78:e7:8f:a6:89:c5:69:67:bd:c7:eb:18:02:
42:28:09:69:03:b7:98:fa:8d:b0:5b:92:c0:b3:32:
40:e3:55:1f:f1:2c:d2:ec:d6:06:ee:58:8b:7d:c7:
9a:5f:26:da:26:a9:b1:14:30:15:2e:83:c1:a8:7d:
0a:05:81:5a:45:32:9b:8e:df:99:0b:e5:39:a6:34:
2e:44:c6:2f:6f:f0:ae:05:00:8c:c4:0d:99:69:5b:
d6:32:a4:94:58:9d:75:e8:54:19:66:e6:8b:ef:b5:
b3:ff:ab:ce:f8:4c:2b:a1:ac:bd:ef:b1:ab:10:f3:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:17:27:12:72:36:D6:97:78:5D:BF:B9:B3:B5:0D:9A:8F:31:14:5B
X509v3 Authority Key Identifier:
keyid:F3:AC:F1:91:47:FE:24:CE:6F:FE:51:EA:88:50:A8:06:AF:AE:0E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zxkUf-JM5v_lHqiFCoBq-uDsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/86zxkUf-JM5v_lHqiFCoBq-uDsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c4:7b:b5:a8:e0:03:1d:08:09:d6:58:10:5b:58:09:e7:c1:
9d:c0:1b:b0:6e:db:77:2f:95:65:88:e9:a5:c3:61:43:17:65:
5b:aa:c8:5a:d7:dc:94:70:e4:9d:ff:32:39:c5:ba:55:88:4b:
11:7b:6c:5b:d5:e6:e7:28:ad:55:6e:50:63:8b:2d:bb:96:14:
4f:38:61:45:9c:dc:4b:ff:79:d8:d7:90:d4:9c:bd:eb:0f:eb:
69:10:c8:9e:14:17:13:6f:89:cc:7b:e4:90:60:9c:b8:b8:55:
57:80:a5:fe:21:6e:a6:b6:63:d8:ee:c1:39:24:d0:e2:55:1b:
a9:25:da:5d:e7:22:48:19:e5:c6:d9:db:1d:35:9c:c7:cb:80:
79:60:f5:d6:ad:7f:ee:73:ff:95:4c:d5:52:76:ff:62:47:62:
bc:44:86:3f:cf:d9:66:a0:36:eb:76:80:cf:83:0d:57:7c:d9:
dd:f9:b1:28:fc:77:18:a1:81:49:63:ca:5c:94:b8:4c:5a:bb:
d2:5a:e0:d9:5a:68:48:13:29:81:9b:f6:9f:fe:e1:76:c2:18:
bc:60:57:d3:30:7f:18:82:b2:88:5a:3f:db:19:b0:b2:0e:c7:
d4:6d:66:31:33:c5:ae:60:76:fd:01:d5:59:4e:10:18:11:f2:
d2:04:6f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:35:44 2026 by rpki-client