Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: KqTW3zV8pfP04beTRgJv2gXskim9E3R2tAubne023Gg=
Subject key identifier: 40:A5:F4:B5:50:09:E4:F3:A0:A7:1B:78:9B:3A:E7:12:E0:3D:C2:6A
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 01A0CC3601193BF766F6AC39E09EA8975929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 03:01:26 +0000
Manifest this update: Wed 23 Sep 2026 03:01:26 +0000
Manifest next update: Thu 24 Sep 2026 03:01:26 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: HzGPmmRirf3jdktKYV9BR8A7jiDss/KMXAF43owsiX0=)
2: ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa (hash: NVX59SDqnzDr42Kpw57WUClf3jkUfdSkfds/tST6OaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:01:19:3b:f7:66:f6:ac:39:e0:9e:a8:97:59:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Sep 23 03:01:26 2026 GMT
Not After : Sep 24 03:01:26 2026 GMT
Subject: CN=40a5f4b55009e4f3a0a71b789b3ae712e03dc26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:29:cd:c1:9f:cf:fb:6e:f1:69:61:a1:54:
c0:e8:d1:0a:b8:94:2f:68:0c:64:f9:38:f0:e1:31:
77:fd:7c:f4:12:08:bb:8d:be:e7:9e:f7:39:26:6c:
1c:70:5a:93:49:81:61:27:cb:d9:1f:df:3b:84:f9:
b4:7c:59:54:cc:67:03:00:ef:2f:85:74:f0:f1:57:
0d:00:69:ea:66:2b:1d:01:77:55:b0:60:25:8e:06:
55:10:ca:e6:14:75:9e:f1:eb:a6:7c:88:ec:00:37:
27:44:94:9b:1e:c5:3b:19:06:e5:90:9f:8b:af:e7:
70:0f:18:3f:02:ee:cf:18:ea:42:db:9d:83:2e:31:
87:0a:79:8e:0c:62:39:93:a5:8e:2e:82:0d:1e:cc:
81:c1:0d:62:c4:e3:a9:4c:79:b2:2d:28:72:84:79:
b8:ad:17:48:00:67:f2:1a:e4:0d:17:3b:a9:0a:f7:
fa:cd:14:55:96:c6:8f:c7:db:19:fe:4d:44:52:8e:
e8:1a:75:20:58:c9:7b:8d:f7:82:83:a1:a8:32:91:
4e:89:50:ad:30:d3:eb:8c:19:6f:8b:a4:9e:89:a6:
b6:a0:65:d6:45:52:07:c3:a7:3c:74:e8:b2:4d:a6:
2d:9f:77:a0:42:dd:55:75:d4:4b:1f:da:b4:64:26:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A5:F4:B5:50:09:E4:F3:A0:A7:1B:78:9B:3A:E7:12:E0:3D:C2:6A
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:36:ab:bc:5e:80:68:74:6c:da:5c:a1:de:64:3a:d1:6f:9c:
dc:53:62:70:0a:37:e9:2a:ec:59:bb:13:97:64:53:8e:bc:19:
0f:94:ae:8b:80:91:2e:a0:52:f0:ae:63:85:c9:68:ff:ea:dc:
5a:0a:fa:32:08:d7:a1:9f:81:26:dc:9b:12:df:1c:b6:0e:eb:
9a:d2:ab:8d:45:2b:4f:3d:6c:12:a9:93:06:f3:5b:18:a4:e8:
84:ae:31:e6:13:15:ad:ff:15:c0:b1:12:c6:e8:b3:0c:b4:b8:
1e:f5:64:47:de:3c:ae:e8:17:40:44:d4:4a:c2:9a:5a:96:a6:
45:a7:0b:4a:a0:82:d2:ca:88:cd:fe:dc:9f:27:53:94:4d:9e:
c4:60:0c:d3:ae:1c:36:ac:bd:d4:e5:98:79:40:a8:59:c2:e3:
10:97:a0:e7:0b:a5:a3:71:2e:fd:df:7f:20:ec:96:8a:1b:47:
76:df:09:fa:39:31:58:ab:72:4a:82:fb:b1:8f:ee:b1:a8:8f:
7b:50:81:b0:7f:01:fe:6d:39:59:04:75:f8:fb:30:03:11:69:
9f:36:a0:67:30:c9:d6:2d:09:1b:dc:f3:1b:c7:c0:37:24:e2:
53:48:c2:50:c2:65:8a:c4:d1:a3:6a:78:87:70:24:d4:2a:f0:
4f:47:e5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:29:17 2026 by rpki-client