Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: tSz0/jWttRvRP7rr6zPXrkEMWZopDx4RSXFa0LN5jEM=
Subject key identifier: F2:26:9D:AA:BB:0C:41:CB:34:09:9C:66:A7:E2:70:D5:8D:B5:CD:AF
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 019D2960D0DC10B9729878A3566A4E3F54B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:01:43 +0000
Manifest this update: Thu 26 Mar 2026 09:01:43 +0000
Manifest next update: Fri 27 Mar 2026 09:01:43 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: KmrQ3OdLz90gtWDT9x7OYGyOhnkiS76O0g5XHvACNUM=)
2: ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa (hash: NVX59SDqnzDr42Kpw57WUClf3jkUfdSkfds/tST6OaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d0:dc:10:b9:72:98:78:a3:56:6a:4e:3f:54:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Mar 26 09:01:43 2026 GMT
Not After : Mar 27 09:01:43 2026 GMT
Subject: CN=f2269daabb0c41cb34099c66a7e270d58db5cdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:58:2d:9a:58:82:d3:b8:de:a9:1a:7a:93:
06:39:fe:ba:23:4b:b0:17:ef:b2:51:de:f9:60:f4:
b9:c3:03:6c:6b:73:fa:18:1f:c0:d1:25:81:bc:e6:
46:ad:a0:a7:83:59:b2:d2:05:2b:2b:2b:a3:7c:36:
6f:a2:32:63:5c:9b:7f:b4:1a:d1:ca:f6:8c:9f:b9:
e0:5c:4c:77:ae:2f:1c:e3:cd:bd:a9:3f:c7:fe:8b:
2a:4b:ee:d2:a3:a7:ea:03:a5:1f:32:a4:c2:3f:29:
d3:58:d3:fa:e4:bb:51:50:5f:a2:8d:85:c2:27:1c:
4c:e8:32:0c:a3:e2:2e:36:31:08:00:48:41:0e:85:
88:bb:ae:94:a9:48:68:51:c9:f7:1a:ef:6d:b3:51:
ed:4c:55:5b:52:5f:98:39:f4:32:c6:48:81:7d:31:
05:13:e2:d9:a1:78:e6:31:f2:26:57:12:f2:ba:7c:
82:8c:00:91:fa:97:63:33:5f:82:e7:9c:9e:cc:ff:
73:f0:9c:1c:23:dd:11:81:81:78:a9:ec:2f:e0:13:
9e:27:dc:53:3b:63:12:4f:0d:a6:5b:30:0e:fb:46:
c3:55:7c:05:63:00:7b:76:1b:3f:70:e7:84:93:fd:
a4:9d:69:27:ea:e8:d2:24:23:5f:b0:4f:4d:7d:c3:
fa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:26:9D:AA:BB:0C:41:CB:34:09:9C:66:A7:E2:70:D5:8D:B5:CD:AF
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7c:7d:5d:5b:cc:63:a8:b9:d2:d6:fc:2a:13:f0:ef:6f:9d:
7a:99:30:30:db:66:94:02:47:50:de:27:6a:76:c6:22:54:6f:
f8:7f:6f:2b:02:e4:a5:08:7a:be:a9:0b:fd:34:eb:6d:bb:42:
91:fa:a5:22:08:db:e8:af:5c:4c:67:81:07:f5:70:b3:01:50:
03:74:e9:26:91:de:9c:26:82:59:89:9d:fb:37:6f:12:81:08:
be:2b:2c:a6:e1:8b:bc:79:bf:c4:2b:7e:82:28:f1:3b:cd:5e:
66:5a:31:77:87:e7:d0:1f:7f:3d:a4:3e:ae:e7:b8:7d:17:5c:
46:d9:f3:ad:1d:6e:b9:d1:70:6b:4b:68:2f:00:23:3a:09:ef:
3f:3d:27:5b:83:cb:4b:6f:20:0f:2a:b0:fd:d8:d4:f0:e5:e8:
21:67:a5:07:15:0a:2e:8d:f3:37:3c:aa:e8:92:3f:39:4b:b4:
c0:18:ad:62:3e:70:95:bb:8f:a8:29:3f:d6:a7:b8:6c:c7:5d:
d6:c2:10:d7:c1:3f:4f:6f:dc:be:16:27:82:36:56:95:71:72:
04:71:07:85:f2:05:54:a2:73:65:96:39:45:f0:52:dd:de:e8:
ac:39:a5:9b:23:ac:53:4e:d9:e1:8a:8e:92:63:4e:0b:75:05:
fe:07:fb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:19 2026 by rpki-client