Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: yOxW01S1KoAN5EorNSiaOD5Jv+NraTWzgDrF+4VB5jA=
Subject key identifier: BA:42:5D:26:A9:97:68:10:7E:DE:EF:F6:28:25:F5:9B:41:8C:DA:31
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 01A1DE702CB924A9B60D851FC4F6684EC660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 09:00:55 +0000
Manifest this update: Sun 15 Nov 2026 09:00:55 +0000
Manifest next update: Mon 16 Nov 2026 09:00:55 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: QC+cjURruvaF2mhGjTJT/kmaZ/kvzp4gdS9H0asJ/OE=)
2: ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa (hash: NVX59SDqnzDr42Kpw57WUClf3jkUfdSkfds/tST6OaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:2c:b9:24:a9:b6:0d:85:1f:c4:f6:68:4e:c6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Nov 15 09:00:55 2026 GMT
Not After : Nov 16 09:00:55 2026 GMT
Subject: CN=ba425d26a99768107edeeff62825f59b418cda31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:86:db:74:4d:62:15:e1:84:2e:61:1c:a6:
9c:7f:73:e8:93:b8:d0:fa:e7:13:cd:4d:f0:b6:60:
a5:d3:b5:db:e2:59:e8:d0:e6:9e:93:19:14:93:49:
72:5c:1d:91:f9:78:ac:19:e1:83:68:83:29:ab:e3:
f0:34:9a:85:c8:bf:e8:ca:64:80:5d:b7:22:d9:06:
fd:1d:31:9a:10:be:c4:dc:1f:5b:a5:08:56:57:d6:
0f:73:26:d8:18:3f:b4:12:fa:37:d7:71:e1:89:8b:
81:1d:df:09:f1:fc:4a:5a:fc:b9:76:59:f7:f3:53:
cc:10:d0:93:cf:aa:cb:87:c4:cd:59:c5:bd:82:36:
8f:1b:45:6b:c5:b7:a3:76:19:54:56:51:cb:12:00:
5f:61:c0:03:e6:23:a7:ec:52:ba:89:a8:49:ee:74:
6b:df:52:24:6a:74:74:91:df:10:b1:51:29:a3:12:
39:6d:87:d6:64:b0:d5:bc:24:25:d1:19:bd:15:66:
5e:e0:11:c1:38:9f:27:ee:24:8b:02:51:f2:d0:f8:
ee:08:7c:7f:e8:44:13:4d:77:7a:57:65:37:54:30:
ea:51:93:8b:ea:e6:20:3b:ca:a8:54:d0:02:a1:8f:
d3:7e:2c:8f:ed:76:5b:b8:bb:69:5d:67:7f:93:47:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:42:5D:26:A9:97:68:10:7E:DE:EF:F6:28:25:F5:9B:41:8C:DA:31
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d4:3f:b9:65:b9:08:11:ee:f3:c5:01:8a:6e:c6:dd:5a:74:
c8:bf:6d:07:8d:19:fa:70:3b:a1:73:6c:27:56:a5:91:ca:59:
fa:98:6a:38:15:df:cb:88:a9:93:a4:67:ce:41:84:3c:64:71:
ea:33:16:9f:00:15:89:14:f8:fe:3e:4b:80:c0:5a:65:69:20:
9f:66:05:00:1b:eb:cb:de:4f:d1:5a:cb:99:a4:6d:d4:cf:86:
8d:44:78:52:9b:07:7a:34:25:bb:94:96:5d:0d:b5:3c:fd:44:
02:c6:76:0d:4f:84:42:c1:8a:c8:86:32:ce:e2:15:27:95:9d:
a3:f7:47:3a:f3:6b:84:52:1e:78:b6:38:00:ad:96:35:1c:07:
0c:bb:33:c0:4c:1c:6e:3e:db:40:63:16:17:61:a6:4e:eb:a3:
2f:24:38:79:ca:bc:6e:c9:60:91:3d:d8:08:c1:44:7b:1f:85:
c1:1d:44:7f:70:2a:7c:58:5f:55:f6:a3:2b:03:bc:9d:42:ca:
a8:89:2c:9f:2d:ec:32:c8:ee:ef:63:bf:62:05:35:1c:5a:9e:
7d:a9:8f:cc:3c:82:7d:5d:a9:9c:ef:a1:f2:54:f5:56:bc:1e:
21:bf:05:38:45:22:0a:a4:1f:89:6c:d4:08:50:be:4d:14:12:
35:26:b6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:40 2026 by rpki-client