Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: tVYhxiNdzw5khPomQEu1MuxAOechazcqnfrTWIJPXPA=
Subject key identifier: 1F:E4:A6:5B:F7:B3:B7:18:EF:C1:5F:77:10:DE:9C:2C:33:08:D4:B8
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 019E1E6C830F0E4AD85650BD0D459EC5E294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 0649
Signing time: Tue 12 May 2026 23:01:28 +0000
Manifest this update: Tue 12 May 2026 23:01:28 +0000
Manifest next update: Wed 13 May 2026 23:01:28 +0000
Files and hashes: 1: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: sgAwa6aAfhdXVwbU5gCyoY8d0ypIrwtZ/tnzRhqI344=)
2: XuITUG_nXLtJk8wz6ifMhssSuak.roa (hash: 5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:83:0f:0e:4a:d8:56:50:bd:0d:45:9e:c5:e2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: May 12 23:01:28 2026 GMT
Not After : May 13 23:01:28 2026 GMT
Subject: CN=1fe4a65bf7b3b718efc15f7710de9c2c3308d4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fd:56:a6:01:8c:d8:6d:a9:38:7f:ec:2b:1f:
ed:7b:94:aa:b3:c3:2c:85:24:ac:61:db:98:33:8a:
3d:37:f2:48:2b:35:ef:fd:c4:fd:c0:48:ee:0b:d8:
6f:d4:0b:23:61:0d:1c:47:a4:80:bf:86:46:83:ac:
e7:98:dc:93:e6:b7:85:43:a2:17:a7:1c:7f:a7:76:
3e:68:e6:49:ef:35:3a:41:aa:d7:b6:b2:75:4d:25:
1a:a4:67:f6:0b:78:b0:8a:10:ec:ef:51:90:86:68:
59:57:1b:ae:91:03:a7:ea:31:b1:88:67:71:75:90:
73:64:25:63:22:ba:1e:1c:e7:b0:92:83:7f:9c:d4:
d4:e9:0e:58:9f:c3:cd:be:cb:64:1f:08:29:62:bd:
2a:42:d2:f9:2a:94:dd:29:f1:81:d7:37:17:ab:ca:
7d:f6:97:63:74:58:07:d7:7d:be:c8:c5:1f:ff:7a:
42:fd:e6:90:bd:e7:1c:3e:cb:dc:c8:33:7f:88:58:
24:f6:e6:32:79:9f:5e:a9:3f:43:5c:71:a3:f8:5e:
56:5f:58:1c:50:af:53:a6:c7:a4:e6:9e:5f:3b:1b:
66:8b:c8:93:4a:cf:79:a2:1c:2b:da:e6:9f:ad:36:
b2:49:e8:16:ed:40:f9:e0:56:b1:ba:98:c5:eb:ac:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E4:A6:5B:F7:B3:B7:18:EF:C1:5F:77:10:DE:9C:2C:33:08:D4:B8
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f2:63:bf:41:d9:b2:12:8c:fb:54:d1:7d:3f:ba:85:35:c6:
98:b5:45:c2:45:d5:30:51:6b:9e:4a:98:aa:8c:71:06:3f:32:
29:fd:f1:e6:8b:ae:06:33:3a:ac:3c:b6:51:cf:44:8d:e5:30:
c0:a2:75:02:07:5b:64:79:0b:e5:81:de:9a:b0:1f:60:10:fa:
72:a6:f7:40:aa:a2:26:5a:e3:6b:a8:3f:d6:1e:d8:81:f4:7e:
15:90:64:c5:68:a6:21:99:3f:a3:7c:bd:08:60:a5:bc:98:78:
e2:86:23:98:17:14:14:25:10:2c:cc:5f:e7:7b:af:63:b6:32:
64:81:3d:bd:47:c1:ce:35:ff:71:df:34:59:6e:86:42:84:7b:
e4:81:92:49:4d:55:d1:0d:52:19:e2:ec:88:33:f1:5d:c5:9c:
27:80:a9:05:30:32:63:2e:41:a2:56:bd:87:83:b7:7a:bf:ba:
d5:a4:65:c0:f7:79:cc:6e:1e:be:31:35:61:f1:7f:ff:2b:a9:
75:51:3b:e7:1d:ce:0c:c8:fe:e4:9f:d3:36:be:77:72:19:7e:
84:6b:6a:c5:54:0e:bb:c4:62:5b:02:28:89:a3:b4:8b:98:ee:
50:a1:c0:84:f4:b8:f3:3e:d1:5c:cb:1a:0c:c9:96:34:7b:d7:
76:e7:33:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:15 2026 by rpki-client