Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: LaqYpb2JzsMocB59v+xrevKYKlKPD8oU63MqLf/VAvs=
Subject key identifier: 7D:30:5D:99:56:1E:71:76:AD:C8:64:44:F6:C7:82:75:4D:E2:B7:38
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 019F9135E73654194FAAF3E4AECC40BEEE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 0709
Signing time: Thu 23 Jul 2026 23:00:56 +0000
Manifest this update: Thu 23 Jul 2026 23:00:56 +0000
Manifest next update: Fri 24 Jul 2026 23:00:56 +0000
Files and hashes: 1: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: 3DnaOS4S+bp05CEOGtgOOXgs7QeLuJGsY4WkW2nMvxU=)
2: XuITUG_nXLtJk8wz6ifMhssSuak.roa (hash: 5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:e7:36:54:19:4f:aa:f3:e4:ae:cc:40:be:ee:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Jul 23 23:00:56 2026 GMT
Not After : Jul 24 23:00:56 2026 GMT
Subject: CN=7d305d99561e7176adc86444f6c782754de2b738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:06:01:17:90:71:b2:14:95:fe:bc:ff:00:
5b:9e:18:f4:55:26:e3:8e:d5:62:5d:96:42:95:25:
f8:6e:22:76:83:e1:8c:c1:bb:a8:e1:53:70:54:08:
03:ee:37:8e:d2:58:94:c0:c7:40:2b:bf:19:80:0d:
ab:c2:ec:4d:f9:06:91:ee:58:d7:fc:56:a0:f6:a6:
9f:63:3c:49:6c:68:4b:d4:10:00:a3:8c:7e:61:d9:
31:fd:04:78:24:01:e8:bc:4b:cf:c6:84:d8:dc:47:
b4:48:d9:95:05:a1:3a:b1:53:a9:24:d7:87:19:ae:
8b:6e:5d:97:88:f8:59:d6:09:a0:78:b4:90:d0:16:
d0:11:d4:22:4e:b4:c7:43:ab:4b:93:f4:69:3c:c1:
bc:47:6a:46:12:51:51:21:01:9e:53:9d:59:e3:6f:
95:fa:a3:2d:e7:fd:ba:c6:e5:f0:fe:51:5c:a1:91:
98:1e:ae:26:bc:e4:1f:74:e0:4d:19:b5:8e:4a:f5:
c5:94:df:b8:d1:97:b2:0e:17:a8:ee:69:bc:0f:3e:
90:06:19:3f:4a:c8:f4:14:ad:07:26:ed:52:a3:dc:
78:f8:90:cc:5d:2c:aa:f0:90:99:63:2c:19:98:44:
ae:b4:1f:eb:af:c6:b2:cb:49:b9:11:0e:8f:db:4a:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:30:5D:99:56:1E:71:76:AD:C8:64:44:F6:C7:82:75:4D:E2:B7:38
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fa:66:d8:9a:f9:3f:cb:bf:20:5a:cd:db:71:0f:df:4e:14:
b5:9b:c1:5b:f4:23:ec:2a:45:a1:3e:f9:72:55:b1:f6:84:b7:
5c:ec:30:19:fb:b1:6b:96:f2:d2:6d:51:1d:70:d6:fe:0f:29:
8c:58:9e:d5:64:be:51:83:75:44:6b:08:5b:11:e7:47:e0:f3:
04:e7:91:91:d5:b4:ad:85:af:23:10:0f:36:5d:4b:01:3a:c5:
91:1f:b2:73:fc:83:d1:79:12:59:fa:40:56:92:92:a6:f0:df:
54:f1:fc:c4:e4:63:83:b6:5e:7d:7d:a2:1f:b4:f4:ae:45:a1:
2d:de:8d:d1:a7:84:81:ca:52:dc:97:d3:13:31:86:0d:81:e8:
d1:e1:25:e4:06:a0:6e:70:89:15:e1:fd:f0:ae:e5:8e:f6:c1:
19:55:2a:47:23:69:9d:7a:ee:22:2c:bd:53:bd:b6:ee:6b:19:
e2:e6:d1:27:4f:45:6e:c4:92:7c:bc:b9:74:b8:d5:70:94:89:
53:15:67:3e:56:8f:d3:94:c5:ed:af:71:df:55:1f:14:a2:d0:
d0:0a:38:ab:8d:3a:c2:63:67:13:90:32:87:c0:bf:be:e1:01:
7a:ab:30:59:84:6f:6c:7f:99:c0:a3:28:dc:98:3e:f2:5a:7a:
5c:ed:05:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:05 2026 by rpki-client