Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: ae+SeqyRaH/dNtdFsxFEKJOXuHxWxRrI1MxKfc1hAA4=
Subject key identifier: D1:5E:BD:D7:CE:00:1D:2D:47:42:5F:26:75:83:49:3A:C2:FF:D7:6E
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 01A130D90428EFBBF0416731E7BD427FB67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 0964
Signing time: Mon 12 Oct 2026 16:01:30 +0000
Manifest this update: Mon 12 Oct 2026 16:01:30 +0000
Manifest next update: Tue 13 Oct 2026 16:01:30 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: OwOa/yDjVhnzsMj+wenHqkBhSpYbfPNSWHB9W6cZzfI=)
2: JimNs2i_obmdv5Qfa9sJ0WhnO_Y.roa (hash: khtm5pt40oNa8FPq78IsRE7crtD9nigpDInHqNXz/Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:d9:04:28:ef:bb:f0:41:67:31:e7:bd:42:7f:b6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Oct 12 16:01:30 2026 GMT
Not After : Oct 13 16:01:30 2026 GMT
Subject: CN=d15ebdd7ce001d2d47425f267583493ac2ffd76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:a8:65:58:f5:57:e2:32:5a:d9:44:04:b4:
2c:47:23:c9:a5:bb:b4:b0:23:dd:50:f7:20:e2:c0:
41:c0:01:af:6d:c5:bf:8f:ac:61:d5:b6:c6:d5:27:
a8:11:3f:6c:0a:b2:62:66:e6:57:02:e4:64:31:55:
62:8b:d9:5d:04:39:42:85:32:0c:6e:87:8d:6a:04:
ea:2f:2a:eb:db:86:87:62:d5:b7:62:c6:b3:2a:1e:
a2:94:63:63:9a:6e:fe:71:81:04:be:e2:55:84:1a:
f3:1c:f2:b5:82:49:49:65:76:fc:04:5b:ee:8e:f5:
27:05:b0:46:92:3c:d6:87:46:30:14:d8:ec:bf:1e:
c3:59:44:38:95:96:c1:46:67:00:44:14:eb:90:28:
8f:9f:18:b8:94:f3:51:67:00:43:bf:8d:08:1a:f6:
59:86:10:92:ef:8e:02:51:b2:cb:28:c3:f0:e2:53:
9c:69:8c:b0:ad:32:86:c2:ce:ce:71:d1:c4:2d:5a:
93:d9:fb:c3:0f:9a:7d:02:1d:85:e2:99:d8:6d:e7:
28:00:18:2a:f4:82:dc:90:3a:83:34:12:d6:63:fb:
87:5c:bc:2e:0c:f5:5b:30:eb:bc:89:db:58:3b:85:
c7:02:7e:13:d3:df:af:ca:63:03:30:e9:e6:de:44:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5E:BD:D7:CE:00:1D:2D:47:42:5F:26:75:83:49:3A:C2:FF:D7:6E
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:77:fb:dd:a2:ac:3f:d6:ad:ff:e2:bf:e6:e4:92:a2:be:90:
d2:cb:df:5b:bc:bb:53:57:c5:24:4d:72:b5:8a:12:8b:86:60:
84:a0:87:8f:0e:43:14:7c:dc:76:df:de:9a:fd:5a:9b:a9:7c:
bd:51:53:6b:d9:5a:d5:2c:11:31:13:94:1c:1c:7f:68:d5:24:
30:17:4c:68:50:ed:59:0b:a5:74:d1:3c:35:09:a0:52:f4:0b:
af:b5:24:eb:37:10:ff:ff:fe:bb:20:92:96:d5:c8:61:21:30:
0a:fd:8e:12:10:5d:7a:61:87:ea:87:b3:31:74:4d:bf:a9:15:
fb:c6:ac:81:99:f5:41:76:03:c8:8a:37:92:be:d6:38:e4:68:
5c:b8:c4:82:0f:03:0f:3f:fb:e1:1e:6a:aa:bd:0d:cb:0d:01:
37:a1:b0:02:a0:6f:59:ff:d8:d8:11:74:49:ee:67:a7:c3:0a:
b9:b1:35:6b:6f:c0:3f:e0:d0:0e:6e:e9:90:c2:01:b3:07:10:
18:91:c4:6a:56:99:46:fb:13:fd:47:e4:24:e3:8e:96:56:26:
11:14:47:2f:bc:df:c5:c0:4d:77:e8:dc:38:aa:c1:ba:84:be:
c1:60:a3:a7:8f:51:81:83:90:9a:5b:4a:a7:ae:58:f8:c3:1c:
43:a1:38:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:22:56 2026 by rpki-client