Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: l5X3jhfOxCuccyTNNCLMY0aYhqciR7BmtYZEt+ACQ6E=
Subject key identifier: CF:F4:4F:D4:D1:4A:95:E5:33:8C:A2:B6:37:4C:8C:2E:31:62:66:B9
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 019EC30067DF33D96973A3E475BDC3010B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 0822
Signing time: Sat 13 Jun 2026 22:00:44 +0000
Manifest this update: Sat 13 Jun 2026 22:00:44 +0000
Manifest next update: Sun 14 Jun 2026 22:00:44 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: h4hUmhzT1xXbTV6kNje9kYzcWLnEkiVpo+LRyJRMV6s=)
2: JimNs2i_obmdv5Qfa9sJ0WhnO_Y.roa (hash: khtm5pt40oNa8FPq78IsRE7crtD9nigpDInHqNXz/Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:67:df:33:d9:69:73:a3:e4:75:bd:c3:01:0b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Jun 13 22:00:44 2026 GMT
Not After : Jun 14 22:00:44 2026 GMT
Subject: CN=cff44fd4d14a95e5338ca2b6374c8c2e316266b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:82:44:48:6b:ff:bf:95:40:c9:f0:6e:95:cc:
31:c5:05:c0:1d:8e:d5:c8:ca:87:9f:2f:3d:e0:9a:
59:7b:29:2f:ab:65:55:02:4c:7f:f0:d6:65:f6:62:
4a:dd:79:ba:9a:40:9e:c9:20:cc:f7:bc:d8:f2:ab:
f8:83:b6:96:50:a9:5c:51:20:52:93:be:17:b1:3e:
32:ce:34:55:02:80:19:9a:75:04:a5:f5:84:0c:92:
16:84:30:10:ab:8d:1f:25:bf:3d:b3:0d:08:76:56:
fa:a0:3c:e6:15:27:95:62:7f:c5:f3:4c:e4:32:94:
f2:a3:b7:36:46:58:35:67:60:23:7d:93:4e:5f:d5:
64:14:79:ab:7b:94:e3:44:c0:0e:f8:81:e7:c5:27:
5f:d4:a0:75:94:0d:7c:8c:da:93:dc:62:53:b8:e0:
f3:1f:e7:c4:5b:c3:1a:f7:4d:c1:3a:09:5c:85:e1:
2d:6e:a3:38:0e:c9:43:54:79:6c:bf:d8:04:ee:7e:
db:af:d5:f9:66:60:5e:38:7d:17:e2:8d:aa:d2:9f:
55:8b:dd:4d:22:89:de:c9:bb:a5:a2:c3:b3:23:aa:
71:ac:f7:9c:a1:29:14:3c:e0:bb:c1:1f:a4:86:25:
32:54:13:a0:ff:ff:ff:24:63:65:43:e6:c7:5e:df:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F4:4F:D4:D1:4A:95:E5:33:8C:A2:B6:37:4C:8C:2E:31:62:66:B9
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4d:5a:3a:b3:0f:aa:6d:ce:5b:31:be:65:94:93:7e:69:9e:
7b:74:13:3a:4e:94:61:2e:d4:95:4a:50:1d:5f:8e:1e:a0:30:
98:3a:a2:80:85:7a:26:fe:13:f4:b8:6d:29:5a:7e:0a:8e:de:
49:26:df:80:8a:38:bc:7f:41:4c:29:8b:86:06:15:50:70:85:
5a:49:da:cd:af:cb:2b:87:cd:7a:99:27:fb:bc:00:e7:49:86:
15:17:83:17:05:0b:b8:12:80:45:a1:f1:48:cd:11:02:44:6f:
fc:4e:c1:69:e8:c0:12:61:52:e9:cd:e8:37:57:eb:fe:63:77:
22:c9:25:1d:8a:14:6a:e9:c4:65:56:66:0c:de:d1:35:d5:f0:
56:9d:7e:79:d0:f6:12:87:96:55:5f:af:15:04:33:86:f6:20:
35:6f:42:ec:c5:94:69:38:aa:b3:03:ac:58:e9:59:60:ea:82:
9d:08:73:77:b0:b9:63:4b:2c:f5:9c:7b:85:29:dc:7a:39:78:
af:2e:13:aa:a2:b8:e5:0b:83:0e:45:02:f4:6d:14:47:40:a2:
02:07:5e:29:af:29:ef:e4:e9:c6:66:6e:3e:d9:d8:b1:fb:29:
1a:f7:45:29:8e:dc:24:36:5e:c6:59:57:d0:d9:ff:e8:30:32:
92:7d:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:25:42 2026 by rpki-client