Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: PrXNmH4vWq9U8j5mmT/GcwEErVQfr0eMDjyy3o2wl50=
Subject key identifier: 51:E3:95:23:65:F7:66:B2:FE:47:0E:5C:02:BC:DC:DB:1B:F2:63:FA
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 019CADFE6AB89B0F43E1EC1DF160C46F402F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 070E
Signing time: Mon 02 Mar 2026 10:00:57 +0000
Manifest this update: Mon 02 Mar 2026 10:00:57 +0000
Manifest next update: Tue 03 Mar 2026 10:00:57 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: w8PGgcVLh4AVnQZx+ahIBJ1TC0wt+Ag3Z8jllWDFMOk=)
2: JimNs2i_obmdv5Qfa9sJ0WhnO_Y.roa (hash: khtm5pt40oNa8FPq78IsRE7crtD9nigpDInHqNXz/Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:6a:b8:9b:0f:43:e1:ec:1d:f1:60:c4:6f:40:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Mar 2 10:00:57 2026 GMT
Not After : Mar 3 10:00:57 2026 GMT
Subject: CN=51e3952365f766b2fe470e5c02bcdcdb1bf263fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:d7:b0:1c:1e:13:24:d5:fa:b7:a0:04:18:
bc:8d:ab:a6:36:03:fa:a5:48:5f:c0:5d:62:02:84:
4d:33:fa:e9:e2:b1:7e:4c:cb:48:b9:83:b7:c6:48:
45:03:2c:dc:dd:6b:ff:70:4d:3d:bf:fd:68:2f:2f:
04:8f:cd:36:8b:dc:27:6b:99:83:49:c4:07:87:ce:
41:84:08:ae:c8:ed:09:a2:02:47:73:ea:be:ec:5c:
89:56:23:8e:ea:37:33:70:e5:fb:17:c0:69:d5:7b:
d9:7c:14:2d:4a:5d:5f:a0:1f:f9:47:39:59:e6:4f:
7f:73:1e:e7:46:e6:f4:ec:f8:5e:81:37:08:ef:04:
26:ba:c0:70:65:6a:67:f6:44:fb:68:77:5b:be:59:
63:01:c9:8f:15:f3:cb:63:b4:34:da:06:73:16:24:
e6:6e:0a:77:2c:fb:99:31:f6:cd:41:90:a0:b5:67:
57:a0:45:24:14:8c:5a:e2:51:ef:83:c0:88:0a:39:
3a:23:72:a0:52:05:9d:a0:30:4b:79:fc:d4:73:77:
33:c1:c5:05:e7:9d:d3:81:6e:27:0e:02:91:8b:38:
e4:32:87:d8:cc:51:90:ba:a4:bf:c6:cf:b4:7c:7f:
32:cd:1f:48:58:69:65:c4:f4:0a:81:15:dd:6f:ba:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E3:95:23:65:F7:66:B2:FE:47:0E:5C:02:BC:DC:DB:1B:F2:63:FA
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:40:62:3a:0d:53:bb:54:e4:bf:0b:49:04:3e:5d:23:e7:d2:
5e:e9:e2:10:0b:7c:71:fc:0a:5f:9b:66:91:24:6f:0a:2d:3e:
83:30:09:8e:12:11:60:c3:71:dd:84:67:5a:d9:56:67:52:5d:
41:1f:28:36:35:dd:b8:18:04:c0:07:00:3b:43:ff:61:1a:f7:
24:fc:48:3b:b2:40:14:91:39:f6:8e:e3:90:6f:9a:22:98:7f:
ac:ad:69:ff:61:6a:c7:24:80:33:40:e5:1c:98:80:07:25:9c:
c4:15:2e:f9:c5:41:e5:bc:7f:84:41:82:e0:46:f6:96:e1:9c:
e4:4f:fd:f7:35:fa:0c:d7:26:94:fc:29:4e:3c:e4:bd:3c:62:
35:75:15:c3:16:a8:b4:81:44:ee:7b:7c:83:a3:1e:4c:28:36:
ea:26:a7:12:1e:c6:b1:62:dc:fa:d1:91:a0:cc:5b:6b:35:fa:
a3:d0:0d:79:8b:73:72:fa:f5:7c:27:fa:61:5d:01:8a:b5:2a:
5e:ae:71:58:4f:56:a7:b4:f2:d8:78:c0:f9:eb:3f:73:0e:af:
9e:9c:ad:fe:d1:8b:e2:07:18:7c:94:34:29:a6:91:38:24:82:
50:2c:1a:4a:77:01:40:a6:f0:0b:8c:4e:69:a0:93:30:b5:c9:
aa:bb:21:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:08 2026 by rpki-client