Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File: 86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier: tV3b7XezKWSRg4kPsokEEhl4ktkLS3wNmq4oPW5CPI0=
Subject key identifier: F7:0E:AD:80:B6:25:B7:EF:01:63:05:29:4A:82:09:65:F5:AB:C6:F9
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 019FAA50B44A7C4888583903D25D18D1B336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 20:00:43 +0000
Manifest this update: Tue 28 Jul 2026 20:00:43 +0000
Manifest next update: Wed 29 Jul 2026 20:00:43 +0000
Files and hashes: 1: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: Qf6xC5eWeJyL9ONsTb0dT0Ij4QRaHL75XUFk0kia1KU=)
2: WL12YdHQF4v--TkqLhD3Ng1t2wY.roa (hash: 2kBmQB016zd0/AsZ8Bq22A6ptaprPzQDHPqGp8rEVlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:b4:4a:7c:48:88:58:39:03:d2:5d:18:d1:b3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Jul 28 20:00:43 2026 GMT
Not After : Jul 29 20:00:43 2026 GMT
Subject: CN=f70ead80b625b7ef016305294a820965f5abc6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:01:0c:06:76:db:1c:fd:06:f0:50:8d:ab:
78:92:5a:34:d8:82:a0:bd:8c:3a:42:80:51:c2:02:
be:91:da:77:00:76:e7:02:4e:54:8a:da:59:1d:67:
28:2a:e8:2a:ca:51:6f:d0:fa:7e:cc:4f:48:d0:0f:
9f:ba:db:ad:1e:d6:e4:a8:35:80:74:07:e0:ab:77:
d3:23:bd:40:19:12:18:d2:9b:fa:c1:7a:34:f7:aa:
c5:f6:90:17:bc:2d:09:b5:e8:2d:4f:c4:d9:32:4a:
f2:07:53:b8:8d:fb:31:00:f7:b6:4c:42:67:c2:4c:
53:d0:54:90:a7:ac:f1:a7:65:ce:23:44:cf:bb:71:
85:37:27:05:ab:f3:1f:39:8a:9e:21:8e:7f:9d:a1:
76:b0:05:bc:ab:a2:ee:9d:75:ca:d6:f1:c8:4e:81:
9f:04:6a:ee:a5:c2:db:1e:ed:2c:de:36:32:70:77:
e1:09:eb:d9:e5:bf:26:ab:68:a1:53:0f:4c:b4:77:
fb:bc:2d:ab:b6:e9:a7:55:1e:9d:10:2b:4c:2c:ea:
f2:32:e0:68:d0:24:fa:a3:a2:1a:40:5b:ea:41:61:
a5:c7:6f:af:a2:fa:d9:60:58:41:23:ee:02:ed:82:
7d:77:74:9c:d1:5c:6c:04:c0:94:9a:31:8a:bd:45:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0E:AD:80:B6:25:B7:EF:01:63:05:29:4A:82:09:65:F5:AB:C6:F9
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d2:3d:13:cb:e2:3d:11:a5:72:67:72:11:a4:3d:22:4e:39:
18:cf:15:0b:bd:ef:4d:c0:77:36:9a:61:7c:0d:f7:09:0e:bb:
e9:91:4a:32:92:9d:66:e5:9e:fc:ea:e4:e9:26:d0:b9:99:6f:
7f:43:66:00:0e:d1:5e:a4:fb:a6:85:d3:85:3d:71:fd:78:1d:
e3:90:19:dd:a8:18:6c:10:33:23:d9:ff:f1:27:25:d8:3c:27:
6a:ea:0d:a5:7a:31:50:50:69:d5:72:92:c9:4b:4a:60:37:41:
4b:93:b6:c3:04:3f:cf:a5:98:9f:eb:b9:17:76:1d:09:4f:81:
98:84:f2:ac:9f:fe:b5:ed:a3:5e:16:35:ba:de:22:f6:77:4e:
85:28:58:c1:3f:88:52:70:09:29:fe:94:e1:d3:64:db:04:a9:
b9:cf:92:cd:84:0d:d3:43:b3:26:09:5e:a5:45:6b:cf:b8:bb:
f4:fa:65:0d:42:6a:76:ae:83:ec:84:43:a8:de:0a:33:16:be:
61:90:ae:1d:38:b0:6f:0e:8d:44:b0:b4:f1:93:80:c1:ed:c2:
93:2e:e7:0f:7c:b9:2a:f6:de:df:ed:f2:8e:6b:35:36:25:70:
d5:12:50:53:cc:8c:d0:50:17:c7:26:4a:b8:6d:72:e1:bc:1e:
f2:8e:6b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:49 2026 by rpki-client