Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File: 86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier: bRY2mrK6IKPmXVAO/GNgJTHZVok6vbvllbg0ZixpnFA=
Subject key identifier: 3B:46:45:76:78:44:C1:CD:CF:1F:64:AB:0D:54:66:19:CB:BA:AA:AA
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 019CABA1FB8085B6448DC1ECAD3A5BB979DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 23:00:45 +0000
Manifest this update: Sun 01 Mar 2026 23:00:45 +0000
Manifest next update: Mon 02 Mar 2026 23:00:45 +0000
Files and hashes: 1: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: ej+neFmIRASQeTJbQjGr1LcGNLWSTdNCLwposzuLGqM=)
2: WL12YdHQF4v--TkqLhD3Ng1t2wY.roa (hash: 2kBmQB016zd0/AsZ8Bq22A6ptaprPzQDHPqGp8rEVlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fb:80:85:b6:44:8d:c1:ec:ad:3a:5b:b9:79:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Mar 1 23:00:45 2026 GMT
Not After : Mar 2 23:00:45 2026 GMT
Subject: CN=3b4645767844c1cdcf1f64ab0d546619cbbaaaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:bd:fd:49:d9:c5:f0:08:3f:b3:28:b6:2f:
26:85:38:fa:ec:12:c3:3c:b2:22:e9:a6:6e:c3:5f:
c4:ff:54:46:d4:72:95:ea:27:cf:fb:3f:99:fa:10:
c0:de:db:87:bb:4f:d8:88:27:b2:07:e1:b4:f0:dd:
fe:e6:d5:86:cc:86:79:1e:aa:ab:74:51:f5:1b:e8:
b3:ff:b0:94:fd:4f:ba:44:6e:80:2b:08:ba:df:c5:
3e:43:0e:1d:3d:1a:02:56:6f:26:51:15:93:ed:35:
b2:22:f0:a2:5b:6f:e0:a7:b8:3c:a1:5c:70:93:95:
bc:62:63:f0:ce:cc:25:f5:b8:30:75:ed:02:8e:46:
42:af:7e:8f:3f:70:98:13:11:0f:18:46:60:bd:f1:
94:47:55:36:99:f7:ea:04:9d:7c:98:97:e5:91:83:
fd:41:11:af:0a:eb:dc:1e:4b:50:5f:5b:d7:2c:00:
1f:87:c1:e8:b9:3e:0a:66:41:a1:97:0f:34:7c:18:
66:9d:3d:e9:b9:bf:a0:eb:8b:fc:47:1b:03:57:44:
dd:a8:c7:c7:8a:64:9e:af:96:83:d8:c9:9f:a2:37:
48:d4:9d:bc:71:98:f7:0d:64:58:70:dc:5b:dc:93:
da:a7:0c:d7:43:14:8f:c6:3e:1c:61:88:e0:a6:a0:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:46:45:76:78:44:C1:CD:CF:1F:64:AB:0D:54:66:19:CB:BA:AA:AA
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:fb:16:6a:08:4c:c7:e9:97:95:88:d3:7e:41:b5:41:7a:20:
00:cc:bf:3e:94:40:c6:3f:82:9c:0d:ea:30:b1:b8:29:eb:bc:
3b:e7:63:1a:78:84:f1:1f:a1:b2:c5:4a:f7:56:cc:e8:04:fe:
e9:3a:9e:f8:f5:59:07:2b:ee:91:c9:ac:b6:a1:37:89:bd:6f:
9a:72:99:0b:73:b4:4d:5b:f0:c7:2f:9d:b4:41:2e:e9:b1:cf:
37:09:06:fa:45:14:08:c1:ce:db:42:04:2a:5d:8d:cc:e0:39:
b8:ba:74:09:72:9c:9a:8c:d3:7d:ba:77:0b:6d:11:b0:35:c3:
04:d4:ab:ee:e8:9a:fb:d7:ae:ca:a3:22:12:6a:88:5e:90:ac:
e1:57:5c:a2:1b:3f:19:a8:8a:b3:8a:ae:07:6e:bc:97:a5:a2:
e7:d9:3e:3b:c2:04:ee:4c:a0:9b:6b:a7:5a:41:fd:d6:dd:6f:
66:16:20:77:c7:06:d1:7a:10:50:9e:f3:26:ec:c6:52:52:c7:
b1:62:b8:a9:45:fb:30:83:0b:4c:f8:64:2f:6a:ee:d9:bf:fc:
f8:5b:db:a0:60:d9:c2:b0:a0:25:89:57:f8:aa:a2:f0:dd:8f:
2f:6b:78:8b:66:2c:e3:04:5a:ed:47:26:1e:29:16:14:80:30:
dc:47:50:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrofuAhbZEjcHsrTpbuXnaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTFhZTBiMDdjZDA1ZWUyNDg0ZjRlZWJjZDQ1Njg0NzM0
NzM0MTQwHhcNMjYwMzAxMjMwMDQ1WhcNMjYwMzAyMjMwMDQ1WjAzMTEwLwYDVQQD
EygzYjQ2NDU3Njc4NDRjMWNkY2YxZjY0YWIwZDU0NjYxOWNiYmFhYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BC9/UnZxfAIP7Moti8mhTj67BLD
PLIi6aZuw1/E/1RG1HKV6ifP+z+Z+hDA3tuHu0/YiCeyB+G08N3+5tWGzIZ5Hqqr
dFH1G+iz/7CU/U+6RG6AKwi638U+Qw4dPRoCVm8mURWT7TWyIvCiW2/gp7g8oVxw
k5W8YmPwzswl9bgwde0CjkZCr36PP3CYExEPGEZgvfGUR1U2mffqBJ18mJflkYP9
QRGvCuvcHktQX1vXLAAfh8HouT4KZkGhlw80fBhmnT3pub+g64v8RxsDV0TdqMfH
imSer5aD2MmfojdI1J28cZj3DWRYcNxb3JPapwzXQxSPxj4cYYjgpqBUTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtGRXZ4RMHNzx9kqw1UZhnLuqqqMB8GA1UdIwQY
MBaAFPOhrgsHzQXuJIT07rzUVoRzRzQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2Et
Yjg0NzdmNTA3M2MxLzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2EtYjg0NzdmNTA3M2Mx
LzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu/sWaghM
x+mXlYjTfkG1QXogAMy/PpRAxj+CnA3qMLG4Keu8O+djGniE8R+hssVK91bM6AT+
6Tqe+PVZByvukcmstqE3ib1vmnKZC3O0TVvwxy+dtEEu6bHPNwkG+kUUCMHO20IE
Kl2NzOA5uLp0CXKcmozTfbp3C20RsDXDBNSr7uia+9euyqMiEmqIXpCs4Vdcohs/
GaiKs4quB268l6Wi59k+O8IE7kygm2unWkH91t1vZhYgd8cG0XoQUJ7zJuzGUlLH
sWK4qUX7MIMLTPhkL2ru2b/8+FvboGDZwrCgJYlX+Kqi8N2PL2t4i2Ys4wRa7Ucm
HikWFIAw3EdQuQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:51 2026 by rpki-client