Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File: 86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier: E6rimbFfRhCEdQwiEUvVCn+fRaJtoVKp6gg8C2W+pbM=
Subject key identifier: 9D:35:DE:70:47:1B:8D:4F:08:BA:7B:23:86:6B:63:D7:26:6F:F1:04
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 019D992B806E9BCC8B5BEC61698DA87F6ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 02:00:58 +0000
Manifest this update: Fri 17 Apr 2026 02:00:58 +0000
Manifest next update: Sat 18 Apr 2026 02:00:58 +0000
Files and hashes: 1: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: pDwpt2v1OMPpl8BOS34GvqAQpVz9iUFmrtWCq/+7ci4=)
2: WL12YdHQF4v--TkqLhD3Ng1t2wY.roa (hash: 2kBmQB016zd0/AsZ8Bq22A6ptaprPzQDHPqGp8rEVlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:80:6e:9b:cc:8b:5b:ec:61:69:8d:a8:7f:6e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Apr 17 02:00:58 2026 GMT
Not After : Apr 18 02:00:58 2026 GMT
Subject: CN=9d35de70471b8d4f08ba7b23866b63d7266ff104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:db:0f:43:b6:9d:3c:c9:13:a9:e0:23:e7:
61:90:a5:e1:57:b8:b8:8c:94:18:63:a4:c3:72:5a:
bb:ff:de:05:25:4d:8f:3d:10:6d:8f:06:a2:20:d9:
11:d1:95:af:30:93:37:ac:e1:77:a6:66:d0:a1:f5:
50:2a:95:5e:2a:71:6b:84:8a:ec:56:a9:49:f9:3d:
39:53:9f:36:38:17:94:2f:cf:4d:ed:67:7c:df:d2:
1f:51:a6:81:b5:89:c9:ad:89:14:e3:e4:1d:c6:41:
1b:66:77:f6:27:8c:c4:45:d2:50:a5:01:ca:ad:ad:
63:0b:59:1e:26:01:59:c0:b0:7f:3e:49:36:22:c6:
a4:61:46:1a:4e:b6:9d:0e:1c:5d:39:eb:19:ac:10:
5c:aa:c2:7e:f7:a8:d5:33:03:24:dd:a6:6c:b0:7d:
6a:42:64:ba:d8:55:e0:67:5b:14:b2:28:88:ed:bb:
4c:36:4a:e9:81:cc:fc:1a:1e:6a:8a:00:a4:2a:72:
fb:23:c5:b0:08:2e:b3:13:d8:23:48:76:d0:48:6b:
46:a7:d9:9c:78:ea:24:68:bc:78:2f:4d:db:cb:de:
bc:30:9f:d0:cb:d5:a7:29:82:8f:e6:9c:f3:16:2d:
a1:e9:1f:57:1f:aa:4d:dc:79:d0:ff:06:6f:7f:32:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:35:DE:70:47:1B:8D:4F:08:BA:7B:23:86:6B:63:D7:26:6F:F1:04
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f4:8e:fb:a2:19:40:88:37:7d:ee:ad:a7:ae:f6:b5:cb:27:
6b:16:dd:22:8a:fc:fc:d1:26:fe:7c:3e:d4:c2:d9:1d:c5:0d:
3c:56:2a:7c:e7:f9:f3:f4:52:c3:03:34:f5:90:b1:c3:2d:48:
51:2d:f6:9c:77:69:9e:76:31:67:6e:63:d8:13:38:b1:06:31:
04:8f:09:7d:80:ba:cd:1d:7a:94:44:2c:93:64:6e:a5:0b:d7:
fe:63:f9:e2:ce:ea:87:41:7d:fb:59:ae:fb:22:a7:bf:15:d6:
39:6b:e9:51:4d:84:62:22:08:81:61:f2:f3:da:38:33:8d:b1:
b3:0b:66:7b:3d:bc:00:19:6a:f3:2f:ba:9a:be:ae:03:d8:52:
fa:f1:0e:65:f0:a1:24:66:1b:6c:da:d9:1d:db:d1:3c:0f:d9:
be:96:9c:a4:87:9b:e6:be:ca:a8:90:9d:ee:ac:26:30:44:dc:
72:e5:d7:f5:5f:80:8b:15:a1:ab:d1:bd:c8:cb:b0:82:50:39:
3e:38:03:41:c7:05:b2:44:b6:c0:71:f7:3b:37:ea:24:6d:20:
0b:a4:83:b4:4b:b2:6b:16:a8:74:36:8e:3d:70:74:d5:32:c7:
7e:5c:ca:6d:a7:af:c7:0c:ad:d0:f4:94:a4:6d:3a:7d:a3:57:
4b:66:83:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK4Bum8yLW+xhaY2of27NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTFhZTBiMDdjZDA1ZWUyNDg0ZjRlZWJjZDQ1Njg0NzM0
NzM0MTQwHhcNMjYwNDE3MDIwMDU4WhcNMjYwNDE4MDIwMDU4WjAzMTEwLwYDVQQD
Eyg5ZDM1ZGU3MDQ3MWI4ZDRmMDhiYTdiMjM4NjZiNjNkNzI2NmZmMTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPnbD0O2nTzJE6ngI+dhkKXhV7i4
jJQYY6TDclq7/94FJU2PPRBtjwaiINkR0ZWvMJM3rOF3pmbQofVQKpVeKnFrhIrs
VqlJ+T05U582OBeUL89N7Wd839IfUaaBtYnJrYkU4+QdxkEbZnf2J4zERdJQpQHK
ra1jC1keJgFZwLB/Pkk2IsakYUYaTradDhxdOesZrBBcqsJ+96jVMwMk3aZssH1q
QmS62FXgZ1sUsiiI7btMNkrpgcz8Gh5qigCkKnL7I8WwCC6zE9gjSHbQSGtGp9mc
eOokaLx4L03by968MJ/Qy9WnKYKP5pzzFi2h6R9XH6pN3HnQ/wZvfzLk+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ013nBHG41PCLp7I4ZrY9cmb/EEMB8GA1UdIwQY
MBaAFPOhrgsHzQXuJIT07rzUVoRzRzQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2Et
Yjg0NzdmNTA3M2MxLzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2EtYjg0NzdmNTA3M2Mx
LzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/SO+6IZ
QIg3fe6tp672tcsnaxbdIor8/NEm/nw+1MLZHcUNPFYqfOf58/RSwwM09ZCxwy1I
US32nHdpnnYxZ25j2BM4sQYxBI8JfYC6zR16lEQsk2RupQvX/mP54s7qh0F9+1mu
+yKnvxXWOWvpUU2EYiIIgWHy89o4M42xswtmez28ABlq8y+6mr6uA9hS+vEOZfCh
JGYbbNrZHdvRPA/ZvpacpIeb5r7KqJCd7qwmMETccuXX9V+AixWhq9G9yMuwglA5
PjgDQccFskS2wHH3OzfqJG0gC6SDtEuyaxaodDaOPXB01TLHflzKbaevxwyt0PSU
pG06faNXS2aDPg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:32 2026 by rpki-client