Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File: 86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier: RgFMrplLIQ425smmYhu3XUba+1iO6ZXdP1RNOWpL8ww=
Subject key identifier: E2:11:09:31:9C:70:47:AC:57:EC:88:D1:F8:B8:88:A8:F6:F4:22:A2
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 01A1DE394EE9066514FD8E839639CC02D8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 08:01:00 +0000
Manifest this update: Sun 15 Nov 2026 08:01:00 +0000
Manifest next update: Mon 16 Nov 2026 08:01:00 +0000
Files and hashes: 1: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: J5DTNcImZO95WSI/yEMHN+xgc/FLsTF2ZH5KkAEK9hw=)
2: WL12YdHQF4v--TkqLhD3Ng1t2wY.roa (hash: 2kBmQB016zd0/AsZ8Bq22A6ptaprPzQDHPqGp8rEVlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:4e:e9:06:65:14:fd:8e:83:96:39:cc:02:d8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Nov 15 08:01:00 2026 GMT
Not After : Nov 16 08:01:00 2026 GMT
Subject: CN=e21109319c7047ac57ec88d1f8b888a8f6f422a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4c:7e:8c:d4:ed:4e:0a:b2:09:3d:d0:aa:74:
7b:98:0b:fb:cb:83:d3:a3:5a:7e:67:8b:20:b0:58:
af:34:ba:e3:fc:b1:c3:f7:a5:58:1b:ba:88:d1:3d:
e2:75:28:b0:e9:40:da:f2:82:f0:0f:90:71:47:e8:
bb:9f:b5:e5:ad:37:44:e5:db:4e:66:2d:7d:80:0d:
21:5e:55:17:62:83:3a:42:61:45:08:a6:93:1c:fd:
93:c9:41:b0:43:68:f2:8a:ee:6c:f4:77:84:22:59:
2b:e8:f1:c3:1b:b4:74:92:48:32:52:89:b1:44:bd:
3a:27:f0:91:a7:da:08:a6:a4:69:bf:35:3d:d8:d3:
c3:d5:ab:f1:17:69:37:c5:69:44:70:81:51:97:6d:
93:39:60:e4:c1:d8:6f:7d:13:a8:f0:84:87:f7:14:
77:bd:42:5b:73:90:ee:dc:a7:58:54:3b:be:a5:63:
83:3c:1a:b4:08:1a:7a:68:32:8d:08:35:e1:6c:b7:
f5:0f:24:f1:6f:b4:3d:41:12:5a:70:4b:11:3a:a4:
fa:15:b7:6b:38:b2:75:e4:8c:7a:81:3a:57:9a:18:
e5:a9:4d:bb:e8:46:8d:16:f0:3c:52:97:c5:99:48:
d0:47:99:24:6c:3e:6c:a6:f3:17:ed:66:22:6c:73:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:11:09:31:9C:70:47:AC:57:EC:88:D1:F8:B8:88:A8:F6:F4:22:A2
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ec:e0:f7:fe:06:8d:15:e6:64:f5:1d:4a:f8:d4:ed:cc:ab:
4e:37:55:cd:8e:29:74:33:75:9f:46:24:57:67:65:d1:56:94:
16:1b:b8:88:2c:0a:96:da:11:f2:ac:3e:df:81:59:57:85:23:
97:6d:99:be:73:92:42:f7:e0:b4:95:52:58:61:c1:ba:dd:25:
84:24:1d:c6:4a:d8:91:f5:05:83:be:f1:9f:51:41:8b:34:02:
16:c6:ba:6d:68:8e:5b:cb:99:05:82:6c:4a:1a:a5:52:2d:e1:
6c:c4:fe:1a:e3:83:44:a6:e2:6b:de:9e:43:9d:79:ed:ff:a5:
cb:ce:db:fd:38:be:c7:61:a7:62:60:4a:ff:c1:0a:52:74:e3:
19:6f:ce:e3:00:4d:ef:57:4e:d3:f6:0d:56:c3:5e:f1:fb:fb:
40:12:97:14:de:34:d2:e0:26:19:c1:21:76:28:f1:4a:68:c6:
81:c2:fe:1b:6f:72:1b:33:84:d5:46:4e:8a:cf:50:0d:1d:f0:
b7:32:3f:dd:44:31:1d:14:7e:51:d5:05:c9:f8:b3:c8:07:a1:
ff:52:ae:fa:26:f8:d2:25:f7:df:e3:e9:6f:73:85:b0:3e:f3:
60:f3:87:d4:34:1f:ce:bb:8b:cd:2f:01:05:ad:c5:01:5f:33:
03:73:32:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOU7pBmUU/Y6DljnMAtjKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTFhZTBiMDdjZDA1ZWUyNDg0ZjRlZWJjZDQ1Njg0NzM0
NzM0MTQwHhcNMjYxMTE1MDgwMTAwWhcNMjYxMTE2MDgwMTAwWjAzMTEwLwYDVQQD
EyhlMjExMDkzMTljNzA0N2FjNTdlYzg4ZDFmOGI4ODhhOGY2ZjQyMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ex+jNTtTgqyCT3QqnR7mAv7y4PT
o1p+Z4sgsFivNLrj/LHD96VYG7qI0T3idSiw6UDa8oLwD5BxR+i7n7XlrTdE5dtO
Zi19gA0hXlUXYoM6QmFFCKaTHP2TyUGwQ2jyiu5s9HeEIlkr6PHDG7R0kkgyUomx
RL06J/CRp9oIpqRpvzU92NPD1avxF2k3xWlEcIFRl22TOWDkwdhvfROo8ISH9xR3
vUJbc5Du3KdYVDu+pWODPBq0CBp6aDKNCDXhbLf1DyTxb7Q9QRJacEsROqT6Fbdr
OLJ15Ix6gTpXmhjlqU276EaNFvA8UpfFmUjQR5kkbD5spvMX7WYibHPPOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIRCTGccEesV+yI0fi4iKj29CKiMB8GA1UdIwQY
MBaAFPOhrgsHzQXuJIT07rzUVoRzRzQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2Et
Yjg0NzdmNTA3M2MxLzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2EtYjg0NzdmNTA3M2Mx
LzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOzg9/4G
jRXmZPUdSvjU7cyrTjdVzY4pdDN1n0YkV2dl0VaUFhu4iCwKltoR8qw+34FZV4Uj
l22ZvnOSQvfgtJVSWGHBut0lhCQdxkrYkfUFg77xn1FBizQCFsa6bWiOW8uZBYJs
ShqlUi3hbMT+GuODRKbia96eQ5157f+ly87b/Ti+x2GnYmBK/8EKUnTjGW/O4wBN
71dO0/YNVsNe8fv7QBKXFN400uAmGcEhdijxSmjGgcL+G29yGzOE1UZOis9QDR3w
tzI/3UQxHRR+UdUFyfizyAeh/1Ku+ib40iX33+Ppb3OFsD7zYPOH1DQfzruLzS8B
Ba3FAV8zA3My+w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:57:33 2026 by rpki-client