Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: ndJRtdrnA8/cKvl/JLa5iSC1K4nB3atBGMdxAW9Ddfs=
Subject key identifier: B9:FA:B8:E0:B4:D9:78:4C:A7:59:29:C6:90:37:63:B7:FC:A6:20:44
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 01A0C47BA4AAC8E5077F3FEE4FFF513CB542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 15:00:32 +0000
Manifest this update: Mon 21 Sep 2026 15:00:32 +0000
Manifest next update: Tue 22 Sep 2026 15:00:32 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: yo3warHrvTd2+sO0pzJmOBh9HbokCrYTvp2KHDlPMoo=)
2: ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa (hash: NVX59SDqnzDr42Kpw57WUClf3jkUfdSkfds/tST6OaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:a4:aa:c8:e5:07:7f:3f:ee:4f:ff:51:3c:b5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Sep 21 15:00:32 2026 GMT
Not After : Sep 22 15:00:32 2026 GMT
Subject: CN=b9fab8e0b4d9784ca75929c6903763b7fca62044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:38:ac:4f:6a:52:17:5a:fe:72:e4:6d:fd:
c8:a1:f9:be:78:18:3f:cb:fd:01:f5:ed:86:b3:4a:
37:0e:88:6a:68:e1:53:f3:4f:a0:89:99:18:a6:41:
6a:ea:07:f3:48:3e:8a:4f:b2:20:45:c4:25:9d:99:
71:65:83:1e:dc:61:6e:8f:0f:bc:c5:be:87:e3:56:
86:69:45:87:e6:9f:ad:49:e9:c4:73:0a:7c:55:2c:
7b:80:a1:eb:b5:fc:c7:21:af:0b:a0:5c:bf:0c:1a:
8e:df:fb:c2:59:6a:91:6d:f6:1f:21:cc:e5:9b:d8:
c7:1d:40:2d:57:c8:17:83:b7:be:63:15:4d:24:d7:
cf:31:c0:58:3d:f5:c0:60:3b:89:d6:45:34:9a:58:
71:2b:fa:78:d6:38:d8:cd:85:0b:f3:6d:ae:f0:96:
64:30:f2:71:4f:9a:ee:b8:59:5b:a0:c9:b2:d9:3e:
b3:aa:de:53:19:64:8c:2d:ff:5b:3e:57:48:1d:bf:
7c:fe:1f:42:a9:7f:e3:42:ad:75:30:6a:51:e3:4c:
29:c9:db:b3:d6:d8:ad:87:06:51:3a:85:68:f4:af:
88:c2:47:99:c8:4d:87:a0:79:57:fb:ff:7b:55:61:
cd:6f:00:a9:9d:c5:05:aa:c2:1e:9f:25:d6:69:17:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FA:B8:E0:B4:D9:78:4C:A7:59:29:C6:90:37:63:B7:FC:A6:20:44
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5f:4b:39:e9:75:c1:da:5b:33:28:e1:64:58:14:50:6f:ad:
08:44:ff:49:f9:5f:46:ee:31:b6:ff:b1:0f:b8:e9:cb:2f:a3:
9c:23:07:df:1e:08:cb:f8:43:59:73:1d:e7:cc:df:fc:ca:37:
b5:f9:88:5f:70:b3:4c:60:0f:12:c2:1b:6c:7c:c5:93:bd:46:
6f:5c:96:57:db:6f:b2:2a:89:7b:72:d1:74:ea:a2:16:07:a4:
58:1a:0c:ff:c0:a5:3b:e3:bc:20:52:55:4a:09:b7:51:43:36:
5b:ee:37:00:17:6e:8b:71:53:7f:16:e1:0d:4d:d6:10:e4:51:
b6:e5:0f:ff:4e:08:9d:93:12:71:d5:8b:03:8d:1e:e2:19:cf:
f7:69:c4:ca:7e:f8:bc:bc:77:27:ff:63:ef:5e:d9:77:1c:d7:
bf:a1:d8:1a:59:85:82:c9:be:05:44:a1:80:fd:cd:df:0a:a3:
79:e2:ff:4d:38:fc:a8:39:7e:a6:48:34:72:d0:f8:3d:3e:1f:
da:fc:0d:43:06:9b:5a:ef:39:b5:e3:48:6f:a8:5c:c9:ab:00:
e9:79:69:70:16:a2:b6:ce:fb:40:9b:2e:63:3d:17:34:23:54:
10:8e:e4:6d:d0:93:a4:b4:86:f5:44:95:d0:56:e7:d9:c9:db:
c2:44:13:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:56:26 2026 by rpki-client