Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: bUlWSNR+Xg92UlohTBnQMxXymjk2dMGqyNDBivvLWdY=
Subject key identifier: 27:E1:39:BC:F6:F4:88:4F:22:1A:E1:93:93:BD:77:00:C9:AA:B9:F9
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 019D9962109A82D1A809C28E5681446E641E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:00:33 +0000
Manifest this update: Fri 17 Apr 2026 03:00:33 +0000
Manifest next update: Sat 18 Apr 2026 03:00:33 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: YoscYFD4mK+y/S9n8dW6T0V6t90VuQaBBHk5vvG4WJw=)
2: ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa (hash: NVX59SDqnzDr42Kpw57WUClf3jkUfdSkfds/tST6OaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:10:9a:82:d1:a8:09:c2:8e:56:81:44:6e:64:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Apr 17 03:00:33 2026 GMT
Not After : Apr 18 03:00:33 2026 GMT
Subject: CN=27e139bcf6f4884f221ae19393bd7700c9aab9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:bb:aa:b6:d7:df:a3:1b:28:2d:ec:1b:13:
33:18:31:6c:10:29:6d:a4:3e:d4:d7:f6:18:c3:50:
9f:21:cb:f1:b0:75:0d:17:e5:c3:ae:4d:66:7f:2f:
d1:07:27:eb:d2:98:30:d8:c9:39:47:9b:ef:07:e4:
b6:b9:4b:11:b6:91:30:38:5e:53:f9:87:45:19:84:
37:47:da:75:f3:b2:1b:50:6a:65:00:c0:89:5b:55:
e0:a9:3c:18:96:96:f2:e5:7c:e8:2d:f4:aa:4c:e3:
ba:16:b4:05:64:4d:bf:80:ac:27:03:a6:25:bc:fa:
b5:c0:f6:ab:3e:75:ac:fe:50:66:09:59:7c:b3:9d:
7a:f2:83:7d:25:5d:68:d0:84:da:0b:3a:a8:b9:50:
fa:1e:3d:a3:89:a2:fb:fe:93:d0:89:18:1e:5f:94:
f8:98:f7:08:83:d5:f6:00:f6:7f:3b:fe:61:e3:98:
02:08:c2:f7:13:0b:6f:e3:2a:9e:05:90:a0:90:03:
84:ce:e9:16:47:38:d0:8e:07:14:fa:ae:23:0f:3d:
f5:07:c4:51:d8:06:65:f5:86:ed:28:d6:dc:66:21:
1a:e9:34:1e:50:46:4e:7e:6f:0b:c1:06:12:bb:97:
d8:f0:4d:c2:c0:ea:44:b3:f4:2a:6e:a0:b0:89:d2:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E1:39:BC:F6:F4:88:4F:22:1A:E1:93:93:BD:77:00:C9:AA:B9:F9
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e9:53:ab:ee:ac:84:5e:16:65:c4:b5:b9:09:7a:95:28:67:
0b:bd:fd:8f:65:28:10:c4:e0:9b:38:0d:3f:65:40:f4:4e:bb:
e1:cd:18:b1:18:2b:69:5f:26:f5:42:4f:c8:fc:7e:4b:e0:5f:
ba:05:fa:d8:55:3b:a0:f9:d6:73:de:f4:63:3d:07:09:07:4f:
fc:c9:2e:fe:09:c6:8c:a4:88:af:91:46:23:01:d7:e9:87:08:
5a:f8:83:67:33:ae:d8:d4:39:74:f1:c6:b0:6f:45:bc:20:f3:
ad:75:46:83:65:f7:8e:77:2c:89:e7:3e:88:33:a6:68:bd:75:
fa:11:30:96:91:1f:02:a0:20:66:c4:cd:8b:fe:f4:b0:d1:bf:
12:e9:c7:db:df:38:4f:aa:d3:00:44:5f:f5:d4:41:da:45:89:
d5:8e:67:bb:e6:ee:94:ba:b4:6d:fd:29:9c:9c:a0:ac:23:5f:
a4:c8:da:12:56:a6:1b:34:7b:12:51:dc:e2:da:8e:26:3b:1a:
7a:e0:34:a0:23:f5:87:dd:30:cf:a7:61:48:5f:45:a0:87:08:
17:ed:2b:40:96:a4:59:53:80:cc:cd:f0:46:e7:36:42:03:ff:
90:8f:ff:c4:8f:cb:8d:ce:09:f2:4d:3e:15:e5:b0:61:16:76:
ec:9f:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:34 2026 by rpki-client