Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: Cma98nnUm5vN/SKYPVd0XM3/UZq6pRJ2EUEFQznVVo0=
Subject key identifier: 34:F4:43:07:CE:E8:0A:11:62:FA:56:0C:7A:8B:32:D1:C7:87:E1:E9
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 019EBEED441DD963479D9F00E4633FDF0616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 03:01:20 +0000
Manifest this update: Sat 13 Jun 2026 03:01:20 +0000
Manifest next update: Sun 14 Jun 2026 03:01:20 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: I7PPkVa8wgYePWWS83wDyfAfKw/JpWVWabFBwcN9ddo=)
2: ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa (hash: NVX59SDqnzDr42Kpw57WUClf3jkUfdSkfds/tST6OaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:44:1d:d9:63:47:9d:9f:00:e4:63:3f:df:06:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Jun 13 03:01:20 2026 GMT
Not After : Jun 14 03:01:20 2026 GMT
Subject: CN=34f44307cee80a1162fa560c7a8b32d1c787e1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:b2:1c:57:85:84:a1:cc:04:38:77:59:56:
66:b0:f2:db:f7:85:50:42:ab:94:92:02:38:b4:0d:
72:0b:8c:92:04:d1:ea:c4:ab:10:25:ef:dc:d7:85:
0b:bc:c9:6e:65:72:46:41:dc:2e:54:61:df:6b:38:
05:51:f5:2b:ea:c8:f7:85:10:c6:08:17:8b:2b:ea:
e8:8a:e8:13:53:89:27:46:36:91:fb:b5:e2:6c:7b:
df:dc:58:c4:30:6e:ec:99:96:26:12:10:3f:85:19:
13:6f:e0:46:2a:be:0b:51:c6:d9:b1:38:cb:bc:21:
14:7b:5f:8e:64:5b:f0:00:49:56:03:dd:4b:7e:cf:
eb:6e:f8:10:49:5c:8c:b2:04:3b:5b:df:dd:17:a3:
9b:61:70:c5:f7:6f:98:62:b4:bb:81:8e:1f:1b:53:
18:0b:bc:60:14:84:f7:b4:3d:95:0d:f2:03:e5:45:
0f:b5:62:25:2c:16:73:0a:13:f0:08:ab:3c:a3:32:
2d:ac:41:15:95:f3:4a:c6:ce:20:6a:1c:37:60:df:
85:80:a4:2d:0f:7b:93:61:e0:ab:9c:59:ca:6a:3a:
28:06:4f:bf:bf:14:d4:c0:43:f9:bb:31:ff:50:8b:
cb:e1:a4:e9:08:8d:4a:5c:82:71:55:7d:09:e2:1f:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:43:07:CE:E8:0A:11:62:FA:56:0C:7A:8B:32:D1:C7:87:E1:E9
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4d:7a:e1:28:5f:4d:c4:60:cd:0f:2c:0b:28:ab:08:73:b1:
89:4f:cb:b0:4a:10:4b:26:36:70:28:ec:be:de:d5:64:6a:7b:
d5:28:5b:43:2b:3a:aa:81:e5:bb:c5:73:f6:bf:f7:c6:ec:67:
0d:e6:a6:01:9c:7b:4e:d1:74:67:b9:5a:eb:0c:98:83:64:53:
2c:96:43:b9:7c:8a:29:99:a2:10:dc:e9:a6:e6:aa:d2:91:8c:
a0:9e:81:6f:1a:7f:42:31:59:f5:87:8b:76:30:0a:60:d0:90:
3b:8f:0d:d3:27:e3:bd:43:d4:6d:25:dc:9b:7d:81:68:1a:b8:
fc:b6:92:e7:42:69:31:96:ef:57:a1:8b:ee:5a:0f:15:5b:21:
e9:cf:f2:41:17:26:8f:11:0d:2d:4a:9e:39:64:9e:3e:ae:34:
ce:93:16:83:0d:7e:62:ec:79:ce:4c:68:33:41:c1:b6:15:4f:
1e:37:2a:3c:8b:95:d7:ee:25:98:e2:fd:1d:21:18:e9:81:1e:
03:e3:af:9d:ee:f6:73:39:53:0f:a1:ec:cd:33:43:f8:fe:fb:
06:8f:32:f2:ee:11:d0:04:a8:a9:4e:d9:f7:87:fa:c7:e6:07:
11:04:98:12:58:4d:cf:ef:b2:2c:1c:32:26:56:ab:cb:8e:a3:
8d:83:36:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:34:39 2026 by rpki-client