Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: kqThkOiHFC3o+6LY7AACbQLt6KAQzkM8TC/0PhQAWXU=
Subject key identifier: 51:1C:03:A5:8F:73:78:FF:2C:F3:E0:72:F0:B4:A8:D0:3F:1A:17:59
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 019FAA882BFA90CA4C94FD17C3749A3135EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 21:01:17 +0000
Manifest this update: Tue 28 Jul 2026 21:01:17 +0000
Manifest next update: Wed 29 Jul 2026 21:01:17 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: lghAVglcnVVmonyXj5in8JBE84r0ykDJTuUaOlT174k=)
2: ublBeG3Dv2dax-qI6ONUnMwIZ0A.roa (hash: NVX59SDqnzDr42Kpw57WUClf3jkUfdSkfds/tST6OaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:2b:fa:90:ca:4c:94:fd:17:c3:74:9a:31:35:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Jul 28 21:01:17 2026 GMT
Not After : Jul 29 21:01:17 2026 GMT
Subject: CN=511c03a58f7378ff2cf3e072f0b4a8d03f1a1759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:04:fe:dc:28:2b:8b:24:2e:89:c0:a0:3e:
cc:f4:75:d7:84:37:13:ce:f5:35:7e:91:a3:02:0f:
12:a7:24:cf:c8:32:2b:ba:c7:85:9b:be:db:26:ed:
bb:34:df:96:ad:e0:9a:c2:71:82:b8:22:5f:05:a7:
ad:91:5e:89:d1:f2:f0:dd:88:47:3c:c2:15:7e:c6:
5c:25:72:02:56:b7:b3:6f:38:a6:ea:72:9b:af:de:
86:8f:43:52:ff:f7:1c:35:1a:a9:dc:08:ae:4c:29:
00:5f:04:9c:34:18:e0:9e:33:be:ae:e6:58:95:04:
88:5c:5e:0d:9d:2f:ba:3a:46:9e:2d:94:e7:23:33:
f2:98:30:12:ba:0d:27:0c:58:d0:ab:15:b9:f4:6d:
a5:2c:8d:66:b2:08:50:e2:3d:79:8b:ee:2e:be:d3:
6d:2d:30:5d:70:ae:0c:77:9e:34:0f:14:3d:7d:6b:
82:57:14:29:d4:ca:63:8e:0d:7a:0d:63:b6:13:ac:
49:a8:84:2d:df:2b:9c:8b:cc:a1:98:64:27:01:e6:
1b:46:8e:14:31:37:bb:6a:45:6b:e9:b6:44:00:06:
1b:1a:ad:23:68:5f:7e:3d:a3:dc:33:59:5b:bd:5b:
2a:89:e7:30:f7:7b:c7:a8:24:19:b8:3e:33:e3:41:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1C:03:A5:8F:73:78:FF:2C:F3:E0:72:F0:B4:A8:D0:3F:1A:17:59
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:37:52:00:5a:03:ad:bd:7e:0b:6a:8c:82:7a:e1:2a:42:12:
c9:d7:42:61:ae:4b:b2:c4:4d:72:48:64:ff:fd:06:db:5c:d9:
36:59:db:93:9d:8f:1c:82:dd:8e:a3:b9:d1:46:37:83:a8:a2:
8f:2a:a2:3d:33:ae:62:2f:d3:b6:8c:8c:4f:eb:88:ff:e0:0f:
d3:95:09:48:85:65:2b:b5:07:34:c3:0f:5a:db:a8:8a:91:92:
e1:3b:df:20:73:6a:6f:4a:6d:ca:d5:f2:21:f4:8e:18:4c:0b:
3e:04:30:c0:12:c8:2d:68:67:cd:b1:ce:91:51:96:fc:38:2d:
92:19:54:e8:5f:c5:d7:7e:16:c5:7b:86:63:a1:bd:09:96:0e:
17:19:40:ea:e6:47:1a:02:ff:b7:bc:bb:1f:04:4a:27:e9:be:
63:c6:62:de:64:03:e6:d1:56:40:60:cb:8b:12:aa:ad:10:b7:
bc:30:26:30:4b:1d:bd:a1:3a:45:0f:99:b1:74:56:1f:1b:e8:
28:57:4b:72:31:80:51:a7:20:07:8f:8c:8f:2a:25:2f:f8:30:
77:2e:ae:16:55:e3:8d:40:e1:08:ad:64:cf:15:8b:db:a6:06:
5c:22:ac:d2:72:ae:e7:70:4d:b6:4e:14:62:a7:77:52:2b:b8:
6e:53:08:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:55:44 2026 by rpki-client