Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: ZhA+9+pcwci7dEwjpLEX5isj8deZDkQy9Upe6yCxJ7U=
Subject key identifier: EC:87:A3:41:16:76:92:9B:72:BC:AE:87:D0:61:E0:B4:77:68:ED:8F
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 019FAA50C3CF181A57E2AA72A92A73956716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 0716
Signing time: Tue 28 Jul 2026 20:00:47 +0000
Manifest this update: Tue 28 Jul 2026 20:00:47 +0000
Manifest next update: Wed 29 Jul 2026 20:00:47 +0000
Files and hashes: 1: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: w4JENGlTCpALgF5vqP0rPlB7MeptRoulo0+7NiRo6Aw=)
2: XuITUG_nXLtJk8wz6ifMhssSuak.roa (hash: 5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:c3:cf:18:1a:57:e2:aa:72:a9:2a:73:95:67:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Jul 28 20:00:47 2026 GMT
Not After : Jul 29 20:00:47 2026 GMT
Subject: CN=ec87a3411676929b72bcae87d061e0b47768ed8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:e3:69:47:8f:e8:cf:78:e6:23:ae:60:e5:
1b:a3:5d:52:06:bb:f6:ff:ae:13:69:cd:5b:38:a8:
f1:49:26:fc:3a:cf:9a:4f:ad:7b:2a:fd:29:01:91:
fd:a7:00:f8:22:aa:d2:84:b7:b0:1f:25:3a:45:4c:
ed:0f:17:64:56:4b:99:89:cd:10:19:0b:b2:e9:45:
dc:e3:15:26:84:c6:36:6f:c0:f4:49:2d:62:68:83:
2d:69:38:30:2c:ca:d2:53:ab:4b:fa:d2:31:49:07:
53:de:56:47:ae:0a:64:51:7d:95:84:76:b8:b7:9c:
29:45:3c:46:fa:66:ef:75:02:66:89:4c:24:64:5f:
de:41:c3:de:72:76:85:71:9e:c9:ce:d8:9c:24:6b:
0f:9d:a0:f5:1a:72:ac:ff:e0:15:91:d8:5d:d1:61:
1f:6a:3f:1d:fd:ff:f6:76:a6:6e:5f:20:67:6d:ba:
19:bc:17:ad:c5:fa:12:88:3b:e4:98:db:2f:d8:11:
bb:b6:12:16:34:73:2e:b9:a4:2f:b5:41:90:dd:a5:
31:7c:66:be:6c:52:de:9c:14:28:39:3e:a4:6a:e3:
18:68:4b:ac:e4:0a:7d:14:25:48:64:dd:93:ff:d0:
58:56:b7:65:b4:60:37:25:b9:eb:98:34:e3:a8:76:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:87:A3:41:16:76:92:9B:72:BC:AE:87:D0:61:E0:B4:77:68:ED:8F
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:66:2d:2c:e6:18:6a:40:ca:5f:56:46:7d:8a:7a:62:c6:6b:
4f:6f:2f:1f:45:fc:70:72:b2:cb:28:99:b7:ee:4d:e5:08:69:
15:ff:b8:48:00:9b:a3:96:59:4c:80:e4:ee:5f:d3:f5:23:c4:
c3:fe:f5:1a:dd:4f:13:dd:25:e8:d2:5e:b9:8e:90:51:89:98:
f1:6b:8c:9a:47:f9:a2:0f:98:c6:ca:a3:0f:c2:10:0b:b7:c3:
8e:9e:43:d7:a5:74:f7:8f:11:25:dd:7a:f5:41:4a:24:89:d9:
cd:f9:83:c5:62:be:e2:85:7e:e9:6d:64:c9:01:5d:07:b9:b5:
1f:1b:b7:97:c1:d6:13:7d:1e:73:d2:d4:68:cb:95:f2:fa:e5:
15:80:ea:12:2c:eb:b8:8e:d9:4e:9c:86:93:99:39:3f:86:7d:
24:d7:2d:68:4b:ab:78:48:fa:44:e8:f4:22:88:f3:44:e8:17:
4b:2f:4d:9f:96:d9:f8:10:e0:c0:06:07:af:81:eb:40:77:25:
40:9e:d3:06:cb:bb:9d:10:7f:f1:90:57:7e:c0:df:5a:ca:c7:
5b:60:5c:11:d4:d6:53:a9:fa:73:2b:55:2e:9e:5a:e5:b7:a5:
61:3f:6a:9d:34:53:46:e5:2c:57:44:3e:41:83:96:91:55:75:
7b:5e:2d:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUMPPGBpX4qpyqSpzlWcWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTgwYzQ4MzM3YmYyN2RiMmZkMDgzYzE3MmM2YTFjYzVk
MWQxN2MwHhcNMjYwNzI4MjAwMDQ3WhcNMjYwNzI5MjAwMDQ3WjAzMTEwLwYDVQQD
EyhlYzg3YTM0MTE2NzY5MjliNzJiY2FlODdkMDYxZTBiNDc3NjhlZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOzjaUeP6M945iOuYOUbo11SBrv2
/64Tac1bOKjxSSb8Os+aT617Kv0pAZH9pwD4IqrShLewHyU6RUztDxdkVkuZic0Q
GQuy6UXc4xUmhMY2b8D0SS1iaIMtaTgwLMrSU6tL+tIxSQdT3lZHrgpkUX2VhHa4
t5wpRTxG+mbvdQJmiUwkZF/eQcPecnaFcZ7JzticJGsPnaD1GnKs/+AVkdhd0WEf
aj8d/f/2dqZuXyBnbboZvBetxfoSiDvkmNsv2BG7thIWNHMuuaQvtUGQ3aUxfGa+
bFLenBQoOT6kauMYaEus5Ap9FCVIZN2T/9BYVrdltGA3JbnrmDTjqHZaewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyHo0EWdpKbcryuh9Bh4LR3aO2PMB8GA1UdIwQY
MBaAFPOoDEgze/J9sv0IPBcsahzF0dF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjkt
MjY2NGRhY2U5NTgwLzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjktMjY2NGRhY2U5NTgw
LzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWYtLOYY
akDKX1ZGfYp6YsZrT28vH0X8cHKyyyiZt+5N5QhpFf+4SACbo5ZZTIDk7l/T9SPE
w/71Gt1PE90l6NJeuY6QUYmY8WuMmkf5og+YxsqjD8IQC7fDjp5D16V0948RJd16
9UFKJInZzfmDxWK+4oV+6W1kyQFdB7m1Hxu3l8HWE30ec9LUaMuV8vrlFYDqEizr
uI7ZTpyGk5k5P4Z9JNctaEureEj6ROj0IojzROgXSy9Nn5bZ+BDgwAYHr4HrQHcl
QJ7TBsu7nRB/8ZBXfsDfWsrHW2BcEdTWU6n6cytVLp5a5belYT9qnTRTRuUsV0Q+
QYOWkVV1e14tyw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:31 2026 by rpki-client