Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: YCXNeFZwYP3RclOrSqf2ZkSW3ao7dXzMWwL7B+WORRs=
Subject key identifier: 38:BA:B4:BB:38:61:F5:73:99:1D:FB:AF:1B:C1:8B:CB:C9:33:50:4E
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 019CA9B3600D098EB577ED600B52700ACDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 0588
Signing time: Sun 01 Mar 2026 14:00:30 +0000
Manifest this update: Sun 01 Mar 2026 14:00:30 +0000
Manifest next update: Mon 02 Mar 2026 14:00:30 +0000
Files and hashes: 1: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: SEUAjgT5c9wqqsulyvCMcI37BMRk5BhAak/ejBXTqJc=)
2: XuITUG_nXLtJk8wz6ifMhssSuak.roa (hash: 5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:60:0d:09:8e:b5:77:ed:60:0b:52:70:0a:cd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Mar 1 14:00:30 2026 GMT
Not After : Mar 2 14:00:30 2026 GMT
Subject: CN=38bab4bb3861f573991dfbaf1bc18bcbc933504e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:30:b1:c1:3f:6d:7e:5e:1a:0f:c4:36:26:
61:c0:40:5b:d3:2e:77:53:bc:39:b1:09:32:7e:3f:
87:a3:ef:53:62:77:50:16:ac:ec:95:82:64:0c:ae:
ec:5b:51:50:11:4a:e4:ba:d4:ec:76:31:14:61:a4:
86:1f:33:ee:61:e3:bd:66:d5:5f:c6:03:c6:89:d2:
d0:7a:ce:e4:93:38:26:dc:49:55:fe:ef:7f:fa:cd:
3c:13:a5:31:ab:ec:73:e8:75:2d:5e:ea:99:58:cf:
bd:36:e9:df:23:48:2e:ed:1c:7d:7b:35:f7:54:20:
8b:09:8b:cf:e6:66:0c:f8:66:25:26:04:17:0f:49:
ef:a6:9f:4e:ec:ef:a2:8c:7b:b6:8d:bc:7e:fd:65:
77:98:45:59:da:f4:75:2c:c6:53:1d:e7:3f:e4:0f:
47:a3:78:38:84:59:cc:c9:0a:e2:b5:ad:0e:f0:27:
37:b6:2b:8d:07:27:74:f7:09:9d:01:fb:98:25:e6:
02:e0:3a:77:a9:df:1d:f7:d7:1e:6d:8c:09:00:c7:
dd:4a:3c:d0:fa:c2:4f:3c:13:7a:7a:31:23:44:24:
cd:b0:4a:ba:81:df:bd:94:9f:ea:c5:9c:17:f6:a4:
64:ee:68:c4:37:24:3d:a1:bc:9c:e8:20:22:6d:a9:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BA:B4:BB:38:61:F5:73:99:1D:FB:AF:1B:C1:8B:CB:C9:33:50:4E
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:85:87:39:d7:e3:62:0b:cc:74:46:6b:45:fa:74:2e:ff:de:
ed:90:95:51:63:25:c2:27:5e:b9:c8:09:f7:b6:64:59:c5:ed:
a5:7c:31:42:f2:67:8a:d2:a2:f7:9b:19:fd:f0:a7:e6:dd:0b:
3f:4a:69:9e:38:b9:9f:9f:53:9c:36:82:51:52:26:e6:f4:b9:
06:85:ba:32:af:c5:d3:ba:ec:6c:ad:64:05:63:45:72:10:a2:
05:40:88:d1:8c:77:a5:af:ec:06:ec:ab:ba:d8:70:20:2c:59:
ea:04:48:ed:e2:f6:fe:f5:e9:4e:96:9c:a4:a7:7b:df:1b:6f:
51:33:d5:fb:51:d6:c2:37:fd:c1:90:55:d1:c2:0f:3b:8e:3c:
0f:c0:c5:b5:ff:06:a3:7c:64:81:d4:ec:2f:30:5f:b9:c7:5f:
14:e6:f6:33:06:11:9a:d3:ab:56:e6:e1:c1:03:59:e6:68:01:
c6:54:b4:6d:50:6c:76:09:8e:6f:9d:f9:11:0a:79:d8:60:80:
22:fd:da:23:4f:7f:ac:cc:83:e1:fd:4d:1c:13:62:89:98:18:
99:88:31:34:0d:d5:64:33:1c:ae:38:92:22:90:df:6f:f4:18:
99:3f:f3:40:5b:5a:27:b4:3f:e1:2e:ae:9f:5f:e8:d0:9a:1f:
09:16:dc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:58 2026 by rpki-client