
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: hCC7pqlkCyLqUqgqkHi0Wi05cJdXFWt7mgt6PWwBbWc=
Subject key identifier: C3:E3:44:3C:67:FE:0F:E5:60:26:29:B0:AB:A2:21:5F:CD:24:BF:55
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 01A0C25669B7541E2109B862C98090AF55FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 07A7
Signing time: Mon 21 Sep 2026 05:00:37 +0000
Manifest this update: Mon 21 Sep 2026 05:00:37 +0000
Manifest next update: Tue 22 Sep 2026 05:00:37 +0000
Files and hashes: 1: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: uguNlvl8Co2rM9mZk9NBTx+OfoGFWsuCMPlBL237F2s=)
2: XuITUG_nXLtJk8wz6ifMhssSuak.roa (hash: 5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:69:b7:54:1e:21:09:b8:62:c9:80:90:af:55:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Sep 21 05:00:37 2026 GMT
Not After : Sep 22 05:00:37 2026 GMT
Subject: CN=c3e3443c67fe0fe5602629b0aba2215fcd24bf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:0d:c0:65:26:8b:4a:40:c2:97:e7:1b:9c:
26:ca:87:bc:d9:f4:12:8b:9e:82:8d:c5:72:57:99:
cd:c1:11:ac:2e:18:de:9a:f4:77:0f:a7:91:02:fd:
4d:79:10:d6:95:50:af:a9:95:82:6c:fb:f7:b3:c2:
2b:e7:5e:7a:a7:cd:51:27:4c:a1:e3:2f:31:8f:9f:
51:17:ad:ae:0f:1a:b3:8c:f7:27:ed:8c:9c:fa:aa:
ad:0e:95:78:82:e5:92:87:9e:bb:a5:0b:1f:4e:12:
cb:f9:8a:16:d9:05:fc:be:8d:5f:67:9e:fc:59:71:
82:2f:ac:f4:ef:3e:3b:68:63:aa:a4:09:a9:23:ff:
c6:b8:70:7f:16:0d:09:7f:fc:5c:bf:9e:9c:29:95:
cf:5a:dd:f6:d0:17:25:51:ed:9e:30:44:3b:37:db:
ed:7e:6d:44:ad:fa:49:45:0e:6b:65:a0:92:7e:76:
dc:88:66:7b:a2:38:74:e9:b9:d0:f6:51:6c:99:35:
4f:34:73:7a:98:af:b7:5c:05:85:a1:1d:a2:ca:5d:
40:e2:75:79:bf:0e:9a:50:1b:f8:7b:31:dc:a0:7f:
fe:5b:d1:51:5b:1a:4f:b7:27:4f:bd:81:87:c6:56:
96:f1:d2:98:83:25:a1:bb:8c:6d:b0:b2:e1:10:d1:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E3:44:3C:67:FE:0F:E5:60:26:29:B0:AB:A2:21:5F:CD:24:BF:55
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:70:25:e9:69:64:7b:d2:51:a5:be:f0:9f:5c:bf:40:b1:a2:
d2:b8:3b:9f:cc:cc:a5:ca:bb:01:16:a4:2d:21:cc:14:94:b6:
36:81:88:f2:4c:5f:be:6f:8f:8d:85:f7:8b:fb:a4:09:c8:fe:
7a:d6:bf:4c:fd:a9:5b:c0:96:ad:d1:42:cb:95:e4:e0:d2:cd:
64:22:53:72:59:a7:6d:13:df:10:70:11:11:2b:88:db:33:7d:
c7:c3:0a:c6:0b:d9:62:cb:35:a7:1a:82:8a:90:05:9e:a8:f5:
0e:d4:25:5c:23:58:7b:67:11:23:40:aa:8b:aa:2c:7e:7d:e2:
63:5a:73:b9:08:41:7a:10:d1:2b:d4:52:e8:f5:f2:3d:9c:0a:
d7:da:c5:fc:70:22:43:66:93:d9:3e:e9:19:40:61:62:c8:da:
d7:15:c3:9e:00:d6:9e:d9:00:7b:e1:dd:08:22:bd:9d:df:1c:
f4:6c:d0:02:ec:cc:99:3d:75:b1:0e:e8:c5:57:8c:5e:24:82:
a0:6f:aa:3b:e1:ae:48:7d:73:14:7f:66:0b:fb:be:46:55:af:
12:4b:19:03:ba:f7:72:27:de:a7:25:1a:a2:bb:87:8f:61:cb:
c1:d9:e3:a4:d0:70:b8:17:b7:56:ad:fb:33:7f:90:6a:5d:c2:
af:dd:e9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:04:32 2026 by rpki-client