Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: z8GK8/yyCJjEPN7GgJXcYopamnYCdSPosQjRGHSOmLw=
Subject key identifier: BE:92:5C:19:23:4E:AC:C3:5A:3C:BB:5C:8C:17:EA:46:EC:B3:87:EA
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 019DA4C1678F458C63FE98C6B6A4F48B07DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 060A
Signing time: Sun 19 Apr 2026 08:00:31 +0000
Manifest this update: Sun 19 Apr 2026 08:00:31 +0000
Manifest next update: Mon 20 Apr 2026 08:00:31 +0000
Files and hashes: 1: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: 4avDbIDIJl8v447TWFmQnsIyqetuxDK7MufpPfIVc4I=)
2: XuITUG_nXLtJk8wz6ifMhssSuak.roa (hash: 5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:67:8f:45:8c:63:fe:98:c6:b6:a4:f4:8b:07:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Apr 19 08:00:31 2026 GMT
Not After : Apr 20 08:00:31 2026 GMT
Subject: CN=be925c19234eacc35a3cbb5c8c17ea46ecb387ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:b4:cd:1d:45:bd:0c:e5:ad:8c:54:91:2a:
2a:00:07:d3:3d:cf:20:34:d1:51:43:7a:fd:1e:85:
b8:e5:3f:3c:d1:01:98:52:eb:0f:c5:11:38:30:db:
61:ff:e7:8c:48:7d:ff:1c:de:8b:e2:a8:cd:dc:4b:
85:7f:1a:fc:51:83:65:43:3e:2a:0a:29:27:ac:e5:
ff:1f:e9:4e:73:f9:ad:99:e1:b6:0f:c9:a2:cb:b0:
0b:cc:9d:d7:a0:d3:6b:ed:1d:8e:7d:03:56:eb:3d:
4a:60:70:4f:bb:28:93:9e:99:d5:71:1d:18:07:ca:
01:42:4a:ff:ca:df:ae:1a:d0:76:a2:ee:64:5a:6f:
2f:58:52:72:6c:0f:bb:05:e7:a0:25:29:f7:0f:fb:
16:38:4a:3f:1e:11:45:fd:b5:21:44:a0:d6:db:de:
86:c5:60:1a:ad:2e:ee:f3:f5:46:ad:51:b2:50:5b:
ff:f4:c9:80:06:b3:49:44:42:f2:56:28:6c:64:29:
49:99:cf:51:01:17:50:98:24:10:bd:39:9c:35:2b:
8c:0a:f6:6c:74:24:01:fc:b0:33:9a:f4:d0:0d:33:
d6:6a:59:21:2f:d7:b9:af:24:e3:64:f2:4e:56:36:
c7:3e:5e:db:19:3e:eb:63:13:cd:fa:3b:de:a2:47:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:92:5C:19:23:4E:AC:C3:5A:3C:BB:5C:8C:17:EA:46:EC:B3:87:EA
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bd:ce:aa:65:51:01:8d:9c:b6:df:13:34:64:2f:66:e3:d1:
6c:e4:21:25:c6:94:91:ae:0e:2e:ac:c4:2a:e3:bd:7b:c3:02:
21:d4:61:1b:9d:87:cf:94:7b:40:f2:8e:38:aa:1b:d8:1c:e3:
01:ac:7d:16:56:1c:43:fc:75:38:a1:b1:8f:77:98:91:38:70:
96:b8:2f:e0:e7:ad:c0:5c:d9:d1:cb:16:9c:eb:e6:d1:5f:de:
b4:23:5f:2e:2f:48:a7:90:a5:96:2b:cf:40:34:21:61:1f:ae:
20:67:3f:b8:db:df:f8:87:08:ad:9e:e0:76:43:e5:f4:ca:81:
8c:c7:ef:27:c2:63:83:5e:a9:0c:a2:3d:2d:53:f4:f0:b8:c9:
a3:81:8e:71:f3:7e:64:59:f1:9a:c2:b3:2f:4e:f1:81:d8:1f:
85:1e:27:d4:fd:eb:b4:69:ea:fd:b6:f0:7f:5a:79:8d:5a:44:
cf:97:fc:2f:6a:bf:d1:a9:f3:76:b2:e6:de:39:7d:1e:ab:89:
fe:b7:3a:47:94:43:8a:85:f1:78:87:c6:84:05:8a:57:d1:cf:
71:f2:11:b0:aa:9e:d1:1e:6b:09:3d:b7:3b:0b:04:8f:44:a3:
c0:64:5e:cd:0d:e8:9a:61:ae:6d:fc:b6:72:65:98:6f:d4:9e:
f9:70:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:50 2026 by rpki-client