Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier: zRKvkH0MBgWw1jp6SzKqUdGj3GprQCF+49NuzbDNiaE=
Subject key identifier: BC:C9:9F:D7:AC:6C:4C:38:27:AC:37:5C:C9:38:D3:6B:C9:70:23:EF
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial: 019CAAFD254DF50AE578A4E9255147925079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: 0WpGctn3iHwcCfz1HyZ1-r-vlc8.roa (hash: FHZ/JIyqvLJTAVxRV45KR0WJzUtCxqF4aecsFoB2jfo=)
2: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: na6caonCS+mi1RJ27otXSq/+I7Sdvrpym7R37HRYd6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:25:4d:f5:0a:e5:78:a4:e9:25:51:47:92:50:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=bcc99fd7ac6c4c3827ac375cc938d36bc97023ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:47:b2:a6:7a:c7:ef:55:be:cb:d9:28:46:
a6:be:1a:b0:35:f4:25:0b:cb:57:e5:31:99:b9:10:
67:a7:c5:ec:e0:70:5e:52:0d:3e:cc:f4:96:e5:58:
1e:d7:c3:3d:d6:82:24:9c:6f:e6:b5:cc:f4:5d:4f:
cf:81:a9:ec:4b:6e:86:81:ed:6e:68:7a:b2:b0:d6:
65:88:fd:42:d1:13:e3:a7:d9:be:7d:f3:db:63:f8:
7c:5a:72:4f:44:bf:9b:0d:09:f4:61:9d:a4:cd:2e:
b2:34:6e:cf:51:1a:a4:02:48:5d:7c:d7:2f:ce:58:
d9:ce:3d:29:84:aa:fd:ba:65:31:2b:9c:46:d5:5e:
75:93:4c:d9:72:3e:fa:47:e3:50:81:ce:18:c5:18:
99:14:2a:d0:7e:c8:b8:21:cc:9b:6d:82:50:42:6f:
a2:49:55:25:a5:75:16:a2:95:ea:ae:c0:19:a5:26:
1f:5f:19:7c:4e:4d:97:cd:ee:c0:01:be:5c:c9:f9:
97:95:a4:eb:6f:02:9e:97:24:4a:e9:ad:af:e1:c6:
2e:a4:9e:ea:0b:3d:17:1a:11:f1:69:52:a8:29:50:
d8:fd:a4:12:da:a9:c7:3b:ab:79:b5:e5:0b:dc:b5:
3b:67:ab:58:28:0b:17:44:85:00:c8:db:57:fc:0a:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C9:9F:D7:AC:6C:4C:38:27:AC:37:5C:C9:38:D3:6B:C9:70:23:EF
X509v3 Authority Key Identifier:
keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:94:1d:34:75:2f:53:d5:7b:ec:1c:c5:7a:98:e1:06:a5:4c:
d9:d1:3e:4a:5a:f4:d1:70:0c:6b:57:30:ce:62:34:1d:4b:86:
69:f0:b1:99:f5:7d:da:13:85:6a:b9:94:4f:a5:64:97:21:da:
dc:b5:b0:8e:90:b4:51:39:01:91:c7:07:c9:1f:3e:97:0a:1d:
e0:60:68:73:7a:3b:d4:38:8b:e9:5c:16:f9:1a:02:8e:5f:bd:
45:a4:24:bf:b1:18:5b:9c:e5:d0:e9:ff:00:29:0d:c9:b1:f2:
73:0a:c0:98:1a:e9:83:99:d1:72:16:32:52:2e:59:e6:71:01:
5c:8b:9f:0e:c9:fc:05:79:60:89:1c:83:a2:15:bb:1b:c8:7a:
2e:e2:52:64:b9:d5:a4:ff:cd:a9:46:e2:54:e0:b8:58:7c:82:
2f:4f:16:4e:82:1b:7c:14:bb:cb:b7:13:ee:e1:01:34:35:b1:
a2:cd:ee:51:8a:08:55:b2:cd:d7:65:14:a8:22:da:a9:23:35:
26:7d:47:42:a8:fb:38:c2:23:83:ac:a7:57:cb:30:37:67:99:
17:18:39:89:5a:ee:a1:3b:14:75:ff:7a:aa:04:f4:9b:c9:78:
57:15:c8:4d:82:90:d9:84:cb:9c:00:6a:9e:bf:f9:b7:e4:e8:
0f:e6:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:52 2026 by rpki-client