Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: q5iCrnQ6rT5nsZN0ZWvnTVNe+Ka+TOdYx6rsgmbkwNE=
Subject key identifier: F0:A1:8F:27:BB:BE:F2:5F:B4:D0:80:52:23:AD:76:3E:39:13:D5:E7
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 019FAAF60D0096E771EDD72BB855AAE2A934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 0AE3
Signing time: Tue 28 Jul 2026 23:01:19 +0000
Manifest this update: Tue 28 Jul 2026 23:01:19 +0000
Manifest next update: Wed 29 Jul 2026 23:01:19 +0000
Files and hashes: 1: 4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa (hash: 9pkWaCiovhlv2wqBCLqW3gVUQadAo/HKtdeFnVdYabQ=)
2: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: /Ogmvuv9+IzAITO3I7ikHP0rj4oQuJVjlYtoSIZ4xfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:0d:00:96:e7:71:ed:d7:2b:b8:55:aa:e2:a9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: Jul 28 23:01:19 2026 GMT
Not After : Jul 29 23:01:19 2026 GMT
Subject: CN=f0a18f27bbbef25fb4d0805223ad763e3913d5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:65:bf:34:d7:fa:73:fc:6f:ae:79:a8:58:
b4:c4:40:65:c3:62:5e:a4:57:55:f5:f5:00:fe:5c:
b5:a1:70:68:bc:78:37:aa:03:4e:94:b1:c4:4a:f7:
bf:67:7b:96:bc:fb:b5:5f:63:8e:cc:99:49:6a:5e:
d4:9e:4c:3f:43:54:b6:46:f2:07:39:b9:13:c9:01:
4a:1d:77:b9:3a:24:b1:1a:78:25:6d:a6:ef:9e:09:
80:4c:2d:f1:32:1e:96:80:7e:07:87:66:95:00:ec:
5e:c3:21:17:62:47:2c:56:ac:f3:b0:38:16:bc:3f:
c2:b1:7c:24:19:6d:22:66:39:7d:d8:60:92:b3:e4:
e0:7a:1f:f2:49:fd:e3:28:bc:73:49:95:57:48:b7:
ca:8c:de:ce:0a:77:c5:07:11:28:fc:6e:45:73:a0:
9a:73:9a:9f:9e:43:e5:68:46:df:5e:c7:28:68:f8:
68:18:53:52:31:04:e1:f8:41:ed:78:af:52:aa:65:
e9:53:d3:2a:e1:6b:c0:e1:d1:0c:44:51:e5:39:44:
b7:da:93:98:53:cf:ce:88:8c:1e:fb:fa:9d:f2:73:
8f:44:64:7f:16:6a:ea:e1:7f:61:74:02:af:eb:ea:
0b:aa:34:7d:98:64:e8:10:9c:79:2b:b2:29:fa:f1:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A1:8F:27:BB:BE:F2:5F:B4:D0:80:52:23:AD:76:3E:39:13:D5:E7
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9d:8c:a3:61:e8:11:54:dc:8e:ae:b0:fd:86:53:0a:43:fc:
91:73:5d:6d:36:af:83:a7:81:a1:9f:b4:e5:0e:bb:82:73:87:
8c:f6:39:31:55:d8:14:ab:f8:90:4e:fa:87:fe:10:a9:ba:95:
31:06:cf:03:cb:bf:1e:8c:be:3b:28:42:d4:1f:0a:87:b4:f0:
0f:52:fe:c1:b9:b9:84:69:ab:16:d5:4a:b7:96:36:95:a9:ff:
d3:bf:25:42:c7:80:2e:67:f5:9a:43:96:9f:cd:ef:8f:cd:68:
7a:ca:71:d4:53:25:40:10:2f:3a:db:bb:85:32:75:3d:b3:23:
38:d4:17:f5:e1:6d:83:f0:0f:e5:dc:ca:b5:08:a7:34:6c:b1:
c9:16:96:07:4c:1a:a5:68:f7:a3:20:b8:02:e0:cd:a5:52:9a:
43:9e:dc:18:1d:07:c2:f8:9c:68:69:7e:ec:80:c5:59:67:9c:
a3:01:6d:e0:8b:7d:54:d7:a2:fc:9f:86:e9:08:74:7b:cd:a3:
a7:09:44:a8:e7:64:ea:23:76:0a:a7:fc:dd:0c:df:51:59:88:
91:af:ea:f2:ba:9c:80:f3:86:10:f5:2b:2f:19:13:0e:43:93:
d0:f9:c5:bb:0e:90:b0:e1:9d:62:da:45:8a:16:f5:49:5e:0d:
cf:ff:58:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:25:21 2026 by rpki-client