Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: EP8lFEp8t1iQTv0Lh5SW6LFf+iAOMXr6NDkgnb3lctw=
Subject key identifier: 18:5D:B6:59:1E:0A:1C:F5:47:A5:94:A7:21:64:05:79:89:3B:E7:8A
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 01A1DEDEE07216E8C0EC7377821F05A15589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 0C07
Signing time: Sun 15 Nov 2026 11:01:50 +0000
Manifest this update: Sun 15 Nov 2026 11:01:50 +0000
Manifest next update: Mon 16 Nov 2026 11:01:50 +0000
Files and hashes: 1: 4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa (hash: 9pkWaCiovhlv2wqBCLqW3gVUQadAo/HKtdeFnVdYabQ=)
2: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: e/Hfug01jM6/oP1kEkVLNkYD4ro9Cig2rhCuE9+oM2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:e0:72:16:e8:c0:ec:73:77:82:1f:05:a1:55:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: Nov 15 11:01:50 2026 GMT
Not After : Nov 16 11:01:50 2026 GMT
Subject: CN=185db6591e0a1cf547a594a721640579893be78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:20:0d:00:09:ba:ce:6c:e2:30:66:b5:25:
fe:be:e1:8d:d8:60:83:92:ec:06:17:a2:50:51:17:
dd:d4:0f:b8:f3:cf:fc:7c:e0:51:93:df:2f:d1:fb:
3f:f2:46:83:4b:be:00:3f:e7:56:bd:e7:71:0f:2b:
18:25:b8:10:1c:f7:e2:a7:31:13:6b:51:82:fa:de:
31:21:e1:28:b7:95:b5:5f:c7:da:75:57:94:79:c1:
c0:9b:ad:e8:53:7a:3c:41:cd:1b:ab:8d:bb:75:24:
5f:fd:ce:67:bb:13:2c:62:97:d4:07:67:1a:cb:4f:
65:66:f4:14:f0:cf:ca:39:22:19:98:00:90:69:37:
b7:d1:91:fb:b9:80:78:c7:a0:c7:ac:1e:9a:b2:f7:
f7:3a:e7:08:b1:72:d2:c9:18:f3:9f:d7:18:ed:e3:
80:fc:60:71:1b:65:e5:0e:65:8f:30:d9:e4:b8:61:
08:81:59:56:71:4a:53:2b:97:ca:45:2d:fe:07:14:
15:30:13:b0:cd:9d:5d:69:1d:a3:44:dc:f4:e8:7a:
97:8f:aa:f5:01:82:93:4b:b1:f9:22:ba:72:5d:4f:
b7:dd:29:8f:a6:81:a3:dd:6a:3d:e8:5d:80:9f:e8:
76:20:dc:4c:e7:dc:a1:67:d1:87:f3:00:9b:92:fe:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5D:B6:59:1E:0A:1C:F5:47:A5:94:A7:21:64:05:79:89:3B:E7:8A
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c9:27:d0:08:16:73:e3:17:87:75:1a:c1:c6:e0:d2:a2:4a:
51:ff:2a:52:9a:73:ea:94:8a:59:c6:3d:21:b4:48:e2:e4:a8:
a7:5d:9b:37:6c:36:0d:ec:a3:1d:a8:ff:0f:86:8b:a4:b1:43:
d1:0e:47:5c:ae:d1:b6:f1:ca:bd:60:75:c1:43:32:35:8f:3d:
92:77:a5:6b:f9:c2:91:3a:12:c7:18:a0:00:39:78:e2:af:78:
6d:21:7c:6f:32:d3:f8:7c:6c:31:43:f4:19:51:91:26:e1:4c:
86:27:f2:54:7d:d5:1b:a3:4e:81:05:6e:5e:e8:bf:75:98:64:
71:d3:16:c1:84:d1:a4:36:41:e3:7f:a7:44:49:42:c2:62:f6:
c4:05:ba:ed:c7:98:53:74:56:75:86:38:ac:9c:b3:63:20:1f:
1a:09:23:3b:df:9b:b9:d4:14:1d:f1:0c:db:b9:8b:09:a7:80:
29:ba:0a:8a:af:41:e5:dc:22:5b:c7:06:f6:1b:92:43:cf:b2:
78:e0:16:bc:c0:b0:d6:00:ff:08:2f:b7:2e:4c:af:e9:7a:fe:
07:17:9b:b4:2c:66:f5:87:10:f0:86:8b:81:db:99:f4:f7:6a:
10:9d:38:f6:a8:a4:5d:cd:99:01:e3:26:b2:0f:88:6f:8d:02:
5a:c9:ac:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:35:22 2026 by rpki-client