Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: wz8Nd4pMeFdvvTOo5KqGFLUuSTv3JY47i1BOKPqb6g4=
Subject key identifier: 84:6D:6A:ED:6A:CE:52:A8:AD:5D:AC:D0:D4:F5:CC:34:6C:FE:A8:58
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 019D99CFDE47A20F3997FA4416DBCCB1E93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 09D1
Signing time: Fri 17 Apr 2026 05:00:30 +0000
Manifest this update: Fri 17 Apr 2026 05:00:30 +0000
Manifest next update: Sat 18 Apr 2026 05:00:30 +0000
Files and hashes: 1: 4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa (hash: 9pkWaCiovhlv2wqBCLqW3gVUQadAo/HKtdeFnVdYabQ=)
2: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: QEXoIy8mnyBwT/yWhgjtCLvtTaHq+wKJATm8b5zDfDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:de:47:a2:0f:39:97:fa:44:16:db:cc:b1:e9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: Apr 17 05:00:30 2026 GMT
Not After : Apr 18 05:00:30 2026 GMT
Subject: CN=846d6aed6ace52a8ad5dacd0d4f5cc346cfea858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:92:ac:7e:f6:d3:27:75:eb:8e:39:34:b0:
c6:59:e3:fc:a6:33:07:47:39:cc:ae:72:df:9d:bd:
17:37:10:02:e6:e3:02:09:c8:e7:54:d7:49:43:f7:
a4:9b:34:b9:63:2f:c6:82:30:03:bf:d0:38:5b:26:
87:c2:9b:83:96:62:95:13:ba:d2:b8:bc:54:89:a1:
ab:9c:b0:0f:09:38:75:46:a7:e2:31:37:1e:87:a5:
9b:b3:91:32:da:98:ec:8a:2b:cc:59:5f:da:b5:05:
65:75:b8:d0:8e:32:f4:40:89:9b:7e:54:0a:8f:71:
05:f5:55:cf:90:c4:6a:73:7e:5f:1f:b3:8e:af:c8:
b6:3c:2b:6d:99:92:87:c4:8a:d2:9e:95:89:4d:24:
60:89:4d:56:77:75:ed:d8:c4:b9:d5:6b:e4:4d:b0:
b6:6e:8b:71:2f:46:8e:85:e0:87:e0:a1:65:51:14:
dd:e6:cc:6b:a6:3b:66:82:12:23:74:18:83:47:3f:
e1:16:0d:ef:ba:e3:02:96:82:8a:7f:62:63:4a:e3:
99:33:58:c5:8f:e3:72:58:7b:a3:35:a3:38:c8:f3:
0e:94:99:bd:c2:6e:5d:38:bf:f4:3d:06:83:a3:f3:
fb:a3:53:bf:b2:f6:9d:a8:af:d3:21:8e:f3:48:a9:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6D:6A:ED:6A:CE:52:A8:AD:5D:AC:D0:D4:F5:CC:34:6C:FE:A8:58
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b6:98:78:81:b2:67:4d:8a:d6:e9:bd:d4:cc:51:8f:eb:2e:
8c:05:df:7c:6e:a1:6f:d2:fc:14:13:0a:f1:07:ef:88:d8:1d:
fe:01:85:5c:72:3e:d8:e6:31:40:75:1a:b8:51:f2:b6:4d:ac:
0b:b7:8d:69:7a:8b:08:7a:9c:4a:fc:18:1e:ae:74:bf:da:24:
1b:53:2c:af:46:e9:3d:92:ef:d0:bd:3d:25:de:a0:07:cc:84:
3a:af:5e:45:4f:77:74:20:07:e0:c0:f0:cb:0e:52:c0:b1:2d:
63:2d:f1:b3:06:80:92:e0:4e:04:b2:fa:5f:11:89:bf:65:ec:
ca:5f:26:59:63:94:da:1d:af:a9:3a:75:b7:6e:ff:8f:d4:24:
c6:52:b7:0c:e1:a7:61:ed:a2:82:67:74:87:b2:6d:e0:b0:f7:
7e:9f:87:b7:5b:02:b2:f3:33:33:31:d4:90:e5:d0:64:9e:72:
26:0f:7d:41:99:5f:97:3a:71:4f:68:5a:8d:57:29:90:09:cc:
0c:de:6c:c3:a4:7b:81:a8:58:f3:7f:24:1f:c3:37:b1:58:4d:
31:0e:e8:2e:d2:30:c5:43:50:38:a2:cc:7b:59:1b:09:c3:49:
8a:e8:ab:dc:a2:28:e0:94:64:d4:b8:5f:57:6f:6f:8a:f9:e0:
2f:e8:e0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:43 2026 by rpki-client