Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: vGbyfOamAbbEENkjD3IiUqT+HHU4pVORiBYEPylZ3xU=
Subject key identifier: 51:52:85:10:B5:1F:06:91:C3:45:34:5E:41:A4:FB:74:95:04:77:D8
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 019CAA593ABF54EE8663FD41AEAA1F27B462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 0955
Signing time: Sun 01 Mar 2026 17:01:40 +0000
Manifest this update: Sun 01 Mar 2026 17:01:40 +0000
Manifest next update: Mon 02 Mar 2026 17:01:40 +0000
Files and hashes: 1: 4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa (hash: 9pkWaCiovhlv2wqBCLqW3gVUQadAo/HKtdeFnVdYabQ=)
2: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: JFMjyL027WQR273Y+OG39Z3ekCIocBywNun6s2suBPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:3a:bf:54:ee:86:63:fd:41:ae:aa:1f:27:b4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: Mar 1 17:01:40 2026 GMT
Not After : Mar 2 17:01:40 2026 GMT
Subject: CN=51528510b51f0691c345345e41a4fb74950477d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:07:25:6c:2d:63:4a:b2:c7:30:25:83:4d:
00:72:7f:93:24:54:97:70:95:cd:51:e0:33:11:b2:
2c:39:e0:66:fd:94:57:35:0c:b7:3b:4a:8b:09:e8:
1e:5b:5e:1e:aa:f2:ed:00:31:80:b0:38:a0:5f:06:
67:eb:12:9a:58:3d:24:42:a7:ca:34:cb:f9:41:55:
a9:03:6a:46:c8:7d:96:6a:a2:5d:18:5b:90:3f:cb:
4b:85:6a:85:44:7f:0d:22:56:7a:19:7a:c7:a5:d8:
74:ee:b3:e6:67:57:93:5a:54:b3:3c:19:01:ae:df:
6e:ee:4c:23:09:a4:ab:7d:59:dc:46:eb:c5:86:a8:
79:8c:7c:1d:4e:9d:d8:69:4f:91:8c:63:b3:e4:31:
5c:9b:a3:4b:32:84:bc:99:ce:5d:0c:88:5d:83:c6:
2c:74:89:d3:09:9c:69:57:bc:60:f6:d4:0b:b5:55:
18:0b:b8:f5:e3:b3:86:37:1a:94:b7:07:e8:5f:3b:
d0:76:50:6c:d2:85:41:c3:80:3b:9d:94:f5:9c:20:
08:44:f1:1e:89:15:7c:18:83:c2:c7:7e:6a:35:69:
3e:33:a0:2d:8c:68:af:ba:20:3c:58:31:2c:e5:68:
8e:f6:64:c6:5a:c1:79:42:24:e6:c2:66:b3:b3:15:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:52:85:10:B5:1F:06:91:C3:45:34:5E:41:A4:FB:74:95:04:77:D8
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2d:a4:4b:e8:61:c4:7b:5f:9b:97:7b:06:b7:02:36:9d:20:
8c:06:77:c0:db:e5:d6:3c:5b:b5:31:58:86:8f:64:f7:c9:97:
9c:d7:30:59:39:34:11:c3:d4:e4:db:31:6a:54:08:48:42:3e:
2c:05:f1:7c:c4:75:a1:e1:08:71:6c:a2:b7:74:42:30:83:ed:
8d:bd:98:8d:f0:f7:cd:1b:c4:6f:c0:fe:9e:98:fd:13:23:13:
2a:4e:3a:88:b5:b1:bb:15:82:88:19:11:26:42:64:4b:37:db:
9f:55:20:33:43:d2:94:19:86:5d:e5:e3:67:08:16:84:1e:af:
2d:e1:5b:11:50:ac:5e:17:71:78:75:aa:4c:b7:0d:5d:39:47:
44:28:ad:68:7f:07:5c:ce:01:d1:89:81:03:a0:b4:f4:d5:07:
a6:a2:3e:48:df:f5:92:b8:0a:fb:a6:e3:fd:c7:0c:08:ef:47:
36:b0:bf:9c:0d:c5:5e:48:bf:49:ed:7a:92:60:29:79:f5:f4:
17:c3:84:75:34:b1:16:cd:c0:60:15:ea:67:be:03:d3:b9:3c:
ff:8e:13:0e:a8:d8:bd:cc:f1:d9:98:14:18:33:02:73:68:be:
49:ec:3b:b8:94:fb:11:1b:94:3f:6f:83:bc:1b:21:82:2b:87:
88:e7:ba:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:52 2026 by rpki-client