Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier: +DlLFa8fD4YGo5EEfgJceo91tye1QE/iKRTYzBP/P7k=
Subject key identifier: C2:15:D4:2E:E2:F0:BC:87:7F:4F:B5:71:B7:3F:1B:DF:3D:04:64:CD
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial: 019D269637C23B1DC34FAC1BC54153AA89D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 20:01:12 +0000
Manifest this update: Wed 25 Mar 2026 20:01:12 +0000
Manifest next update: Thu 26 Mar 2026 20:01:12 +0000
Files and hashes: 1: 0WpGctn3iHwcCfz1HyZ1-r-vlc8.roa (hash: FHZ/JIyqvLJTAVxRV45KR0WJzUtCxqF4aecsFoB2jfo=)
2: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: zc0Bzj1Jq10BPDt3uOE7FFnuoj7yBnYgztlfu2kZrTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:37:c2:3b:1d:c3:4f:ac:1b:c5:41:53:aa:89:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
Validity
Not Before: Mar 25 20:01:12 2026 GMT
Not After : Mar 26 20:01:12 2026 GMT
Subject: CN=c215d42ee2f0bc877f4fb571b73f1bdf3d0464cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c8:1c:4a:5f:c9:28:7d:c1:3b:18:77:af:f0:
7b:3b:15:c0:7f:7a:51:1b:0b:b8:ca:de:6a:7d:fd:
e0:a8:df:8e:d3:0a:57:c0:da:5e:b2:3f:ff:5f:41:
2f:45:64:de:11:dd:a8:d2:b9:a9:75:24:44:ed:7c:
8c:8f:bb:43:c3:a9:19:0e:ae:66:a9:f2:81:fb:17:
72:68:c5:6a:5a:8d:8c:8b:0a:ed:77:ce:91:24:64:
27:dc:32:73:bb:e6:3c:14:2e:14:91:d1:c9:52:10:
21:8f:05:74:d2:75:4b:0b:5f:76:79:69:bd:2b:17:
bf:79:ae:d6:7e:cd:45:e2:33:05:5b:d1:79:ae:d0:
59:e5:f6:da:11:09:d0:a7:5f:ef:d1:ac:3b:3f:12:
e3:64:28:63:66:cc:83:fc:74:7f:ca:c8:b1:88:1f:
53:00:5d:44:37:db:0e:f4:b4:8d:5b:db:ff:85:7a:
2f:65:f3:48:dd:03:8f:7d:5f:fb:fd:b1:1b:ea:4e:
89:7b:d4:a5:9d:e0:ef:70:de:4b:dc:ca:3f:a0:d6:
1f:1b:cb:15:8d:be:c5:ac:15:e6:4a:2f:f7:e4:41:
b1:6a:b2:b0:32:9f:d7:11:9a:38:ed:9f:14:d6:0d:
d2:4e:61:92:47:ca:0f:ee:10:bf:13:94:0d:f7:7c:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:15:D4:2E:E2:F0:BC:87:7F:4F:B5:71:B7:3F:1B:DF:3D:04:64:CD
X509v3 Authority Key Identifier:
keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:78:0e:a3:ec:c4:99:b9:95:40:c9:af:95:d8:4c:a1:f8:94:
08:1f:3e:75:5c:37:7b:61:99:e4:01:ed:dd:6e:00:3e:5c:c9:
8d:95:12:8e:25:91:f4:df:55:95:dd:8a:8d:2a:ad:27:01:62:
17:14:3d:46:6d:3a:26:10:71:d8:7b:63:e7:fb:d5:84:e7:3f:
69:c7:ee:47:0e:fd:3e:65:de:97:c3:a6:24:7f:87:d5:7e:0d:
ef:3d:09:08:2c:ea:08:8e:49:ee:c6:ed:d5:15:9e:f3:c4:af:
62:59:f6:87:fb:8e:7d:cc:f3:9d:0a:0e:63:5b:fb:22:6c:49:
3f:29:e7:48:05:65:f7:42:dc:d7:d3:12:c2:7a:a9:5f:3a:43:
90:28:4a:be:64:f5:51:6b:3c:4f:e8:d0:0a:b6:1c:79:91:de:
10:ce:9f:3c:60:50:c8:ad:d3:c5:79:37:76:28:19:16:ad:e8:
f8:b5:51:c6:bc:ce:0f:cf:ed:c6:93:f0:34:75:57:3c:83:75:
5a:98:8e:2d:f0:a4:85:12:f8:b9:52:84:c7:d3:e3:c0:17:dd:
9d:d9:59:7f:e6:76:24:93:df:2c:f3:5a:ff:4d:48:4a:6a:8d:
c9:9e:ac:4e:98:b6:a0:48:cf:bf:45:e2:ca:5a:18:62:38:e4:
2e:2e:87:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:19 2026 by rpki-client