Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
File: 84t8pB9ACCKQyorv3sS9KX067Aw.mft (raw, json)
Hash identifier: UlNCQ8WotGdiaLUlw6oX8ucDcPXBr2tZ57KjiPnRuww=
Subject key identifier: 09:C4:C2:BE:C8:32:BE:89:DE:5B:13:98:A5:A3:34:67:F4:D3:81:B1
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 019D28164F40E87B02681BB1234A256016BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:00:43 +0000
Manifest this update: Thu 26 Mar 2026 03:00:43 +0000
Manifest next update: Fri 27 Mar 2026 03:00:43 +0000
Files and hashes: 1: 84t8pB9ACCKQyorv3sS9KX067Aw.crl (hash: LEPCbyX8PhkGSroLc5T7h0gommKBFxe+l7BRQqa538c=)
2: LStG3MZHjClQlcvMSArKJ1HBwFQ.roa (hash: Bj6S9j6Jh7TL/tfR7BKsQeDq2b9zngVPJSvc5OTYm+o=)
3: eKqzfu-WsthZl9cMx3d4nPn0bsY.roa (hash: w2040uf1aDugISzQFmejjk14KHF8A3dboKdbggun6Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:4f:40:e8:7b:02:68:1b:b1:23:4a:25:60:16:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Mar 26 03:00:43 2026 GMT
Not After : Mar 27 03:00:43 2026 GMT
Subject: CN=09c4c2bec832be89de5b1398a5a33467f4d381b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:2f:f8:b8:ed:4c:5f:90:f0:a9:f1:4b:a3:
43:db:d1:07:17:f4:c8:b9:8f:4c:38:26:9a:cc:34:
d6:fe:24:4f:f6:e6:68:c8:dc:e2:19:c2:76:f2:75:
60:92:bd:9a:37:e9:be:4b:57:dd:db:b8:e8:50:4c:
62:06:29:7c:88:e5:02:db:ab:e0:2c:1a:5b:85:12:
63:07:d2:63:44:45:c8:3b:55:d5:43:d3:a0:1b:61:
fc:57:60:67:2c:c6:1f:40:ea:52:b3:6e:2b:e7:b3:
28:0b:92:30:b2:13:a7:1d:71:85:f6:4e:f4:9f:c2:
6b:f8:96:aa:f8:c6:b1:d3:7e:fb:bf:b8:15:2e:97:
1a:f5:34:d0:d8:87:39:d9:85:0d:c0:62:cb:dc:8d:
ec:4d:71:ea:49:2a:f5:b2:ed:a6:df:41:38:b1:a1:
81:5e:ff:27:8f:18:06:80:47:a0:b5:74:72:5e:a3:
15:ed:b7:52:40:b4:de:06:b1:5a:b7:2b:5c:b3:f0:
1a:10:e7:ed:f4:20:2d:57:7e:be:71:c0:4f:7c:9f:
42:62:ec:01:9d:a5:b3:6d:67:95:7c:8f:a3:24:ec:
c3:35:5e:c2:a5:3f:a4:a3:ee:8b:12:6d:12:a6:c1:
c0:8d:dd:a6:1f:d1:e2:ee:68:53:c8:82:f0:32:04:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:C2:BE:C8:32:BE:89:DE:5B:13:98:A5:A3:34:67:F4:D3:81:B1
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3c:82:f3:4e:60:00:c8:16:0a:bf:3d:5d:15:09:ac:3e:68:
5d:3a:45:09:cc:0d:05:96:c9:88:f1:c0:64:5a:85:68:51:c6:
86:4e:71:8a:e0:b0:13:9e:8d:fc:f3:82:a2:65:95:3f:fc:ad:
a4:60:20:cd:e4:6a:2e:7a:74:82:45:61:00:92:80:d9:91:f6:
47:5d:89:a8:30:aa:0c:58:01:c9:22:60:b4:68:fb:b6:af:72:
3d:d0:c8:d7:3a:e5:d6:07:0a:b7:f4:70:50:92:75:da:0f:6a:
bf:33:d8:10:39:64:f6:cf:f8:e1:7c:34:9e:56:04:45:9f:1d:
bc:a2:4e:c0:9a:aa:71:fd:6d:de:0f:9d:3c:fd:f1:10:fc:89:
cb:9b:74:81:83:5f:74:ab:a3:22:46:ef:e5:53:8c:c2:73:95:
a5:e5:25:14:c2:f3:83:7d:2c:e7:05:93:dd:e2:dd:e7:f9:3c:
d0:48:2a:aa:30:c7:68:c1:17:a2:4c:b5:60:e5:bc:72:8d:78:
56:32:ee:1e:66:39:c5:b4:70:41:ca:cb:69:37:eb:4a:9c:78:
eb:33:7c:97:33:15:dc:3a:65:8a:f3:d7:e5:25:98:04:8a:5f:
b7:94:6b:10:4c:cc:49:05:8f:c3:40:27:26:8d:87:bb:99:9d:
84:38:27:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFk9A6HsCaBuxI0olYBa8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzOGI3Y2E0MWY0MDA4MjI5MGNhOGFlZmRlYzRiZDI5N2Qz
YWVjMGMwHhcNMjYwMzI2MDMwMDQzWhcNMjYwMzI3MDMwMDQzWjAzMTEwLwYDVQQD
EygwOWM0YzJiZWM4MzJiZTg5ZGU1YjEzOThhNWEzMzQ2N2Y0ZDM4MWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMkv+LjtTF+Q8KnxS6ND29EHF/TI
uY9MOCaazDTW/iRP9uZoyNziGcJ28nVgkr2aN+m+S1fd27joUExiBil8iOUC26vg
LBpbhRJjB9JjREXIO1XVQ9OgG2H8V2BnLMYfQOpSs24r57MoC5IwshOnHXGF9k70
n8Jr+Jaq+Max0377v7gVLpca9TTQ2Ic52YUNwGLL3I3sTXHqSSr1su2m30E4saGB
Xv8njxgGgEegtXRyXqMV7bdSQLTeBrFatytcs/AaEOft9CAtV36+ccBPfJ9CYuwB
naWzbWeVfI+jJOzDNV7CpT+ko+6LEm0SpsHAjd2mH9Hi7mhTyILwMgSG+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnEwr7IMr6J3lsTmKWjNGf004GxMB8GA1UdIwQY
MBaAFPOLfKQfQAgikMqK797EvSl9OuwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODR0OHBCOUFDQ0tReW9ydjNzUzlLWDA2N0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82MzA5MDQtNTYxMi00OWY3LTgwYjMt
YTNjYTIxMTIyNjhiLzEvODR0OHBCOUFDQ0tReW9ydjNzUzlLWDA2N0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82MzA5MDQtNTYxMi00OWY3LTgwYjMtYTNjYTIxMTIyNjhi
LzEvODR0OHBCOUFDQ0tReW9ydjNzUzlLWDA2N0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTyC805g
AMgWCr89XRUJrD5oXTpFCcwNBZbJiPHAZFqFaFHGhk5xiuCwE56N/POComWVP/yt
pGAgzeRqLnp0gkVhAJKA2ZH2R12JqDCqDFgBySJgtGj7tq9yPdDI1zrl1gcKt/Rw
UJJ12g9qvzPYEDlk9s/44Xw0nlYERZ8dvKJOwJqqcf1t3g+dPP3xEPyJy5t0gYNf
dKujIkbv5VOMwnOVpeUlFMLzg30s5wWT3eLd5/k80EgqqjDHaMEXoky1YOW8co14
VjLuHmY5xbRwQcrLaTfrSpx46zN8lzMV3DplivPX5SWYBIpft5RrEEzMSQWPw0An
Jo2Hu5mdhDgnTw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:53 2026 by rpki-client