Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
File: 84t8pB9ACCKQyorv3sS9KX067Aw.mft (raw, json)
Hash identifier: vwFr+Ln+wk8e/CKZ8BOA8iQY9grgBbGdwFHFb0fweug=
Subject key identifier: 43:9F:31:3F:94:1D:AA:B6:19:D6:F6:4E:BB:A3:2F:1D:57:7D:94:C5
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 01A0D2A5E1FC664A96867520E67A9E356464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 09:01:21 +0000
Manifest this update: Thu 24 Sep 2026 09:01:21 +0000
Manifest next update: Fri 25 Sep 2026 09:01:21 +0000
Files and hashes: 1: 84t8pB9ACCKQyorv3sS9KX067Aw.crl (hash: mDgbJlEQyUja+7qaJP9hTx8fDIpPYDd5CLlP+94f5n4=)
2: LStG3MZHjClQlcvMSArKJ1HBwFQ.roa (hash: Bj6S9j6Jh7TL/tfR7BKsQeDq2b9zngVPJSvc5OTYm+o=)
3: eKqzfu-WsthZl9cMx3d4nPn0bsY.roa (hash: w2040uf1aDugISzQFmejjk14KHF8A3dboKdbggun6Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:e1:fc:66:4a:96:86:75:20:e6:7a:9e:35:64:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Sep 24 09:01:21 2026 GMT
Not After : Sep 25 09:01:21 2026 GMT
Subject: CN=439f313f941daab619d6f64ebba32f1d577d94c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:18:38:ba:17:e6:11:76:2a:f8:1a:f0:b3:
13:b5:ec:6a:33:71:5e:b8:12:41:32:b5:25:0f:ec:
38:94:14:f6:6b:7a:ee:b5:35:29:25:9c:33:18:3b:
37:eb:5a:7d:3d:fc:1e:1d:b3:ee:b9:c2:07:c5:43:
6b:30:c8:36:05:ea:2e:cd:b1:8e:a9:84:2f:f9:75:
ca:3f:3b:03:98:b2:27:c1:53:a2:70:3c:10:2d:12:
39:36:2e:1f:80:16:5b:12:4b:8e:5b:bd:86:bf:08:
cc:15:fe:51:a6:0f:21:a5:09:5b:45:57:b1:7d:fe:
a9:d7:d1:86:37:c8:cd:bd:33:c7:19:57:ea:82:78:
91:d5:05:e6:82:d0:4a:53:d8:1b:eb:03:15:19:75:
19:63:52:ff:1a:05:e5:8e:d8:aa:73:71:b2:d0:19:
d0:05:5f:e7:e0:57:16:6c:98:6d:8d:e9:5b:6d:cf:
e5:2b:83:18:48:5f:9f:82:cd:65:5f:fa:5c:57:a0:
38:8c:8e:a4:b0:53:92:f3:3d:ac:55:be:5e:81:e3:
f7:79:57:87:c3:a5:d4:41:5e:26:71:d8:d8:d9:93:
28:b5:04:35:6e:1a:5f:f3:41:65:8c:19:56:27:ac:
0c:3d:54:cd:61:d7:01:1d:44:d3:1c:78:3a:2c:82:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9F:31:3F:94:1D:AA:B6:19:D6:F6:4E:BB:A3:2F:1D:57:7D:94:C5
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:60:67:49:69:c3:a1:c2:33:19:5e:28:1f:da:68:34:d6:ed:
da:69:6b:ad:62:09:a7:8f:ef:1c:8c:b5:30:19:65:99:56:89:
14:43:2e:1a:47:25:38:b6:f4:16:50:9e:bb:17:e3:69:20:89:
83:22:61:1d:80:11:a8:69:d3:0b:68:0d:ed:cd:53:93:37:39:
de:37:48:14:d3:a8:18:76:27:4f:d7:35:5c:ec:6a:fa:f6:fc:
d8:48:05:16:7c:1b:d6:56:e9:a3:ed:f9:4c:6e:5c:f5:fb:f4:
f4:48:0e:08:76:b1:53:05:ae:7c:83:48:87:42:40:dd:47:49:
51:85:6f:26:3d:b6:21:4a:79:9d:c4:81:6e:3a:c7:df:40:94:
dd:9f:8b:ab:06:a7:0b:61:19:db:81:fb:d8:df:0b:15:d6:5c:
52:b6:09:85:85:51:e7:5a:11:a2:f6:e4:dc:fc:34:13:ae:5b:
a5:6a:df:bf:2a:e5:33:b9:34:b1:08:43:22:bb:18:a5:ac:17:
80:ac:d3:01:1a:19:81:88:20:20:ef:53:fb:db:87:75:cd:29:
ec:f8:ed:1c:3a:a0:e9:07:87:7a:0a:8b:64:8c:6a:77:61:c8:
93:6a:ef:b2:c3:b1:32:d8:33:31:97:b4:fc:91:c5:1f:00:17:
27:e9:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:37:37 2026 by rpki-client