Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier: 7WvuOpps6dZI/aNu5nnQVrZNc340/vY9FvUtwGem8v0=
Subject key identifier: 9E:DF:CF:18:8F:1D:D1:D6:FC:08:E9:89:3D:F4:A9:29:3E:1C:B7:14
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 019F927FB28A5CA58FF26B7636B907E1E5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number: 0716
Signing time: Fri 24 Jul 2026 05:01:10 +0000
Manifest this update: Fri 24 Jul 2026 05:01:10 +0000
Manifest next update: Sat 25 Jul 2026 05:01:10 +0000
Files and hashes: 1: 5x6UPD5taDgKQlJm7HkMlrw0h5w.roa (hash: FXsrx/TuiFu9Wy2N3XRLZaoBhfDNCrBq2rlJC6w/nRk=)
2: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: MU64bVaJfA6bjeROFfztj9zqtkXeLvXrmrPMQbzf0E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:b2:8a:5c:a5:8f:f2:6b:76:36:b9:07:e1:e5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: Jul 24 05:01:10 2026 GMT
Not After : Jul 25 05:01:10 2026 GMT
Subject: CN=9edfcf188f1dd1d6fc08e9893df4a9293e1cb714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:16:64:bf:79:d7:bc:34:9b:e9:66:e1:82:
e3:fb:68:d1:16:f3:77:84:12:e8:a7:8b:0e:8b:3b:
87:8f:70:45:49:f7:00:c2:6d:bf:ca:1c:0c:b0:7e:
92:f0:87:de:22:e8:c9:92:85:5b:5d:5d:86:7f:c9:
b5:78:dd:95:63:02:b5:46:45:83:44:df:b1:b0:ac:
5a:cd:51:5d:7b:17:45:59:38:f8:4f:36:ff:d5:19:
43:da:39:9c:3b:c2:4c:c7:33:f7:31:97:a1:d5:54:
b3:4d:e6:64:0d:f1:46:0a:05:c2:bb:be:11:15:75:
c2:da:89:b6:d0:3d:c8:74:31:4f:b6:1d:9e:5b:24:
24:cb:dd:9b:9e:bf:36:ac:87:43:3c:3c:ae:f1:85:
5f:9a:f4:2b:4b:9a:c7:5e:da:21:4e:4e:c9:b7:ba:
be:0c:4e:87:ce:1a:e8:cb:62:bf:97:01:2d:00:3d:
56:23:8f:cd:12:eb:b3:5c:08:72:da:94:b5:27:07:
15:95:a2:ad:e7:e9:71:0f:ed:9e:84:f8:7e:a6:05:
e3:7c:ba:64:2a:1d:e7:bc:9f:23:4a:f4:e3:11:73:
8e:e1:cf:a7:44:d3:98:a3:ee:ad:c4:70:5b:0c:b9:
67:02:f4:ce:a8:9d:7e:24:e8:09:2c:dc:5a:10:8d:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DF:CF:18:8F:1D:D1:D6:FC:08:E9:89:3D:F4:A9:29:3E:1C:B7:14
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:92:e4:af:1f:d2:2d:e1:9c:13:ff:a5:dc:05:f1:c9:77:5e:
c7:68:ef:c2:25:31:90:da:f0:c3:5e:6f:97:30:91:e4:0e:0e:
5e:1c:43:98:ba:4a:34:25:b1:9a:15:b0:8a:66:99:3d:93:5e:
c3:39:f5:a8:31:ca:f7:8e:e5:3c:68:2f:3a:b0:96:21:01:b0:
c4:e0:9a:1c:1e:a7:e5:88:96:f0:0f:92:27:5e:24:61:fd:5f:
cb:f4:d6:6f:53:5e:a0:9b:05:f6:2c:7e:86:74:f2:f5:26:80:
7d:54:a8:23:b9:d2:16:2a:fb:8f:81:49:a7:27:06:ac:98:d7:
c7:f7:f6:e1:85:9d:2d:d0:e2:62:70:76:f8:66:27:a7:93:2b:
3f:55:a2:57:8b:dd:9e:df:76:12:44:21:ec:bd:7b:26:c9:e3:
68:ac:6f:2f:8d:13:36:ef:a7:4c:a3:09:b2:95:b4:df:5c:5e:
eb:67:71:9d:8a:c9:e7:95:66:35:a5:fa:76:ac:c9:79:04:15:
fb:c1:c9:8f:44:bb:c7:dd:41:2c:50:08:2d:fd:10:bc:8d:85:
34:3f:a0:d1:b7:a2:20:51:2d:88:eb:76:0e:7b:03:bd:f9:44:
fe:1a:39:44:62:5d:21:57:c5:69:cd:c1:f1:5b:fa:c9:1b:38:
32:b5:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:58:54 2026 by rpki-client