Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier: R96fimczV4PW150nHp569eZTwZR9zjWX7nH0835aIp4=
Subject key identifier: 1F:B4:B5:8D:8F:B5:7D:A3:8F:BF:F4:D9:D8:81:29:3D:A1:F1:97:19
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 019E1FB57978D65C9090B1BA9FFD6C9162B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number: 0656
Signing time: Wed 13 May 2026 05:00:47 +0000
Manifest this update: Wed 13 May 2026 05:00:47 +0000
Manifest next update: Thu 14 May 2026 05:00:47 +0000
Files and hashes: 1: 5x6UPD5taDgKQlJm7HkMlrw0h5w.roa (hash: FXsrx/TuiFu9Wy2N3XRLZaoBhfDNCrBq2rlJC6w/nRk=)
2: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: Jj9PrS4YyM5FEb1Tod5fhFrlMnNRCZoza9kcQCkfn4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:79:78:d6:5c:90:90:b1:ba:9f:fd:6c:91:62:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: May 13 05:00:47 2026 GMT
Not After : May 14 05:00:47 2026 GMT
Subject: CN=1fb4b58d8fb57da38fbff4d9d881293da1f19719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:5c:c4:c4:37:f7:68:3e:a5:42:2a:94:52:
81:fb:aa:80:17:2f:8e:b2:db:cd:d9:39:55:0d:74:
16:e3:bc:a3:37:69:21:c5:0e:22:13:c4:70:8b:35:
e5:2e:de:f6:c1:81:1c:4e:3d:df:c6:96:85:ba:a8:
7f:9b:0d:1f:11:c8:06:27:f0:e1:79:15:bc:25:f0:
c8:6a:cb:76:87:f3:ae:d9:23:8b:7a:b2:ee:47:0d:
68:fd:8b:38:5a:95:82:0c:ca:1e:a1:04:ac:1c:4a:
81:de:24:c2:0a:dd:25:34:ff:79:1c:1f:bc:3b:56:
3d:19:d5:21:33:cd:bc:1c:ba:a3:89:e4:73:31:39:
fa:df:14:b8:9b:03:a1:71:f5:c9:1b:8d:4c:42:eb:
bf:26:14:08:c1:8c:23:8f:b3:f5:b1:6f:7d:79:73:
b3:45:d9:a4:23:97:84:e2:98:13:d7:55:db:70:ef:
a4:78:a6:e8:46:74:a9:1e:f0:bf:f6:c7:e7:d2:33:
16:a1:60:dd:35:d6:64:36:a7:1c:2b:e7:c5:88:c7:
c1:12:2b:75:6b:ed:8e:f8:18:04:3a:e2:10:39:7a:
0a:cb:c1:a7:de:c4:51:10:fd:0b:0b:76:ae:29:dd:
f9:70:1a:c5:09:9d:8e:43:8e:2e:2e:3c:13:fc:23:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B4:B5:8D:8F:B5:7D:A3:8F:BF:F4:D9:D8:81:29:3D:A1:F1:97:19
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:84:b3:fa:b1:7d:e6:eb:84:f0:ef:46:cc:8e:77:cb:e6:04:
d1:b2:82:e3:44:30:57:98:20:56:77:14:a7:c5:fc:1d:c7:d5:
a8:d6:8d:02:64:51:2c:42:ed:c3:d1:cb:8f:50:0e:88:0f:a1:
25:a1:2d:87:a6:45:8f:91:b1:b6:a7:4b:b2:43:34:d3:47:7c:
e8:7a:73:df:68:43:bb:c7:ba:e5:df:3b:90:af:65:23:9b:67:
e4:46:8a:71:af:0c:a7:5a:6c:09:dc:29:3b:bc:61:9e:2b:f6:
5d:3a:c4:a8:0b:3b:55:0f:56:40:9e:43:c8:72:91:7f:6d:a2:
57:ab:e2:b1:31:c4:ab:bb:48:7f:b8:75:01:5e:9f:3e:46:27:
0d:2e:9f:3d:8c:e4:04:69:30:4e:f4:29:82:06:06:6d:85:3c:
28:ec:ac:82:c8:11:ee:a3:5a:e9:ae:8a:0b:ef:56:d7:42:46:
9c:e4:80:26:cf:69:cc:53:da:fd:70:15:f5:b7:73:db:f3:02:
20:63:fc:2b:e3:a2:5a:28:e7:30:c4:98:c7:20:7a:02:ad:25:
90:b6:6c:2f:c6:a8:50:c3:4a:d6:e6:31:5d:ad:cc:06:e6:c6:
c8:20:73:81:93:24:82:b0:39:17:94:79:c4:8a:d9:20:f5:dc:
83:71:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:37:21 2026 by rpki-client