Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier: 4Reu5zU+YZ1VEvRcoXKTNx0t7XEAKGfYZsL6nat7y90=
Subject key identifier: 85:A1:61:31:93:CB:70:75:91:4B:95:91:DD:66:E4:7F:71:D4:4A:CE
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 01A0DACD7BE8566DCF216EF0AADDED2BC826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number: 07C0
Signing time: Fri 25 Sep 2026 23:01:34 +0000
Manifest this update: Fri 25 Sep 2026 23:01:34 +0000
Manifest next update: Sat 26 Sep 2026 23:01:34 +0000
Files and hashes: 1: 5x6UPD5taDgKQlJm7HkMlrw0h5w.roa (hash: FXsrx/TuiFu9Wy2N3XRLZaoBhfDNCrBq2rlJC6w/nRk=)
2: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: 2P4rrEJvddkcYptPsN1VBogsFgVHiPWHatZFfwS/mec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:7b:e8:56:6d:cf:21:6e:f0:aa:dd:ed:2b:c8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: Sep 25 23:01:34 2026 GMT
Not After : Sep 26 23:01:34 2026 GMT
Subject: CN=85a1613193cb7075914b9591dd66e47f71d44ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:ee:f3:e0:cb:53:39:cc:0d:ca:73:c8:7b:
66:90:5e:74:fa:37:c3:48:14:99:e5:c4:64:03:18:
16:38:7b:5b:da:f1:db:5d:5f:dc:64:80:01:3e:fb:
2b:bb:ed:a7:c8:47:4a:26:30:ff:05:e8:5d:11:0f:
29:dd:4b:34:35:4f:f1:c3:79:66:c6:1d:96:86:d0:
a5:a0:a9:64:be:9c:f6:56:bd:a7:8b:23:a9:1a:b8:
69:c9:d4:08:a0:5e:2c:96:4b:30:a8:a5:a3:31:0f:
3b:4c:f8:f0:ea:5a:95:83:1a:c2:2b:77:33:ce:cb:
b4:02:26:15:d6:0a:de:a2:1f:72:00:c1:62:df:8e:
ce:c5:f4:8f:b7:bb:72:cc:99:51:b2:00:bb:74:85:
42:78:48:2e:89:c7:b4:d2:bb:5b:35:b8:9a:a0:1a:
03:23:5f:71:b8:06:eb:04:36:64:fd:a0:b9:f1:e2:
39:44:0b:3b:a0:1b:3e:78:bf:85:d8:d2:59:31:33:
70:b1:29:d6:19:7a:30:53:34:1f:7f:ba:6c:d7:12:
47:74:84:1e:3f:20:e5:bf:1e:b5:7b:a5:c7:2d:94:
c2:75:52:e8:4e:0c:8c:7f:96:db:2d:1f:00:56:85:
18:c4:e2:68:e6:74:24:4e:59:40:8a:2c:77:54:08:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A1:61:31:93:CB:70:75:91:4B:95:91:DD:66:E4:7F:71:D4:4A:CE
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4e:86:36:d2:a0:dd:2f:2e:3a:be:e8:bb:5f:d2:b9:f0:65:
9f:ab:3c:05:15:2b:56:71:60:32:95:94:86:99:e4:8c:44:eb:
82:63:4b:8b:ed:db:25:1a:2d:1c:47:ee:b7:04:dc:82:09:9e:
c2:6c:0d:00:97:07:9e:6c:e3:5d:0d:4a:85:6d:2f:5f:f1:d5:
35:c3:fd:59:4c:ee:8e:8d:e8:44:02:3c:44:ce:2c:14:83:36:
e2:e1:3b:fa:33:0c:9e:6a:2e:aa:36:da:49:36:b5:14:13:4a:
72:30:3d:93:75:95:4d:80:b0:08:4b:da:e6:4a:b1:8c:05:4b:
ab:00:cc:fb:12:44:6d:e8:ce:76:28:f1:66:78:c4:b8:c9:66:
c6:ab:a2:29:50:a1:e5:9c:63:69:f8:51:64:e6:49:2c:8d:56:
aa:a0:b7:9a:a3:e1:d0:2b:b3:47:ff:55:7c:2c:3d:48:a1:65:
c4:bd:47:90:7b:c0:ca:59:1c:67:28:4e:9b:80:39:89:ae:62:
31:cb:f4:8f:1b:72:54:27:b7:8f:67:96:65:42:77:67:bc:fa:
c8:f6:77:2d:8a:b6:04:17:08:42:8c:57:8b:f7:0a:8a:81:82:
ea:67:ef:8c:98:94:90:be:59:15:66:4b:e8:a3:3c:23:2b:5e:
7b:a5:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:14:17 2026 by rpki-client