Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier: PAzM2NsgwGOLnhVJuxE7baoE/BNMtUimkvvR9v2AxVs=
Subject key identifier: D2:E5:92:D6:DE:76:F9:FE:90:06:15:37:3B:F2:6C:B4:2C:A4:E8:30
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 019D2C609B20B9CEB75E20881E0DC2E157E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number: 05D8
Signing time: Thu 26 Mar 2026 23:00:21 +0000
Manifest this update: Thu 26 Mar 2026 23:00:21 +0000
Manifest next update: Fri 27 Mar 2026 23:00:21 +0000
Files and hashes: 1: 5x6UPD5taDgKQlJm7HkMlrw0h5w.roa (hash: FXsrx/TuiFu9Wy2N3XRLZaoBhfDNCrBq2rlJC6w/nRk=)
2: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: xVXWH3wDTXQY6COnXrckYDGBf+BR5gtq2X+LWtux+bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:9b:20:b9:ce:b7:5e:20:88:1e:0d:c2:e1:57:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: Mar 26 23:00:21 2026 GMT
Not After : Mar 27 23:00:21 2026 GMT
Subject: CN=d2e592d6de76f9fe900615373bf26cb42ca4e830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:89:b8:37:98:f7:c2:56:cb:3f:db:fa:1f:90:
a3:eb:ef:db:fc:54:47:ad:12:dc:c1:60:ff:87:45:
6a:27:2c:ba:8a:85:18:87:cc:95:9c:29:db:49:b3:
7c:27:a8:16:79:5d:f3:fb:9d:3b:76:6c:0d:c0:7b:
11:1a:1e:f9:b1:c6:2c:81:21:cc:d3:17:59:36:2f:
fe:a2:b4:69:44:99:c5:15:ac:ab:6c:69:2f:69:bc:
ed:76:95:53:3e:40:45:5a:06:84:e8:be:72:3a:11:
1d:4d:14:b1:02:65:79:bf:53:ff:98:26:63:62:a8:
bd:0d:5b:f1:ba:36:4f:d7:30:0c:01:93:1f:cd:df:
86:82:e0:53:f2:0a:06:0f:3b:61:1b:ce:2f:58:30:
b1:4e:ba:22:6a:55:c9:0e:b0:5e:c1:e7:c5:63:7e:
19:87:7d:3f:79:05:98:61:73:05:89:03:2e:d0:d3:
ec:92:59:cd:f8:64:7b:48:dc:e3:2d:c6:c7:2d:b0:
f6:12:6d:ad:26:bb:98:e9:33:b5:31:42:fa:dc:8d:
08:37:ef:4a:79:f2:03:d7:99:f9:df:44:54:8d:57:
0a:67:d6:8a:0d:38:ab:fa:ac:bc:ca:d9:2a:6e:fa:
8a:21:d5:dd:69:1c:5f:38:fa:64:99:51:4f:0d:9b:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E5:92:D6:DE:76:F9:FE:90:06:15:37:3B:F2:6C:B4:2C:A4:E8:30
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:43:60:07:e6:5c:41:2a:90:20:22:8c:21:ee:71:34:77:20:
82:23:67:6b:57:02:2e:4f:65:ec:ec:2c:15:34:04:58:53:e2:
d6:45:0b:99:73:38:ff:ab:da:62:49:4e:f3:bf:c8:c2:e4:d9:
f4:45:9d:3b:4c:69:9e:a6:4a:77:ee:ea:c7:24:fe:90:8c:c4:
92:57:12:ff:07:d2:a7:0f:10:38:5c:7a:a0:87:05:7d:50:da:
9d:a5:28:44:88:53:51:28:d8:ad:63:eb:6a:26:85:a0:a3:5e:
9c:89:41:e2:8e:55:c2:45:03:40:28:a8:39:93:1b:29:32:37:
f5:03:88:96:b8:ab:75:be:34:80:1a:c1:e8:5a:a6:ab:0b:1b:
9e:df:e0:ba:ec:15:75:13:5c:6f:f9:85:39:75:13:5a:d1:1f:
f2:23:81:9f:ba:0f:1f:af:c1:94:16:9b:bd:da:7e:9b:15:75:
4b:26:14:41:d5:cd:a1:79:f8:74:5f:c4:13:b2:35:48:04:7d:
cc:34:6e:36:0c:77:25:1f:b8:20:e9:a6:ca:a7:d6:4a:09:55:
15:1c:fd:f3:1b:07:79:f7:c8:1e:3e:60:1c:2b:ad:9c:af:81:
56:93:6d:6b:7e:c1:a6:c3:21:54:45:db:70:1c:4f:14:f4:54:
93:e6:bd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:41:05 2026 by rpki-client