Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier: 1+p/5CmaGb+SrpS9Bl82Mt47y1VI6ULmy7FIIfuxg8E=
Subject key identifier: 9D:F6:06:1E:2E:8A:7B:41:7C:ED:A0:15:33:B4:A1:AB:AE:77:15:07
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial: 01A0CB2298F7BA755BBA4CF517AAF5C387F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 22:00:37 +0000
Manifest this update: Tue 22 Sep 2026 22:00:37 +0000
Manifest next update: Wed 23 Sep 2026 22:00:37 +0000
Files and hashes: 1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: oztK0IPsdcFjuxUMETrHwWQNf1IohTXAf8zW3k4ZB8k=)
2: z4xZtO9FtF8o6mwi4QbL-Wu86s4.roa (hash: vP00qCgQWns/k1mWbLbmAoHCP48JJhdfJx4DqX0YL04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:98:f7:ba:75:5b:ba:4c:f5:17:aa:f5:c3:87:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Validity
Not Before: Sep 22 22:00:37 2026 GMT
Not After : Sep 23 22:00:37 2026 GMT
Subject: CN=9df6061e2e8a7b417ceda01533b4a1abae771507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:b4:0f:f0:ba:90:01:16:ae:10:09:2c:73:
dd:dc:97:a6:bf:a8:f7:3e:3e:e7:25:f3:66:34:af:
6b:03:50:65:c0:81:dd:95:c5:eb:1f:d4:b9:c2:60:
a5:48:c3:27:de:02:a0:1e:74:ba:c4:71:0a:f5:26:
8a:04:44:6f:33:17:f6:b1:9e:6a:ec:66:4c:cf:21:
de:ef:e7:51:a2:59:76:cf:27:8a:06:ca:9c:d8:e6:
13:b7:95:52:5d:3a:3b:e4:70:7c:74:32:d0:0f:c1:
fa:09:ab:14:30:7e:8d:3d:c2:7a:69:52:69:f9:03:
ab:18:e6:b1:c3:f3:f8:d2:4a:70:9f:49:6e:96:f9:
a1:6a:6c:18:12:30:96:f0:5c:43:38:39:c9:65:b6:
a7:c3:eb:d7:c1:15:38:20:ee:23:3b:4c:9b:1a:6a:
fd:a9:34:bf:5d:0e:9c:b1:c7:52:bc:25:52:51:e3:
4e:06:5e:03:52:90:08:0f:3a:ca:4b:37:4c:3b:89:
59:75:e3:a8:19:e2:16:0b:ab:e6:3d:9f:c9:3c:03:
f6:03:ac:99:90:50:3d:97:76:d8:a4:c6:64:90:05:
e7:93:c1:35:83:8d:bb:45:b6:52:45:a7:bf:63:41:
15:82:dc:28:35:65:49:b5:90:6a:43:15:87:8c:09:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F6:06:1E:2E:8A:7B:41:7C:ED:A0:15:33:B4:A1:AB:AE:77:15:07
X509v3 Authority Key Identifier:
keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1d:c9:d1:66:3d:c2:62:e7:59:31:9c:88:28:d4:e2:49:ce:
e2:f3:e2:b2:ff:66:4a:a3:ba:6c:9a:22:30:55:9a:6f:1c:5a:
0a:8f:cf:d5:16:51:4e:bb:28:28:81:fa:e6:46:88:64:da:c0:
aa:fc:52:48:f2:a7:0b:86:a3:48:10:0f:bb:2e:c6:c5:cd:02:
54:37:67:c8:bf:5d:ad:fd:a0:c6:09:b1:93:22:e4:f6:02:6f:
c9:78:30:a8:80:5a:27:3a:8f:a9:5a:3a:e9:3b:9f:0e:22:20:
bc:c0:ac:86:b4:74:a5:a7:be:79:e8:8a:c5:7f:e0:d0:fe:27:
b6:30:69:2a:1d:a1:fb:3c:d8:4b:fa:1d:28:58:10:96:1d:27:
eb:c3:05:1c:38:f9:3e:48:f8:eb:ad:20:f6:20:3f:d6:5b:73:
8a:27:f3:39:95:18:f2:f8:57:d9:bf:be:bc:32:04:0c:9a:c7:
e8:36:ec:a4:26:4c:52:af:d5:d2:18:b2:6d:a6:66:66:d6:69:
d7:37:ad:15:9c:f9:2b:86:70:55:20:90:b0:ad:20:68:17:13:
ed:ee:a4:6e:e1:15:5e:99:f9:cb:92:b2:22:5f:be:62:1d:fe:
c3:30:7d:f6:b2:22:da:83:71:0a:a2:9f:34:49:9c:9f:60:35:
ab:51:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:08:39 2026 by rpki-client