Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier: OH7w5Ir5s6GAnwaLUJk4TGTZuM8w7XRXro6atmseqoM=
Subject key identifier: 4B:46:E8:5B:EB:E9:E9:26:0F:40:79:EB:21:1A:A1:AC:10:14:62:27
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial: 019D265FB2A5D8B0C066426483AB565B958E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:01:39 +0000
Manifest this update: Wed 25 Mar 2026 19:01:39 +0000
Manifest next update: Thu 26 Mar 2026 19:01:39 +0000
Files and hashes: 1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: rBHz4uKHC1/ggixvRbYqkYTMawAtiICdEySGKgxEYMI=)
2: z4xZtO9FtF8o6mwi4QbL-Wu86s4.roa (hash: vP00qCgQWns/k1mWbLbmAoHCP48JJhdfJx4DqX0YL04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b2:a5:d8:b0:c0:66:42:64:83:ab:56:5b:95:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Validity
Not Before: Mar 25 19:01:39 2026 GMT
Not After : Mar 26 19:01:39 2026 GMT
Subject: CN=4b46e85bebe9e9260f4079eb211aa1ac10146227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:e7:d6:fe:06:1d:58:cc:eb:59:b7:eb:5f:
1a:83:3e:3e:57:08:e7:de:cb:b5:4f:b6:ed:45:34:
19:f0:eb:9f:31:fb:8b:5b:42:f3:86:f1:3f:ac:af:
17:14:ad:4c:ef:75:c0:bd:70:98:ac:af:2e:92:7b:
9e:8b:00:5d:be:64:66:f8:f4:ca:e1:00:a9:53:c7:
3e:20:43:17:ee:87:35:71:97:db:2a:90:da:7f:7e:
0f:3a:dc:e2:40:9b:02:8c:b6:2f:be:e1:f8:1e:85:
ab:19:83:9e:d1:a1:7d:8e:bb:2b:f3:41:fd:ec:d9:
f3:87:96:b3:ed:9f:69:5f:ec:7f:7d:91:c6:6c:56:
a1:8e:95:88:ee:3c:dd:2d:2c:80:84:37:86:30:76:
36:b6:2e:0d:b1:a5:2b:97:f0:4f:68:29:8d:2d:2c:
72:e8:7a:e5:f9:15:ce:38:82:6f:5f:c4:66:37:d6:
32:45:50:26:88:e6:de:ea:14:b6:32:da:2f:8a:c3:
b0:71:7a:33:f1:86:29:ea:3b:a0:4c:e2:98:bc:76:
70:d1:31:78:66:7d:d6:fb:fa:98:f3:38:12:88:04:
12:59:90:84:9a:26:0c:06:05:92:18:29:4f:dc:8b:
91:4a:95:9a:2c:71:13:8b:c5:be:6c:3d:a7:7a:a7:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:46:E8:5B:EB:E9:E9:26:0F:40:79:EB:21:1A:A1:AC:10:14:62:27
X509v3 Authority Key Identifier:
keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bf:46:b2:55:30:a9:e6:9c:92:f4:ed:b8:ff:f8:99:0c:33:
3b:28:ab:90:91:de:d7:77:b1:9b:81:11:62:e1:f1:af:60:07:
49:9a:e5:6a:13:f9:76:f3:cd:a3:f4:29:f8:e4:2f:4a:0a:bb:
73:a7:d6:80:e9:56:77:ba:2d:4d:3d:13:c6:db:6b:64:dd:a8:
62:9c:35:09:4b:bf:94:07:7a:b6:f4:b5:e3:2d:22:6f:bd:03:
46:91:4e:5c:f7:f1:51:04:87:a7:e0:55:7d:00:1e:90:00:9a:
e1:92:b2:5b:53:d8:b9:5e:09:a3:92:9b:f4:73:70:ef:63:c1:
70:42:74:16:6e:ea:b3:b5:5f:51:4a:e6:dd:ee:27:93:20:76:
09:d0:20:91:5e:40:07:61:af:2c:c3:94:7c:e0:b9:b4:64:cf:
8d:80:74:cb:4c:1f:06:b2:2c:96:b6:b1:10:17:0f:10:33:a2:
2d:9d:cd:d1:be:45:26:bb:0d:a3:ec:19:e9:35:bb:b0:dc:44:
a7:f4:02:62:11:4d:2f:b3:46:ab:be:8d:a9:4d:d0:af:8d:d9:
8f:fe:99:44:fc:99:c9:43:61:89:97:6f:ef:38:60:02:20:ba:
b5:6c:e5:64:fa:96:a1:98:0e:02:7b:ca:32:33:93:29:09:a1:
e8:79:2f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:46 2026 by rpki-client