Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: IihAgXcO8+uvlFkyRX0qjNCAGJsbV7qD/UcZa9GdiU8=
Subject key identifier: 9B:37:D0:63:70:98:23:FF:50:60:B7:C6:25:44:84:18:4B:EF:34:90
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 019F8FEC835E3FEC739B5086A9DE81FEB52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 0AD5
Signing time: Thu 23 Jul 2026 17:01:09 +0000
Manifest this update: Thu 23 Jul 2026 17:01:09 +0000
Manifest next update: Fri 24 Jul 2026 17:01:09 +0000
Files and hashes: 1: 4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa (hash: 9pkWaCiovhlv2wqBCLqW3gVUQadAo/HKtdeFnVdYabQ=)
2: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: TB5Xi7/mla8AFApKODJ/H9OSvk63j/lM07ELlXh6q70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:83:5e:3f:ec:73:9b:50:86:a9:de:81:fe:b5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: Jul 23 17:01:09 2026 GMT
Not After : Jul 24 17:01:09 2026 GMT
Subject: CN=9b37d063709823ff5060b7c6254484184bef3490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:c4:dd:99:2f:ca:ab:5e:36:ce:28:27:75:
07:57:4c:27:1c:69:c9:03:9f:1c:ae:d7:e8:04:61:
0e:52:85:4f:03:29:54:77:29:7f:ae:b0:3b:3b:ec:
84:27:2f:fd:c9:e6:9f:0e:88:57:6f:2c:6d:92:e1:
fa:6b:79:2d:5a:25:48:33:31:b0:64:72:ca:a5:14:
fe:d4:c9:31:55:c8:81:bc:7f:cb:40:59:d6:2c:89:
4b:de:d1:a6:f7:02:fc:d0:a0:fd:38:d0:b4:e7:5e:
be:7b:22:e9:db:61:80:5e:75:6b:77:86:57:f7:fb:
cd:df:cd:70:4d:f6:1c:09:92:d5:65:ec:ed:1d:db:
ee:45:9c:70:cd:b7:e9:c8:45:0b:7e:a8:00:35:ee:
f3:36:9a:08:23:9e:27:90:e8:07:5b:2a:bf:b8:06:
77:80:bc:13:25:e4:8e:46:b7:f9:00:1f:65:fe:22:
41:3d:72:2d:c7:2b:09:55:6e:7e:92:e1:77:f8:80:
f2:44:70:40:24:28:f2:72:bc:b2:30:84:8a:0c:e7:
27:ee:5f:22:89:d7:2f:0d:a8:7a:7f:7a:cf:cc:c5:
8d:a3:61:f5:23:29:d8:41:ce:39:c7:5a:f0:6d:ed:
8a:2a:c0:34:e7:ce:66:b0:b4:9b:ae:48:67:f1:4d:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:37:D0:63:70:98:23:FF:50:60:B7:C6:25:44:84:18:4B:EF:34:90
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1d:cd:3f:01:39:c2:93:3d:b0:24:ba:23:ed:c1:7f:67:6a:
c6:35:29:11:a8:e9:d5:50:76:56:47:85:b3:60:4f:d3:d3:91:
1a:a2:87:5e:da:c9:5c:bf:e2:ff:0e:a0:3d:1b:9e:38:a3:1c:
73:88:9c:74:a8:37:88:69:dd:1b:ae:49:91:44:28:d4:15:be:
f9:3e:ec:92:52:df:9a:04:81:0d:b5:25:d3:9d:72:97:5c:fc:
6b:2f:f2:be:6a:c0:28:15:0b:d6:aa:b7:23:a7:00:86:98:3c:
f5:81:73:89:b4:27:c3:ee:0d:d3:ad:a0:fd:07:d9:ae:49:30:
ea:ae:03:ef:84:02:a4:61:28:b1:fa:c9:34:6a:3b:aa:c2:ab:
ba:92:a2:f6:71:ab:37:58:e4:23:7d:62:ff:97:c8:10:88:9e:
b3:99:96:0b:45:8d:1d:8c:11:6a:62:be:ba:45:a5:45:6e:b5:
b1:19:43:dc:1f:56:da:c9:a4:89:06:41:7a:03:35:ab:d3:ba:
7c:2f:00:06:07:b0:aa:7f:95:9d:7d:21:82:7b:9a:29:ec:33:
65:3d:af:41:02:38:5d:ab:16:c1:a1:da:8b:36:4f:09:a7:b3:
27:bf:a5:6a:36:5a:2f:72:e4:55:87:da:fe:9e:64:cb:10:67:
10:28:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:46 2026 by rpki-client