Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: itQs055uE90amiUz25ejNKFadgNGOoqgHy2HinOLWnU=
Subject key identifier: 4B:DD:A5:B9:A8:11:FA:9D:60:EA:80:08:7F:9C:7D:8F:C3:32:19:B0
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 019E1D22EBD78A9BA57DB4DE84E7CB627238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 0A15
Signing time: Tue 12 May 2026 17:01:28 +0000
Manifest this update: Tue 12 May 2026 17:01:28 +0000
Manifest next update: Wed 13 May 2026 17:01:28 +0000
Files and hashes: 1: 4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa (hash: 9pkWaCiovhlv2wqBCLqW3gVUQadAo/HKtdeFnVdYabQ=)
2: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: 7pxKdEJslKffmB+s6s6ZaiOJGv4Ryuqv0XCf7Mny8kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:eb:d7:8a:9b:a5:7d:b4:de:84:e7:cb:62:72:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: May 12 17:01:28 2026 GMT
Not After : May 13 17:01:28 2026 GMT
Subject: CN=4bdda5b9a811fa9d60ea80087f9c7d8fc33219b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:e0:b8:aa:c0:6b:66:96:3c:b1:01:23:98:
ed:32:28:26:b3:5e:bf:6f:08:43:03:43:39:9a:00:
cf:8c:27:10:36:19:7d:01:c3:45:29:ba:e9:65:69:
33:9f:b2:9d:84:d0:29:4c:98:d0:5b:c3:54:f7:52:
b5:0e:09:45:c1:6c:65:94:56:8e:8b:96:68:54:aa:
4e:cb:f1:23:36:5e:0e:82:9b:e5:56:1f:f5:44:39:
a9:7d:d6:2a:82:42:59:0e:6c:37:89:4b:4e:22:32:
78:a3:10:ee:d3:4e:65:44:6b:c4:4a:68:90:e5:48:
67:df:b6:3c:ef:62:e7:5a:c0:95:0a:c4:c0:7b:7b:
46:4b:cb:b4:2f:6a:6e:ed:42:9c:78:f4:87:19:6e:
55:b3:f1:27:2e:c9:b4:89:02:58:fe:f0:b0:14:71:
da:ef:ce:53:d2:ce:b6:c1:e8:6a:d6:cd:c0:d6:d6:
f4:7e:92:19:97:af:8b:0b:28:38:28:08:81:21:e4:
db:17:e6:82:7b:4a:15:7c:ad:90:5c:26:64:c2:ee:
3d:68:6b:8e:ac:92:fe:57:76:06:de:29:28:e9:29:
49:c8:f0:ba:7e:01:2a:73:7f:72:e0:5f:00:09:6b:
95:47:74:53:67:d5:b2:1b:77:ad:c3:b8:fc:83:92:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DD:A5:B9:A8:11:FA:9D:60:EA:80:08:7F:9C:7D:8F:C3:32:19:B0
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:32:b5:0a:66:8a:ac:c6:53:c3:31:63:8e:2e:9a:b4:1f:20:
af:98:c4:45:9c:93:85:cf:ae:e6:cf:aa:d3:ca:6e:2c:25:3b:
df:b6:40:d4:2e:57:b5:ee:a9:77:0e:b6:7a:2b:fb:1b:51:e5:
ed:bb:07:e1:ae:6e:db:50:43:b6:e3:7b:6e:f8:5d:fc:c6:84:
d6:56:63:5d:d7:fd:f9:2e:be:25:6b:bd:3e:f4:31:ff:1c:70:
86:15:b8:32:e4:98:dc:d0:01:c2:8a:f4:ff:45:32:3e:a6:60:
dc:f6:bc:f6:bd:43:dd:04:77:25:b8:7d:43:ef:f2:bb:ba:68:
97:f0:2a:31:bb:bd:d2:dc:52:dd:9b:26:ef:80:8d:d1:2a:fd:
69:42:00:42:98:86:e2:e2:3f:38:dd:ee:cc:40:ad:5a:bd:94:
97:33:aa:18:42:bf:d0:3b:3a:9a:82:33:7e:98:73:0e:a2:21:
52:fb:00:54:cb:c0:f6:cd:d3:ba:d5:1a:b6:e1:42:8d:ca:01:
37:dd:4b:1d:bf:01:30:3d:23:b3:7c:d3:4c:ab:5e:72:b6:f1:
29:2d:d8:be:25:77:30:5b:41:c1:27:5a:83:83:73:fe:ce:ce:
19:40:3f:85:a4:98:ef:bf:20:ef:75:57:58:2d:69:65:e3:c5:
65:20:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:03 2026 by rpki-client