Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: LH4pIMuz2RTlfNp5razFC3CCIbudxa8Wz97e+UuujNY=
Subject key identifier: 5A:61:DA:3B:C6:A6:72:75:77:70:EB:B0:44:DA:C9:2F:9B:E2:6F:EE
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 019D27DF5DA1A67BD021BC68D595CACB2E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 0996
Signing time: Thu 26 Mar 2026 02:00:42 +0000
Manifest this update: Thu 26 Mar 2026 02:00:42 +0000
Manifest next update: Fri 27 Mar 2026 02:00:42 +0000
Files and hashes: 1: 4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa (hash: 9pkWaCiovhlv2wqBCLqW3gVUQadAo/HKtdeFnVdYabQ=)
2: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: CE+kw0K5GVdm7t6rwzSDaJW8mj9wcxWEEejzgPDa7jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:5d:a1:a6:7b:d0:21:bc:68:d5:95:ca:cb:2e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: Mar 26 02:00:42 2026 GMT
Not After : Mar 27 02:00:42 2026 GMT
Subject: CN=5a61da3bc6a672757770ebb044dac92f9be26fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:73:39:cb:50:09:64:d0:af:07:ea:a2:f9:
a0:56:a5:70:dd:ea:4b:19:98:e2:ce:b0:4b:6b:ce:
f9:af:2c:f1:02:fe:dc:51:47:4e:dd:e0:ef:1b:14:
ea:be:56:6d:01:4d:ef:ba:56:8a:d0:95:bf:f0:83:
f2:58:73:e4:9c:f6:49:c4:fc:b5:38:3e:d6:e7:65:
5e:60:21:69:b6:3c:e2:cb:67:9e:13:cd:e9:39:34:
e4:ad:3e:f6:1a:04:ad:1f:63:a8:a5:74:e6:5e:e0:
82:0c:4c:93:e1:2e:48:d7:00:de:1e:a5:67:f8:30:
ec:bb:2a:2d:e3:21:ce:89:44:1a:bc:f4:a9:c6:e7:
67:a3:29:db:40:e6:70:c2:45:60:df:2f:72:41:59:
2b:af:91:e3:aa:fb:a2:64:e9:de:d0:a8:6f:d4:ef:
3e:53:53:c9:06:8f:b0:9a:ba:57:d4:f2:d3:05:e3:
b0:b7:f9:e6:df:4b:93:52:c2:15:d6:75:ce:25:aa:
c8:6e:ca:e1:1c:a7:09:59:1f:28:4a:09:40:cc:1f:
fc:2d:4f:be:e3:f1:54:a7:cb:af:83:f7:4d:eb:28:
72:a8:5d:d5:13:49:4b:3d:85:f3:7f:9d:66:93:4f:
0e:d7:4a:93:77:5b:e1:1a:b4:c0:89:83:d9:c2:0e:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:61:DA:3B:C6:A6:72:75:77:70:EB:B0:44:DA:C9:2F:9B:E2:6F:EE
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9b:ee:fd:62:2b:d5:7d:af:24:e1:5c:8d:2a:3c:c9:49:68:
b0:5a:57:6c:ef:12:43:05:eb:27:70:c5:e7:86:ec:b6:ea:7a:
68:69:c8:29:f2:8b:37:34:39:fc:69:64:c5:f3:e3:82:43:26:
34:ff:b5:85:5a:2a:57:eb:e2:d2:e6:8f:f3:c7:f6:b1:86:c0:
81:db:a9:fb:a6:7e:1f:ae:e2:99:0f:fb:d3:49:87:77:07:3a:
c1:ca:0c:9a:e3:49:50:29:6a:9f:06:63:0e:f6:12:06:e6:33:
64:8d:6b:d5:e2:4f:0e:67:de:8e:c0:5f:2e:fe:9e:62:09:ec:
05:4a:31:58:98:69:ca:50:c4:48:18:54:1c:68:7b:86:fc:ca:
f7:8d:a0:23:e7:4d:8f:04:db:15:dc:9a:7a:05:f6:3a:8b:20:
49:b2:d4:06:b7:da:3b:f2:47:80:2e:d0:46:d1:ef:d4:a6:fa:
13:f2:10:6a:b8:24:e0:1c:b4:01:0d:c2:25:81:45:b0:13:5d:
76:97:fc:7e:0c:16:5f:7e:0d:41:9d:3e:47:64:53:3c:64:a2:
82:53:e7:dd:5d:39:a4:ab:ac:b7:13:84:ff:2f:bf:ce:50:28:
6d:3e:b0:a3:6e:cd:a9:7d:80:c2:f2:63:be:53:4a:5a:5b:62:
83:37:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:04 2026 by rpki-client