Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier: tMffsTIm1l0S/godEzyfaZB4rWhUrjucTc9d83qlcTM=
Subject key identifier: 8B:CF:0C:62:BC:65:8A:17:80:29:41:B9:1E:6E:90:77:5A:5E:C5:8B
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial: 019D37F71E9940492662579F3DF93F93A45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 05:00:35 +0000
Manifest this update: Sun 29 Mar 2026 05:00:35 +0000
Manifest next update: Mon 30 Mar 2026 05:00:35 +0000
Files and hashes: 1: 0WpGctn3iHwcCfz1HyZ1-r-vlc8.roa (hash: FHZ/JIyqvLJTAVxRV45KR0WJzUtCxqF4aecsFoB2jfo=)
2: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: d2SjuJQIT7IGo6Cp+Ip31YFEekMJq1mmG3B/zW9LR5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1e:99:40:49:26:62:57:9f:3d:f9:3f:93:a4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
Validity
Not Before: Mar 29 05:00:35 2026 GMT
Not After : Mar 30 05:00:35 2026 GMT
Subject: CN=8bcf0c62bc658a17802941b91e6e90775a5ec58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:d9:da:f4:e8:1e:f6:eb:3c:fa:55:ce:a4:
e8:07:08:ef:54:fb:2a:2e:21:4e:2f:04:77:a5:43:
55:25:78:21:3e:c2:98:ad:a6:0d:90:8f:c9:25:ea:
e1:4a:5f:73:9a:3a:9f:3a:1b:c2:c1:c4:c3:75:91:
d4:e5:00:bd:09:04:aa:b1:58:20:56:28:e3:b2:e8:
7b:9b:7b:44:76:d5:42:ca:e2:1a:65:83:2f:5a:27:
95:c4:89:1f:b1:2a:6c:b0:27:71:fc:49:8a:13:34:
41:62:b3:63:9c:91:20:ad:22:30:55:30:d8:45:da:
15:77:eb:4e:93:ae:fe:65:9c:e8:31:1e:45:ae:e2:
a4:98:98:df:55:1c:52:a5:a2:cf:bc:28:6e:13:c3:
d6:c6:68:fe:0d:ba:1e:bb:c1:66:f4:5c:b7:ff:6c:
70:e1:30:f4:15:7d:d8:c9:e3:3a:72:65:16:42:00:
63:18:4b:2f:a7:94:23:2f:86:25:7f:f9:69:50:9d:
38:e4:b7:0a:88:7b:70:68:92:49:ab:af:3d:ff:b3:
40:b8:6f:bc:e7:2c:9b:ef:b9:0e:f0:66:16:26:ee:
1e:71:2f:39:d6:d7:27:e4:61:9c:eb:07:fc:a4:29:
60:14:18:ef:6d:99:55:57:5b:d6:42:62:c7:ed:ea:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CF:0C:62:BC:65:8A:17:80:29:41:B9:1E:6E:90:77:5A:5E:C5:8B
X509v3 Authority Key Identifier:
keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a1:61:f8:46:f6:bd:24:ed:23:f6:1f:90:da:28:c3:81:6f:
d8:8e:fc:1e:fe:ab:65:4d:0d:6e:8b:9f:02:d1:9b:c8:0d:48:
32:7c:e7:dc:f0:27:06:10:3f:d1:f0:17:cf:d6:10:6f:47:eb:
14:7e:1c:b1:fc:a9:2e:e8:94:d1:cd:d2:48:60:12:31:a3:00:
da:91:64:0f:6b:bb:3e:77:08:89:aa:3b:37:25:73:0b:b3:fb:
f1:f5:b7:45:94:a7:01:f8:2d:b5:b8:96:91:12:4d:d1:60:9e:
78:d2:cd:3a:15:ce:51:17:5d:22:ea:25:97:00:83:cd:b9:a0:
aa:e9:24:06:63:11:ef:c0:b0:fe:0d:39:6e:e5:cb:9a:e5:13:
b7:ad:c6:75:82:13:96:12:7a:c9:3f:3f:1a:54:c4:c3:76:6a:
41:fd:83:88:d4:ae:4c:aa:a1:50:78:72:cb:ed:fe:b5:eb:54:
19:03:06:57:d7:34:f6:48:16:71:5d:78:ff:9d:7b:9c:a3:16:
53:6a:62:c7:c5:95:30:08:5c:ef:b1:34:86:ac:de:03:62:e7:
bc:87:62:50:c5:26:e3:cd:08:85:87:0a:ae:84:a5:dc:0d:31:
44:2f:81:9e:3b:0b:f2:e7:5f:74:fb:60:27:b7:47:62:6f:64:
a9:4f:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:29 2026 by rpki-client