Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier: +k1+8G5ZhfpAlUsUer+Hf+MVjwq4ZaOEDez2AreoA6E=
Subject key identifier: 6E:96:0F:CB:9C:41:2E:80:01:89:5D:C6:97:31:B4:75:86:2E:39:3B
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 019F18D67BE48E1D03F67472A5E08B12FD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number: 06D7
Signing time: Tue 30 Jun 2026 14:02:17 +0000
Manifest this update: Tue 30 Jun 2026 14:02:17 +0000
Manifest next update: Wed 01 Jul 2026 14:02:17 +0000
Files and hashes: 1: 5x6UPD5taDgKQlJm7HkMlrw0h5w.roa (hash: FXsrx/TuiFu9Wy2N3XRLZaoBhfDNCrBq2rlJC6w/nRk=)
2: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: H4IbUIIaq3diRRVK/Cre4Z6zQ+VEIoKRG1Hl873UGWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:7b:e4:8e:1d:03:f6:74:72:a5:e0:8b:12:fd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: Jun 30 14:02:17 2026 GMT
Not After : Jul 1 14:02:17 2026 GMT
Subject: CN=6e960fcb9c412e8001895dc69731b475862e393b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:f9:cd:a7:5d:bd:78:90:a2:82:7c:fe:5a:
36:19:82:c6:59:4e:c2:27:02:0d:1f:a9:3f:92:18:
37:68:9d:83:6a:a9:fc:23:69:b1:ed:1d:9d:a4:f7:
0b:6e:34:9f:13:d7:ca:7c:85:05:7e:76:34:03:ff:
61:76:30:08:39:fe:93:2c:6b:69:fb:89:eb:bd:2b:
3a:78:08:fd:67:41:a3:ee:66:74:b1:b3:bd:21:b7:
0d:35:cf:5f:86:6a:d8:c1:f2:27:31:39:5d:91:6d:
e3:9e:14:f1:65:5d:d3:77:08:04:74:b3:c3:4b:95:
42:93:ee:22:bf:06:8d:1c:b2:01:e8:cc:34:16:a3:
b7:9c:79:37:9e:17:c2:79:c4:ff:43:d7:0e:f0:7a:
17:2d:01:2c:a6:9c:47:ba:a1:c0:ff:9a:5b:5a:1b:
d1:f2:6a:49:63:aa:91:aa:4e:7a:d2:7b:85:04:81:
fc:39:7d:6f:1c:3f:95:4a:66:69:89:98:c2:e3:20:
bf:83:b5:cb:e4:c7:8a:de:68:35:b7:10:f0:4d:12:
bf:84:4c:06:79:cb:61:7e:33:aa:3f:48:54:64:d0:
e1:53:7b:c4:75:60:9e:a7:7f:d6:a7:09:89:c4:81:
bd:cf:b8:22:26:07:f1:a5:9f:b2:b7:3d:57:99:57:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:96:0F:CB:9C:41:2E:80:01:89:5D:C6:97:31:B4:75:86:2E:39:3B
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4d:85:68:a0:0e:08:5b:6e:93:a2:da:00:2a:11:d4:07:54:
f2:48:e6:19:0a:38:1b:93:35:90:c0:68:03:c9:ee:9e:45:08:
87:d6:3b:8b:1c:c7:dd:0b:1b:79:cf:2f:13:06:df:13:d5:2c:
ac:20:da:c6:5d:89:97:32:90:59:1f:ab:c7:a9:df:5f:28:a0:
9c:34:c3:06:9d:27:f6:d5:45:17:2b:ff:1f:20:63:64:dd:3d:
42:3e:b6:b5:40:98:4f:63:b6:ed:9c:8a:28:2f:89:86:08:84:
f6:2d:e6:59:52:2a:c7:75:37:bb:1a:53:04:97:34:0d:c9:b2:
ba:c5:b2:cd:93:54:25:eb:8b:94:47:d9:6f:96:f4:5c:43:ea:
b7:eb:a4:92:82:7b:11:5b:d5:e6:e1:0f:78:1f:7d:21:72:84:
89:1c:75:18:11:00:ad:a9:25:38:17:3c:d7:85:12:be:a2:25:
fc:ad:d1:58:a5:75:41:72:bb:d9:7d:73:d7:e5:76:93:f4:72:
36:b0:12:8f:e8:49:f8:48:5b:cc:4e:a9:48:52:e2:a0:22:b3:
c6:9a:1b:52:d3:2a:aa:d5:e8:db:88:27:3e:19:b7:c9:41:56:
ef:a9:04:68:98:7e:16:5c:eb:a2:ef:db:d0:6f:12:f3:dd:d7:
0f:20:dc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:18 2026 by rpki-client