Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier: 0Ogqowl5IO0JrBQDKcgPRM2SOJpoN3RiCEFtHvxZp2A=
Subject key identifier: 0F:3B:C5:81:F5:B6:07:59:75:BA:FD:9E:0F:90:66:DC:44:73:9D:3D
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial: 019DD0514EB403F31F5DA55A2E73634519B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 19:01:22 +0000
Manifest this update: Mon 27 Apr 2026 19:01:22 +0000
Manifest next update: Tue 28 Apr 2026 19:01:22 +0000
Files and hashes: 1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: taRRnyIhh1fIaNRHhEfpdVsH+b7B7+dEn1JBPFnCifw=)
2: z4xZtO9FtF8o6mwi4QbL-Wu86s4.roa (hash: vP00qCgQWns/k1mWbLbmAoHCP48JJhdfJx4DqX0YL04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:4e:b4:03:f3:1f:5d:a5:5a:2e:73:63:45:19:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Validity
Not Before: Apr 27 19:01:22 2026 GMT
Not After : Apr 28 19:01:22 2026 GMT
Subject: CN=0f3bc581f5b6075975bafd9e0f9066dc44739d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:5e:b6:37:85:98:ee:86:d0:e5:1e:67:66:
81:3d:bf:a3:c1:53:90:3c:f8:44:86:83:28:24:5b:
d2:40:a6:b7:4d:c1:20:0a:1f:a2:04:21:a2:5b:88:
39:8f:16:e7:6b:e5:d2:d5:82:24:91:7e:3f:a7:df:
9a:78:84:d2:c1:df:01:a6:02:2e:c3:eb:cc:01:e2:
72:69:53:dc:02:09:cf:74:e6:c2:8b:36:e8:0a:e7:
a6:41:43:bd:a5:65:90:95:28:e2:64:7e:a0:b7:1d:
6c:6d:c6:7d:03:f5:19:40:21:bd:00:db:5c:03:63:
c7:2d:44:fe:c4:5f:45:9a:d7:f5:60:8b:b2:fa:2e:
41:0f:e5:e6:cd:99:0c:f6:6a:c2:65:2b:08:3e:57:
65:c9:5d:33:19:e3:b3:de:cf:f7:c1:b1:aa:11:37:
37:c1:5c:74:5e:00:32:49:fe:66:b3:06:94:23:19:
61:bc:ad:60:f9:2b:d5:30:d5:3a:21:bd:f3:a1:34:
9d:cd:56:79:3e:1a:f7:7d:1a:88:08:94:80:16:05:
3f:84:11:70:08:76:3a:71:d2:c0:53:f7:c0:4e:f6:
cf:f3:21:99:0e:32:2c:a8:0b:be:da:3e:f9:f0:ce:
c4:5c:2b:18:0a:79:fe:70:19:45:8a:29:db:8c:13:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3B:C5:81:F5:B6:07:59:75:BA:FD:9E:0F:90:66:DC:44:73:9D:3D
X509v3 Authority Key Identifier:
keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b1:68:3a:10:2f:6a:fd:4b:f4:57:66:14:ff:0d:45:78:ac:
21:a0:d2:4c:8e:8c:70:e7:76:28:43:bc:49:de:7e:69:1f:26:
e4:e2:31:44:f4:f3:2c:a6:dd:42:fd:b7:68:f5:94:f0:24:9b:
77:66:55:f7:67:01:ce:c1:cd:43:a8:36:ee:72:38:b8:fb:d8:
c1:1b:6c:41:3e:a4:ec:8f:d2:1d:4e:36:fe:18:0d:9f:d2:ae:
b5:60:56:26:93:68:b6:c5:ff:77:53:fb:16:4f:a5:a6:b3:2c:
fc:4f:de:a0:77:5b:c6:bf:ac:f5:4b:e4:76:65:db:7d:ed:52:
62:11:ba:f7:31:8d:99:33:92:cc:d8:19:99:d4:76:29:f3:32:
ff:07:24:92:40:f7:0c:d3:a3:3d:36:58:a8:1b:42:ed:e3:c8:
6e:25:27:cf:93:b7:5d:54:3e:f1:c1:85:cf:a3:8e:1e:86:ac:
55:df:04:64:01:b3:f0:08:ff:19:fe:93:b3:30:6d:6c:3f:85:
2f:f0:4e:98:00:97:5c:9b:d1:37:6b:cb:6e:47:78:ef:9d:5f:
a5:3a:1f:0a:0d:c6:91:ee:65:19:e0:c1:5b:4d:62:54:3e:0d:
77:db:68:6e:20:24:b3:82:5b:14:3a:71:0b:13:e0:b6:02:f8:
59:11:10:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:53:28 2026 by rpki-client