Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier: sDXca27k0yFJfOr4Jafzv7d1hhyHrTV8iANBGlUdXzU=
Subject key identifier: E2:EE:20:89:F6:A5:74:F7:9D:D0:32:60:F8:2A:04:B7:8E:BD:59:80
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial: 019CE6A3EF33BE2F50230799ACC46A6D76E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number: 1864
Signing time: Fri 13 Mar 2026 10:00:29 +0000
Manifest this update: Fri 13 Mar 2026 10:00:29 +0000
Manifest next update: Sat 14 Mar 2026 10:00:29 +0000
Files and hashes: 1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: VJlm7wO8lhSxsWrL+wPRcXcmN8ZDEihXTWI/fhMcPLo=)
2: z4xZtO9FtF8o6mwi4QbL-Wu86s4.roa (hash: vP00qCgQWns/k1mWbLbmAoHCP48JJhdfJx4DqX0YL04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a3:ef:33:be:2f:50:23:07:99:ac:c4:6a:6d:76:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Validity
Not Before: Mar 13 10:00:29 2026 GMT
Not After : Mar 14 10:00:29 2026 GMT
Subject: CN=e2ee2089f6a574f79dd03260f82a04b78ebd5980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:aa:de:77:68:fa:2a:ca:92:04:e4:d5:2e:
e6:d2:88:af:2d:76:9f:b5:e2:5f:9f:20:2f:55:30:
be:ba:1e:46:fe:eb:65:2a:7e:4c:19:b8:e4:eb:28:
39:17:c9:70:62:b0:5d:91:fe:65:05:50:89:bc:47:
b7:4c:e7:20:2f:74:67:f7:04:e6:88:ee:6c:6a:00:
d6:1b:0f:e0:9e:a3:ea:00:2f:96:fb:e1:8e:4d:d3:
db:e0:ff:67:9b:fd:c2:39:11:c0:d8:1a:56:a0:0d:
ef:79:5d:83:6c:84:34:8f:fa:9c:72:32:44:aa:55:
94:64:eb:06:9a:1a:d9:b6:65:73:32:eb:df:d2:91:
a1:2f:da:f9:21:57:df:8d:20:9a:35:97:e4:67:98:
f2:a2:45:cf:20:1d:e7:29:65:fa:06:ae:d8:7b:36:
85:7b:e7:6f:48:c0:ed:a0:aa:59:f4:7b:00:cb:29:
b4:cb:86:69:f0:26:fd:bd:56:f1:8a:6d:3a:02:fe:
9e:9d:31:1e:55:83:a9:4b:53:24:46:22:67:0c:65:
4c:e0:db:eb:65:b4:00:d8:8b:83:66:63:b0:b1:a3:
93:c8:0a:ab:ff:b6:6e:4e:05:7c:08:91:e2:88:70:
e7:46:de:b8:33:12:e9:53:09:1a:06:07:a5:77:fb:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EE:20:89:F6:A5:74:F7:9D:D0:32:60:F8:2A:04:B7:8E:BD:59:80
X509v3 Authority Key Identifier:
keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fc:86:1d:57:5f:97:04:6c:6a:5b:25:b2:41:38:4e:33:4a:
d1:2b:82:8c:64:33:2c:f7:38:48:a8:a6:9a:95:6c:aa:0d:70:
70:d6:bc:1a:a8:78:fd:e4:ca:8f:69:ff:88:9b:15:ce:29:eb:
d5:04:41:e7:4b:18:d6:32:12:30:88:5a:12:87:7f:c8:db:f7:
11:41:92:1e:ae:40:38:50:36:39:8f:57:74:26:88:24:69:02:
4e:da:72:8d:68:52:4c:aa:99:6d:31:bb:fb:d0:a1:88:35:95:
43:33:ba:97:49:e0:ef:e8:c6:04:18:42:96:b3:07:d4:1a:9a:
93:cd:49:04:45:7c:17:0b:67:8b:18:95:f4:09:df:4f:f3:41:
d9:ad:2f:e1:50:b0:17:82:8d:9d:ce:3e:63:13:e3:3e:25:a0:
38:81:b7:f2:37:36:33:c4:3b:e3:34:17:e0:25:f3:4c:9f:ee:
8c:b0:02:cb:fa:f1:e8:6b:5f:d5:6b:85:18:4a:f4:23:2a:1a:
40:1c:1f:61:71:03:71:56:a3:71:62:8c:b6:3f:bb:12:35:fc:
04:d3:b4:70:b1:55:98:5e:1d:0a:57:7d:4f:c1:ea:3c:0f:a0:
91:9c:4b:84:a0:f1:b5:9e:23:bc:48:a2:e0:cd:33:7d:5c:8e:
94:cc:73:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmo+8zvi9QIweZrMRqbXbiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzODYyN2UzNmE0ZTE2YmRjMzlmMGI1NTBkNzRmZDcxZTQ0
MmQyYzIwHhcNMjYwMzEzMTAwMDI5WhcNMjYwMzE0MTAwMDI5WjAzMTEwLwYDVQQD
EyhlMmVlMjA4OWY2YTU3NGY3OWRkMDMyNjBmODJhMDRiNzhlYmQ1OTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF2q3ndo+irKkgTk1S7m0oivLXaf
teJfnyAvVTC+uh5G/utlKn5MGbjk6yg5F8lwYrBdkf5lBVCJvEe3TOcgL3Rn9wTm
iO5sagDWGw/gnqPqAC+W++GOTdPb4P9nm/3CORHA2BpWoA3veV2DbIQ0j/qccjJE
qlWUZOsGmhrZtmVzMuvf0pGhL9r5IVffjSCaNZfkZ5jyokXPIB3nKWX6Bq7YezaF
e+dvSMDtoKpZ9HsAyym0y4Zp8Cb9vVbxim06Av6enTEeVYOpS1MkRiJnDGVM4Nvr
ZbQA2IuDZmOwsaOTyAqr/7ZuTgV8CJHiiHDnRt64MxLpUwkaBgeld/ubuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLuIIn2pXT3ndAyYPgqBLeOvVmAMB8GA1UdIwQY
MBaAFPOGJ+NqTha9w58LVQ10/XHkQtLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zYThlNGMtOTIxNy00YjFmLWI2ZmQt
ODQyNDM3ZDI3Mjc5LzEvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zYThlNGMtOTIxNy00YjFmLWI2ZmQtODQyNDM3ZDI3Mjc5
LzEvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfyGHVdf
lwRsalslskE4TjNK0SuCjGQzLPc4SKimmpVsqg1wcNa8Gqh4/eTKj2n/iJsVzinr
1QRB50sY1jISMIhaEod/yNv3EUGSHq5AOFA2OY9XdCaIJGkCTtpyjWhSTKqZbTG7
+9ChiDWVQzO6l0ng7+jGBBhClrMH1Bqak81JBEV8FwtnixiV9AnfT/NB2a0v4VCw
F4KNnc4+YxPjPiWgOIG38jc2M8Q74zQX4CXzTJ/ujLACy/rx6Gtf1WuFGEr0Iyoa
QBwfYXEDcVajcWKMtj+7EjX8BNO0cLFVmF4dCld9T8HqPA+gkZxLhKDxtZ4jvEii
4M0zfVyOlMxzGg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 16:23:21 2026 by rpki-client