Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: 1bB+NPEMi8Mt1R+gtYYn96DV7m51znZtB5vgagoq3LE=
Subject key identifier: 8B:3D:58:49:FE:5E:3B:29:F5:7A:2F:69:BC:D2:61:1A:03:76:27:FE
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 019F1831100EE4DBE2C8656EDEEBAB6E892F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 0A97
Signing time: Tue 30 Jun 2026 11:01:36 +0000
Manifest this update: Tue 30 Jun 2026 11:01:36 +0000
Manifest next update: Wed 01 Jul 2026 11:01:36 +0000
Files and hashes: 1: 4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa (hash: 9pkWaCiovhlv2wqBCLqW3gVUQadAo/HKtdeFnVdYabQ=)
2: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: 6MIqnU7Ipbw5pk1rtsTjpVebpuvvZhOiYonpAmrrVq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:10:0e:e4:db:e2:c8:65:6e:de:eb:ab:6e:89:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: Jun 30 11:01:36 2026 GMT
Not After : Jul 1 11:01:36 2026 GMT
Subject: CN=8b3d5849fe5e3b29f57a2f69bcd2611a037627fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:32:bd:13:b7:34:ab:6c:53:23:90:c4:ef:
90:32:da:9a:f0:9e:87:37:b4:b8:1a:cf:42:4d:7c:
55:00:a3:42:19:59:88:0f:e5:9c:f1:9d:9f:74:cc:
db:ab:8b:fe:6e:03:38:46:bd:fd:43:90:a4:ea:6e:
d8:ef:88:84:ed:fe:00:6e:96:b8:d2:56:f2:fb:97:
b8:48:4c:f3:96:39:d1:90:0c:f9:07:23:f1:c1:9d:
fd:77:bb:36:9c:38:2b:5f:78:97:26:59:6e:7a:16:
40:00:37:d0:17:1c:5f:79:f1:de:4c:62:b5:2e:69:
8e:56:fa:c4:56:27:08:12:b8:c4:2e:38:f8:cd:85:
cf:9b:b9:a5:de:32:64:a0:e3:e8:29:d1:e5:7d:90:
72:42:0d:1a:00:eb:72:02:52:0c:46:49:b3:41:95:
e0:e1:86:c7:71:17:34:7d:c1:41:69:d2:ef:14:e6:
5a:b2:aa:47:98:a4:a3:e3:7c:30:dd:cb:40:17:1f:
a6:86:29:b5:81:b5:9b:f0:43:a8:70:fa:22:06:f3:
d2:8f:97:fc:d1:2a:11:ce:26:a6:c5:7f:b7:7d:71:
b1:d1:f3:0a:cc:11:9c:7e:30:0f:30:36:46:85:9d:
f1:42:8d:7d:25:4e:35:a1:21:48:4b:2e:64:5e:56:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3D:58:49:FE:5E:3B:29:F5:7A:2F:69:BC:D2:61:1A:03:76:27:FE
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9c:05:99:62:ef:31:7f:15:02:0c:a5:12:74:39:ab:c0:a4:
79:47:65:8d:05:e9:88:f8:c9:cf:c3:ed:10:8a:69:06:77:42:
2c:5a:98:6e:cc:a8:79:c0:e5:64:04:f0:88:4c:6d:24:1a:41:
54:d3:cf:eb:23:2b:15:36:11:56:52:c7:03:4b:2c:c9:8d:40:
58:0d:2c:59:0f:ec:fa:d4:2a:9d:2b:75:e2:5e:ce:a5:44:58:
0d:cc:15:88:30:aa:0d:09:83:f4:08:58:b6:31:1d:de:5d:47:
23:1c:40:37:e0:95:31:97:d2:42:4d:ac:ea:34:63:50:26:6d:
09:4d:91:0a:60:6e:c6:a9:dd:75:50:54:1d:96:67:e0:49:01:
f2:a0:0a:f6:46:2a:3a:63:77:43:dc:7d:7a:31:05:4c:9c:8f:
ed:f6:f5:f1:a4:23:42:c0:e3:e6:44:82:49:8e:64:d1:ee:50:
b0:a1:95:9f:27:e2:4a:98:01:7a:65:d5:d9:3b:fa:99:d3:c0:
4b:4b:e8:a8:31:e5:fb:31:8c:b6:de:8f:65:df:4f:76:7e:68:
6e:a4:05:45:9a:7e:09:97:2f:6e:4e:48:2c:53:29:58:16:f7:
ac:63:14:19:26:40:27:40:f7:43:5c:d9:72:00:05:86:9a:af:
46:11:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:58 2026 by rpki-client