Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: uQjXXQ8eT88E6SM5kzHhUThpA17zuuvHgPD8xTBqX5Q=
Subject key identifier: 95:05:A3:CF:F0:9C:18:3C:3C:B1:05:3E:80:06:42:84:38:A4:9D:7C
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 019D3940858A2F5D5B06BB75D14C53AA545D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 099F
Signing time: Sun 29 Mar 2026 11:00:22 +0000
Manifest this update: Sun 29 Mar 2026 11:00:22 +0000
Manifest next update: Mon 30 Mar 2026 11:00:22 +0000
Files and hashes: 1: 4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa (hash: 9pkWaCiovhlv2wqBCLqW3gVUQadAo/HKtdeFnVdYabQ=)
2: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: R+nif/s+8okWMOLu5L6ZPTSA2hbj9/6tyZgSgUQwRKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:85:8a:2f:5d:5b:06:bb:75:d1:4c:53:aa:54:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: Mar 29 11:00:22 2026 GMT
Not After : Mar 30 11:00:22 2026 GMT
Subject: CN=9505a3cff09c183c3cb1053e8006428438a49d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:e0:01:fa:02:21:49:7b:93:54:fc:4c:9f:
f2:97:74:42:c6:8e:fc:66:1d:7e:ce:c5:0f:c0:4c:
b4:98:92:32:c5:eb:73:b8:1f:03:8a:a6:2e:bc:36:
e0:1e:16:27:45:60:50:28:5a:d6:ec:5b:75:c1:86:
43:b0:bf:22:60:ce:b8:18:78:69:20:13:25:70:98:
fe:50:f8:38:34:52:a3:1a:4b:65:3c:34:31:60:67:
8d:1a:5c:eb:95:ce:e2:46:ed:f4:e9:3f:9e:82:fb:
5f:09:a8:dd:e8:fc:dc:13:ab:e5:73:ae:b5:65:5d:
bb:22:28:a4:58:1e:57:94:e2:30:af:10:5c:35:75:
93:0b:97:7e:dc:6a:84:f2:f3:c7:b0:5e:c7:6a:06:
d7:68:cb:cd:89:45:7f:58:8f:b4:94:64:0f:fc:95:
16:bb:e2:f1:79:59:6f:80:be:bb:a9:d5:3f:97:30:
5c:a9:80:26:99:d6:51:05:3f:ce:a7:98:84:74:9d:
e2:d4:48:60:6a:71:94:d0:16:09:0f:dd:6f:8e:3e:
54:7d:55:23:0c:1d:d4:00:9d:0a:ed:66:f1:39:42:
c7:5b:31:19:ea:8a:8f:b5:ff:7e:97:25:0c:66:93:
a5:fa:cd:1e:86:41:5e:74:fc:08:39:42:f8:eb:61:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:05:A3:CF:F0:9C:18:3C:3C:B1:05:3E:80:06:42:84:38:A4:9D:7C
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:eb:29:f0:c8:1d:29:45:c9:5e:4a:53:6b:6c:40:39:2d:48:
2d:94:6d:e2:37:50:6e:52:8b:cf:fd:a2:da:5c:9e:10:da:8b:
fb:36:a2:af:d1:4a:63:85:d3:aa:8c:ed:fc:2c:58:4c:ab:82:
7c:e0:64:4e:55:c9:7c:89:67:da:8c:cf:06:47:d4:ed:72:f6:
df:4b:68:6f:ba:58:95:63:73:f4:2c:31:42:7a:72:a7:63:be:
3f:31:6c:43:fb:40:4a:43:43:5b:c5:ad:e4:e7:1b:ec:86:fc:
bd:23:66:64:2b:39:21:ef:a0:24:ec:91:a5:d3:2c:05:c2:fd:
e4:d0:94:08:11:6d:96:6b:98:cb:38:ba:dd:1f:c6:7d:03:e9:
8f:ab:a3:13:57:9c:2a:e3:79:29:f1:d4:69:47:2e:f3:fc:e7:
ec:68:25:32:75:6a:0d:8d:f8:4f:45:33:97:7d:59:82:3b:01:
f2:62:b4:b7:c7:81:85:c6:b4:ba:75:82:1b:ac:77:65:7a:3b:
f9:f4:28:d3:1e:d4:e5:2d:ca:a7:c6:2f:0a:45:9b:89:18:70:
fb:bd:d8:76:9e:d6:e8:7c:da:f9:e9:1f:95:44:66:72:7d:29:
14:2c:ba:7b:87:e9:6d:12:a2:36:cd:8c:d8:2c:7f:6d:01:98:
80:d1:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:20 2026 by rpki-client