Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: q2TO2SefBd+mdqM0nIKUmEunlrgH8lmBKzQW0oEvYTw=
Subject key identifier: 76:B0:24:13:D5:7C:BB:61:2F:4F:49:1E:65:48:03:A7:EB:78:C4:17
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 01A13E94FDD64ED5AE5770843D4085EBFAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 0BB4
Signing time: Thu 15 Oct 2026 08:01:54 +0000
Manifest this update: Thu 15 Oct 2026 08:01:54 +0000
Manifest next update: Fri 16 Oct 2026 08:01:54 +0000
Files and hashes: 1: 4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa (hash: 9pkWaCiovhlv2wqBCLqW3gVUQadAo/HKtdeFnVdYabQ=)
2: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: MDeJtiQ5bZ4S37abRTAp8sFrDF+cdAwj3IIcywjdqAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:fd:d6:4e:d5:ae:57:70:84:3d:40:85:eb:fa:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: Oct 15 08:01:54 2026 GMT
Not After : Oct 16 08:01:54 2026 GMT
Subject: CN=76b02413d57cbb612f4f491e654803a7eb78c417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:21:39:64:a3:59:6f:89:20:2f:36:fa:69:
ef:4d:fd:d2:29:07:d5:32:9e:c7:91:7f:de:0a:68:
07:85:00:7d:c6:d2:b2:22:e6:76:68:1c:22:09:68:
07:e2:f8:d0:d0:cf:12:20:1e:fb:ea:89:37:ca:b1:
43:eb:92:c5:56:69:97:55:4d:fa:ba:01:0b:92:31:
16:d9:67:16:bb:fd:c5:85:c0:30:a1:83:ec:4d:a5:
db:c2:8e:e5:4f:1e:6b:7d:38:b8:ac:c3:07:c7:e7:
6a:4e:9e:f0:3f:0e:c9:3c:4b:28:48:c3:9b:8d:34:
d8:13:ca:1a:5b:00:c0:b9:cc:5b:8c:9a:24:d6:ac:
60:6a:ab:77:0a:6b:a7:25:35:9a:50:65:7b:5a:8a:
b6:cc:0d:9a:84:44:3c:80:a3:65:47:4e:4a:63:f8:
f5:d8:5d:ab:0c:08:b0:bc:9b:05:b4:46:5e:41:b4:
1a:e9:66:23:fa:db:a6:ce:d8:de:7b:e5:43:f4:02:
48:66:a1:9d:92:f6:f6:9a:10:da:af:e0:e4:29:75:
1f:7e:8f:83:f8:6d:5c:f9:56:0f:12:90:d2:b7:c5:
80:11:95:a2:9b:a6:3a:01:54:25:b5:a8:0a:f1:c8:
52:b2:06:dc:5b:e2:d6:97:08:6e:69:3f:57:1d:b3:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B0:24:13:D5:7C:BB:61:2F:4F:49:1E:65:48:03:A7:EB:78:C4:17
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:62:c2:49:5c:ca:24:67:98:e8:6a:68:4d:a1:2b:f7:c9:8f:
21:6c:e7:56:d3:57:74:89:59:17:ed:b1:ff:72:5b:d2:28:f7:
61:f0:b9:83:a7:c7:90:fb:9e:63:a4:88:de:8d:c9:ba:2c:a0:
1a:80:d3:89:91:d4:b0:97:f5:f8:5a:aa:3e:4c:e1:ea:3c:87:
7a:46:b5:ca:3d:b2:1e:b9:53:df:7e:64:aa:b9:65:18:53:db:
9d:23:0d:20:81:32:91:cf:dd:47:81:99:f6:b9:71:4d:1b:c6:
91:2b:c4:7b:31:2f:51:4f:ba:a6:8b:ed:ac:b8:0e:44:86:0d:
7a:5a:7a:d4:2f:7e:45:69:d5:14:4a:c3:f0:9e:66:4b:dd:89:
22:70:10:e5:c6:87:95:fe:f5:c9:ff:c0:c3:3e:83:73:67:46:
13:5c:2f:7f:5f:cb:02:bf:fd:6a:d9:6f:73:5f:d7:4b:73:47:
ff:a4:ea:cc:c8:5d:94:90:ef:c9:68:56:30:5a:13:06:43:ec:
d7:1a:9b:7d:b2:e7:a7:9f:bb:e6:7c:90:bb:d3:af:12:b5:c5:
df:47:6e:14:23:7d:8b:c5:35:14:cc:8c:67:69:63:a2:df:4b:
9a:1e:24:1d:bc:bb:47:9d:45:bc:7b:32:83:e5:8b:c0:7b:7d:
e2:99:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:49 2026 by rpki-client