Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
File: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json)
Hash identifier: TdHrfNBJGACmu/Nof5+zGHd6/R8dWm2CyB5PLcd7VGI=
Subject key identifier: C7:C0:9B:14:A4:F9:27:A3:34:26:1D:EB:AC:97:AB:9E:84:E5:59:2F
Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Certificate issuer: /CN=f37063a85445019ab845a5b7e54395cdd39927f6
Certificate serial: 019CAAC67359596843B2490BA3242D731F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
Manifest number: 1380
Signing time: Sun 01 Mar 2026 19:00:58 +0000
Manifest this update: Sun 01 Mar 2026 19:00:58 +0000
Manifest next update: Mon 02 Mar 2026 19:00:58 +0000
Files and hashes: 1: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: OeJYbUn+vBvTo4PIViQbSzfV9LmECb13TS+iIetA/0g=)
2: ty6PndNE6v0aicb5nH7jK6LCpOM.roa (hash: XKTIyXg8m6KS1U1qTQli91yAnTA7Vje4/FVAAtdNNEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:73:59:59:68:43:b2:49:0b:a3:24:2d:73:1f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6
Validity
Not Before: Mar 1 19:00:58 2026 GMT
Not After : Mar 2 19:00:58 2026 GMT
Subject: CN=c7c09b14a4f927a334261debac97ab9e84e5592f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:7d:c5:d0:8f:b0:19:19:3b:e7:a2:9d:9e:
57:2b:57:df:da:1a:bf:b2:c3:3f:87:7e:8d:52:c8:
c3:5b:1f:d3:8c:52:4e:92:56:69:aa:95:cb:fb:bc:
7d:72:9a:bd:ef:34:15:13:08:21:b9:3e:de:df:95:
66:1a:de:f1:2d:58:b8:73:42:ba:df:75:b5:fc:3e:
f9:03:8b:46:12:a7:e9:22:87:f0:7e:35:cc:4e:5d:
ce:c3:ac:51:f6:05:87:04:39:f6:8c:eb:7e:1d:fc:
0d:21:87:39:af:3d:a4:e5:e8:1d:15:f7:79:9e:de:
06:9b:91:fd:09:98:98:6d:71:67:b4:6f:e4:1f:02:
3c:5d:18:8d:a3:f8:40:78:a8:97:ff:ed:88:c3:37:
d1:dc:6d:39:0a:a1:ae:b2:09:09:a3:8d:b5:85:b6:
47:23:33:2a:69:a3:8c:77:dd:6b:cf:ac:2a:e6:ae:
16:f4:b7:ad:26:47:fb:6d:de:c6:4e:75:d5:b2:01:
7a:27:eb:8b:e6:50:df:17:41:99:d1:54:f3:e2:a2:
31:c0:ef:d5:46:72:bb:ac:95:8e:14:fa:6f:a3:c3:
e3:09:81:99:7f:2a:9c:0a:a4:e4:f4:26:2c:16:39:
b9:0e:53:39:d1:15:bb:75:04:a1:f8:b7:dd:97:25:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C0:9B:14:A4:F9:27:A3:34:26:1D:EB:AC:97:AB:9E:84:E5:59:2F
X509v3 Authority Key Identifier:
keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a0:e1:97:da:66:78:ba:c0:5b:b7:d1:63:b8:b5:1c:72:27:
f9:89:89:6a:10:66:50:99:38:9b:95:a9:5b:06:68:cf:c1:9d:
c7:c4:8a:66:3d:7b:b8:f0:b7:3d:83:cb:d3:f3:3d:87:be:56:
48:9e:63:2c:9c:76:7b:2a:2e:7f:fd:96:96:67:77:25:f8:8f:
a4:60:68:3d:63:ba:ec:60:bd:b5:7b:f9:d5:6a:fa:19:77:3a:
24:bb:16:11:13:e3:77:3c:3f:1f:7b:5f:e1:b6:83:10:67:d4:
2f:7e:e8:c1:55:fa:46:da:5e:4e:7a:e1:be:88:bd:f1:6d:73:
55:51:e6:ca:fb:7a:6b:72:8f:ab:ea:89:0f:af:0d:47:ce:27:
5c:f5:b1:bb:2f:d8:00:d7:ae:48:c0:cb:20:da:5e:84:76:1f:
b9:50:fc:b9:57:b7:e7:ae:9f:70:1f:8d:66:ff:41:f9:81:83:
57:0d:a8:38:96:cc:e1:79:f0:b8:18:4f:a0:94:bd:fb:ec:d1:
00:39:0f:de:a4:16:02:59:29:11:56:20:21:51:a6:ca:7d:30:
92:8b:26:36:8a:26:3c:dd:5f:cf:4f:e7:db:39:fa:4d:60:f8:
31:d0:10:2a:be:b2:79:b9:c2:3f:93:a8:9a:b1:29:b9:05:f3:
48:17:68:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:25 2026 by rpki-client