
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
File: 83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json)
Hash identifier: kP/f9yrlpT2CnafSQsV2opRAupG/TuFTc7j/gkMC9IU=
Subject key identifier: 56:DA:45:41:2B:32:77:04:6F:55:91:5A:9E:11:AD:CA:4B:CC:49:BC
Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
Certificate issuer: /CN=f3730086a14f31b25640c142edfd17bc93320c5a
Certificate serial: 019CAA58732EF81496BBB4D8E4EA54BD2E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
Manifest number: 10EC
Signing time: Sun 01 Mar 2026 17:00:49 +0000
Manifest this update: Sun 01 Mar 2026 17:00:49 +0000
Manifest next update: Mon 02 Mar 2026 17:00:49 +0000
Files and hashes: 1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: CkmDJ99/Ck60nSt0JX+fgbgQo2YpUdev/9bW7WSbkFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:73:2e:f8:14:96:bb:b4:d8:e4:ea:54:bd:2e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a
Validity
Not Before: Mar 1 17:00:49 2026 GMT
Not After : Mar 2 17:00:49 2026 GMT
Subject: CN=56da45412b3277046f55915a9e11adca4bcc49bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:df:e3:20:dd:8f:f4:30:3a:39:d5:9b:fa:
66:0c:2d:6f:77:8d:c6:71:e5:61:04:0d:2f:b5:59:
fd:33:6a:0b:ff:54:93:75:40:da:44:f1:18:25:6c:
96:bf:c7:d8:42:96:a3:5e:05:29:ea:db:ac:61:6b:
1c:da:8f:12:8e:1b:b6:c0:39:47:87:11:69:fe:fb:
03:e2:67:01:b6:3a:a1:66:1a:7e:0f:3c:d6:ec:38:
08:96:72:c5:62:86:63:11:69:a3:65:bb:96:04:cf:
8d:78:37:8d:f0:2e:c6:88:bc:75:c1:ab:9f:ad:fb:
b6:1e:be:c4:65:18:25:eb:0c:85:4b:cf:e1:13:b2:
e6:45:42:5f:0c:11:68:25:01:29:f5:98:4c:d2:67:
33:47:d5:8c:03:70:2c:68:09:c9:e7:14:f9:d8:d9:
94:6a:4e:24:bd:20:42:74:c7:87:22:da:79:a1:1e:
fa:9a:03:56:0d:95:0c:31:10:20:a9:8d:69:aa:4a:
b1:5f:8c:b5:89:d1:2d:69:63:90:e0:ce:88:b6:7e:
48:7a:81:b0:10:36:cd:9d:56:05:29:65:be:3e:8d:
78:91:b5:56:6b:e8:d0:82:21:ca:b0:07:b6:8e:c2:
6d:46:60:41:42:4f:85:fc:97:be:e0:7c:95:b3:9b:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DA:45:41:2B:32:77:04:6F:55:91:5A:9E:11:AD:CA:4B:CC:49:BC
X509v3 Authority Key Identifier:
keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:99:39:46:99:00:f1:b7:69:5b:ad:96:15:35:a8:0e:b5:13:
4b:34:69:57:65:53:5b:08:3c:23:34:c9:b7:cd:32:a6:f7:33:
e9:37:e4:30:9a:6c:94:c6:73:d4:21:c6:ca:cd:c7:6c:57:86:
40:61:e8:4a:e0:95:16:44:55:36:98:2a:97:d3:69:af:ba:3a:
4c:91:ca:d2:de:9d:1e:1d:f8:34:5d:03:5d:4e:58:a2:b2:ec:
0c:f7:a4:ab:f7:09:06:02:4e:ce:12:b2:ec:c4:8c:c1:4b:b3:
76:cd:36:bb:8f:07:74:6e:ef:90:ba:f4:49:8c:f9:62:2b:77:
b1:96:86:91:03:9e:ce:d7:16:44:9c:02:c4:73:1a:67:51:ff:
88:4f:57:e9:c2:2a:87:3d:c3:5b:4d:ca:fa:7a:96:42:2f:d0:
96:7e:dd:16:2b:08:33:d8:2f:26:63:46:0f:74:fe:f4:c6:3f:
f9:a9:f6:c8:43:37:6a:4f:a0:23:cf:bf:e1:df:ac:d8:e9:e5:
89:b0:db:59:a6:b4:05:5b:a7:6b:dc:6a:01:bf:2b:e6:2d:bd:
32:6e:4b:67:05:26:3c:88:5a:f3:3d:5c:97:ae:5b:e9:4a:25:
62:fd:88:53:d6:91:2b:ac:af:d4:9b:35:02:56:5b:d2:c1:ff:
78:59:ee:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:42 2026 by rpki-client