Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
File: 83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json)
Hash identifier: SMvmiiakcgB3dU7XnqRYRnHdI2FHpi3WFnWBeQiI2EQ=
Subject key identifier: D8:7A:30:71:05:14:93:FA:3B:5D:5D:20:62:A5:2F:87:AA:3D:22:84
Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
Certificate issuer: /CN=f3730086a14f31b25640c142edfd17bc93320c5a
Certificate serial: 019FA907640FDB00FA9ACD17DAFCC2D25A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
Manifest number: 1279
Signing time: Tue 28 Jul 2026 14:01:01 +0000
Manifest this update: Tue 28 Jul 2026 14:01:01 +0000
Manifest next update: Wed 29 Jul 2026 14:01:01 +0000
Files and hashes: 1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: eboMhD3FLWJBUucaoHg+EcnWDqMDs75yJbL9TF2dVVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:64:0f:db:00:fa:9a:cd:17:da:fc:c2:d2:5a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a
Validity
Not Before: Jul 28 14:01:01 2026 GMT
Not After : Jul 29 14:01:01 2026 GMT
Subject: CN=d87a3071051493fa3b5d5d2062a52f87aa3d2284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:ad:31:be:09:9a:4d:76:85:71:68:18:f7:
67:93:dd:80:a7:c6:d3:07:b6:04:b1:f7:f9:e8:4e:
1c:8f:8d:30:37:2b:6c:52:96:f8:66:ac:46:da:72:
a9:1f:47:d4:ff:0c:90:7a:c5:44:21:0f:8d:9b:05:
57:cc:7c:d1:69:93:fb:bb:17:6f:c1:92:ae:b5:97:
f9:06:04:b0:8c:93:3c:49:8d:59:d6:a4:ef:48:c9:
88:70:e3:ce:79:f1:84:00:43:c1:ce:74:2e:99:01:
f5:a3:fd:6d:f4:7c:96:e5:cc:9f:32:2c:9b:82:22:
ce:1c:c4:23:14:6f:23:df:27:45:11:fb:25:a5:97:
06:73:4c:f4:9e:91:2d:80:fb:3e:48:cf:be:4f:f8:
1a:b4:e1:67:26:c6:1b:d2:44:f1:e7:16:ee:7d:45:
db:d1:1e:ce:3f:e0:d5:87:58:7c:c7:c6:4b:41:3d:
a3:e2:1c:27:1f:bc:14:5f:34:f5:44:f2:38:cd:12:
80:62:f0:80:76:91:c6:f0:a3:8b:91:24:6a:57:6d:
2c:85:e7:8e:ef:63:e4:08:27:bd:e8:cf:77:c0:25:
70:d3:86:e4:ea:e2:57:ad:ee:c0:42:69:cc:28:d3:
5b:8e:75:f9:8f:0f:83:9a:a0:82:57:8b:e0:a5:79:
14:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7A:30:71:05:14:93:FA:3B:5D:5D:20:62:A5:2F:87:AA:3D:22:84
X509v3 Authority Key Identifier:
keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:91:7e:ce:a8:a6:33:67:4a:09:1b:8c:32:a1:23:3a:ff:3c:
a8:c0:72:63:23:d9:d2:8a:78:c3:97:60:dc:90:38:ff:e9:36:
bb:bb:88:fb:e2:13:1e:47:f5:48:0e:a4:be:10:72:19:e1:0b:
29:f6:a4:6f:56:49:12:ef:e1:4c:76:9d:21:64:b4:dd:61:15:
c6:08:88:72:9d:70:bf:b6:79:ee:e6:2f:bd:4b:2f:65:e8:95:
2d:49:33:4e:59:75:c2:40:92:17:bf:1d:fd:2b:77:4b:d2:85:
fc:1e:b2:dd:87:75:5a:63:f0:5f:12:60:b6:d3:57:56:00:99:
a4:91:76:cb:a1:4b:8d:e6:1e:4b:9d:b3:5c:38:93:63:76:1f:
da:a6:22:da:75:6a:d2:63:7b:0a:70:4b:3e:52:af:28:ed:ff:
e5:01:1c:4e:91:98:02:07:b2:37:4e:80:69:2d:db:72:6b:50:
55:84:d2:33:de:b4:4a:db:a6:c0:55:3d:13:99:9c:09:56:48:
70:59:c4:20:51:91:02:7e:8e:70:52:2f:8b:77:24:c6:48:44:
e2:9b:29:8b:b1:94:37:b0:bc:56:13:ec:b9:80:e7:a9:f9:3e:
36:ea:1f:be:b9:b4:75:e6:58:92:ae:3b:ac:ff:a9:9a:be:77:
7b:f6:97:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB2QP2wD6ms0X2vzC0loVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNzMwMDg2YTE0ZjMxYjI1NjQwYzE0MmVkZmQxN2JjOTMz
MjBjNWEwHhcNMjYwNzI4MTQwMTAxWhcNMjYwNzI5MTQwMTAxWjAzMTEwLwYDVQQD
EyhkODdhMzA3MTA1MTQ5M2ZhM2I1ZDVkMjA2MmE1MmY4N2FhM2QyMjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFKtMb4Jmk12hXFoGPdnk92Ap8bT
B7YEsff56E4cj40wNytsUpb4ZqxG2nKpH0fU/wyQesVEIQ+NmwVXzHzRaZP7uxdv
wZKutZf5BgSwjJM8SY1Z1qTvSMmIcOPOefGEAEPBznQumQH1o/1t9HyW5cyfMiyb
giLOHMQjFG8j3ydFEfslpZcGc0z0npEtgPs+SM++T/gatOFnJsYb0kTx5xbufUXb
0R7OP+DVh1h8x8ZLQT2j4hwnH7wUXzT1RPI4zRKAYvCAdpHG8KOLkSRqV20sheeO
72PkCCe96M93wCVw04bk6uJXre7AQmnMKNNbjnX5jw+DmqCCV4vgpXkUqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh6MHEFFJP6O11dIGKlL4eqPSKEMB8GA1UdIwQY
MBaAFPNzAIahTzGyVkDBQu39F7yTMgxaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYThjZWYtYmMwOS00MmI4LWI3NmQt
NzlmMzJmZDRlMzNkLzEvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xYThjZWYtYmMwOS00MmI4LWI3NmQtNzlmMzJmZDRlMzNk
LzEvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJF+zqim
M2dKCRuMMqEjOv88qMByYyPZ0op4w5dg3JA4/+k2u7uI++ITHkf1SA6kvhByGeEL
Kfakb1ZJEu/hTHadIWS03WEVxgiIcp1wv7Z57uYvvUsvZeiVLUkzTll1wkCSF78d
/St3S9KF/B6y3Yd1WmPwXxJgttNXVgCZpJF2y6FLjeYeS52zXDiTY3Yf2qYi2nVq
0mN7CnBLPlKvKO3/5QEcTpGYAgeyN06AaS3bcmtQVYTSM960StumwFU9E5mcCVZI
cFnEIFGRAn6OcFIvi3ckxkhE4pspi7GUN7C8VhPsuYDnqfk+Nuofvrm0deZYkq47
rP+pmr53e/aXhg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:44 2026 by rpki-client