Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File: 82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier: DejbUZMpm3hCRqg19qZ3E9MhS/COG+wDrJ64xiWTtBY=
Subject key identifier: 8C:44:8A:5B:0B:3C:FD:98:F5:C9:A1:A1:F8:F6:CA:DF:31:07:D2:F3
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer: /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial: 01A0C2FBB8FA9063708BD1351B558C3FBC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number: 09D5
Signing time: Mon 21 Sep 2026 08:01:11 +0000
Manifest this update: Mon 21 Sep 2026 08:01:11 +0000
Manifest next update: Tue 22 Sep 2026 08:01:11 +0000
Files and hashes: 1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: je4CZTX4/EllDP2M6O070UijliPEtRCfB991x/NH1pM=)
2: yhxgRAr99RGmci9ROhuXvzy0jYE.roa (hash: 3wgbJG/cVAe3llBkizxknl37XeT2Rpuyh/OqTuIeXAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:b8:fa:90:63:70:8b:d1:35:1b:55:8c:3f:bc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Validity
Not Before: Sep 21 08:01:11 2026 GMT
Not After : Sep 22 08:01:11 2026 GMT
Subject: CN=8c448a5b0b3cfd98f5c9a1a1f8f6cadf3107d2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:ce:7f:46:c3:93:3f:b0:eb:fa:ad:37:68:
66:83:36:6d:96:7f:71:4d:4e:00:e6:67:05:2b:5d:
55:98:cb:e4:cc:5d:bf:4d:ec:87:ee:c2:c4:be:7b:
13:98:cf:e6:00:34:08:06:a9:43:04:27:95:b0:8b:
8b:d6:5f:30:3b:0c:af:bf:89:77:82:49:50:61:17:
17:c3:90:c7:50:c3:33:25:b9:5e:c0:23:ef:b5:cd:
d7:c6:63:49:6f:c6:53:4d:9c:1e:83:58:81:a4:45:
b9:6b:ab:2a:fd:42:2a:2d:90:2f:cd:16:23:89:b5:
c5:f7:0d:e6:24:f9:e8:71:4a:81:a3:67:97:b6:8d:
7c:13:85:ae:79:4a:32:c3:a4:5f:b4:7b:e3:0d:17:
11:2f:35:dd:a9:1a:76:f9:6d:46:bd:29:68:45:e2:
59:aa:17:ce:fe:d8:90:be:ef:55:b8:0e:43:ae:8c:
5c:99:46:5e:03:22:e5:46:81:99:a4:77:d0:0e:d1:
d5:c2:5f:a6:c4:2f:b9:72:c5:ff:d0:58:ab:ae:4c:
71:a5:6b:74:68:57:2e:4f:14:00:59:92:a2:59:53:
46:02:f1:76:04:2c:ca:b5:a4:cf:0f:3c:23:fd:cd:
3c:ac:59:62:9c:c9:c7:e2:b6:0d:24:55:6c:12:8e:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:44:8A:5B:0B:3C:FD:98:F5:C9:A1:A1:F8:F6:CA:DF:31:07:D2:F3
X509v3 Authority Key Identifier:
keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:85:61:2b:1d:60:6e:fa:c3:58:bf:74:19:b8:4b:3f:69:72:
e1:87:58:bc:91:0a:bf:83:2b:58:af:4e:f1:8e:52:fb:51:fd:
4c:8d:5d:21:84:3b:0f:25:b8:3f:d5:08:d7:60:79:f9:0b:a1:
85:46:9e:d3:0b:e0:ea:04:77:aa:d9:15:cd:6e:d4:00:6d:01:
a9:bf:11:f0:07:b5:02:12:5c:2d:f5:cf:4c:7b:d5:79:25:6d:
b8:12:58:98:38:bd:41:4b:fb:d9:0b:55:6a:1c:34:f4:06:2b:
1e:ad:c7:9c:d2:01:56:5e:e0:cb:a4:c8:18:d9:b7:83:b9:a5:
30:3e:d5:71:96:ae:e5:1d:21:0c:77:be:01:3e:3d:c5:dd:54:
0d:57:08:fd:43:02:bc:b1:71:6c:5d:61:56:61:2a:20:7b:ff:
df:cd:0c:05:d9:42:64:a0:09:dc:63:90:f7:82:82:a8:29:95:
24:d7:10:ff:6d:81:ee:9b:29:b1:73:68:4a:84:a8:a8:19:43:
5f:62:41:34:76:ff:8e:82:3f:11:dc:8c:f7:3b:66:3b:42:6a:
d3:29:7d:88:f9:91:f3:2b:70:24:3c:e8:b8:29:98:08:e8:18:
70:7e:e6:a6:b5:6f:29:4b:f1:f1:1f:67:d6:fc:83:31:a0:6e:
ab:13:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:30:25 2026 by rpki-client