Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File: 82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier: WZRXFF7YSWrLSJyxn8lXhtK6ntp93sdLscAvyZhluW8=
Subject key identifier: C2:B5:D3:C2:9A:50:67:28:71:DB:4F:20:DF:4E:8A:4D:40:75:A1:E9
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer: /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial: 019FA90720E460D7E0CCD3C14AA0C7A73DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number: 0943
Signing time: Tue 28 Jul 2026 14:00:44 +0000
Manifest this update: Tue 28 Jul 2026 14:00:44 +0000
Manifest next update: Wed 29 Jul 2026 14:00:44 +0000
Files and hashes: 1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: lxCggUjwV3IcjlBRbLU2jD+LUncXLvcfDucesZbEV7c=)
2: yhxgRAr99RGmci9ROhuXvzy0jYE.roa (hash: 3wgbJG/cVAe3llBkizxknl37XeT2Rpuyh/OqTuIeXAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:20:e4:60:d7:e0:cc:d3:c1:4a:a0:c7:a7:3d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Validity
Not Before: Jul 28 14:00:44 2026 GMT
Not After : Jul 29 14:00:44 2026 GMT
Subject: CN=c2b5d3c29a50672871db4f20df4e8a4d4075a1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:47:89:e5:db:ea:04:00:a9:30:96:cf:81:
fd:22:eb:05:03:f6:05:9f:f8:c1:db:fb:41:5e:d6:
c7:4d:d9:81:d9:b5:c0:e2:dc:d0:75:63:e3:c6:4d:
a5:a2:e5:04:b6:35:14:b1:2a:f5:5a:f4:68:50:5f:
8a:bc:70:ab:6e:6a:89:08:fa:0e:d4:89:42:79:4e:
c2:59:4f:76:55:8a:ab:79:cd:6f:6f:d0:28:9b:a8:
54:b6:91:90:1e:59:96:98:17:56:24:db:5d:80:1f:
5f:4b:db:21:1b:7d:eb:9c:b3:fc:eb:31:b9:5b:c2:
61:80:44:f8:e3:c5:0e:e2:be:7d:44:eb:c9:6d:76:
96:b3:90:fc:8b:06:a1:15:37:ac:6b:53:8f:3d:ba:
50:d5:51:ae:2e:ef:5d:73:08:d3:3f:17:1f:74:aa:
3d:45:6b:1e:74:aa:bb:d3:6f:8d:d1:ff:a7:1d:88:
57:e7:40:ba:30:fe:53:af:d0:a0:52:f5:6c:da:a6:
dd:6b:c2:01:31:23:28:b6:13:25:59:65:8b:3a:44:
18:33:e2:c2:09:76:a4:f5:45:d0:de:18:ff:d4:9e:
8c:bd:17:01:75:29:ba:49:6f:3e:30:72:fa:e6:18:
a9:ed:de:3e:dc:a9:53:44:f8:9d:11:40:aa:bf:38:
13:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B5:D3:C2:9A:50:67:28:71:DB:4F:20:DF:4E:8A:4D:40:75:A1:E9
X509v3 Authority Key Identifier:
keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:60:74:d3:72:6d:06:78:ce:34:ff:1f:8a:c0:c9:95:f6:22:
43:fe:64:6e:08:6d:76:0d:8d:16:64:2f:65:4d:70:0b:90:da:
bc:69:c1:7b:5f:9b:16:58:6b:be:2f:24:01:c3:cf:dd:89:63:
99:75:91:08:7d:95:f9:34:ee:65:4b:30:e6:13:2d:60:fe:bd:
bd:d6:e1:55:a4:b7:7f:ce:65:cf:22:c1:0b:ea:85:55:78:d9:
8e:c3:87:65:c6:de:4c:5b:78:03:e4:30:14:82:73:82:23:03:
2d:72:31:8b:3c:2c:54:45:df:55:e8:1e:e3:53:06:a0:74:92:
d5:75:aa:04:1a:7c:7f:df:a5:4f:ef:b2:89:9b:b9:ea:46:0e:
ed:5b:22:a2:f1:f9:d8:be:24:ca:3f:b1:46:fb:1a:40:bd:ed:
95:e7:bc:5c:4f:36:33:c6:c4:13:88:b5:cb:14:c4:12:b3:44:
36:c1:33:a7:03:05:17:77:a8:76:94:41:91:de:b7:08:f6:2d:
41:7b:68:6d:f7:b8:a3:5a:f1:5d:be:09:83:07:ba:cf:36:8e:
ad:22:42:7e:eb:20:30:0a:1b:bc:dc:3b:e7:b3:90:74:87:f4:
ff:d1:7e:4a:ce:bc:a6:7d:63:e9:97:30:22:ea:e6:da:c8:8c:
b4:81:6d:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pByDkYNfgzNPBSqDHpz3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNjBjNzhiMWQ0NjJkNmJhZmRmNzM1OWQzYzIzM2RkYmY5
MjlkMzEwHhcNMjYwNzI4MTQwMDQ0WhcNMjYwNzI5MTQwMDQ0WjAzMTEwLwYDVQQD
EyhjMmI1ZDNjMjlhNTA2NzI4NzFkYjRmMjBkZjRlOGE0ZDQwNzVhMWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmFHieXb6gQAqTCWz4H9IusFA/YF
n/jB2/tBXtbHTdmB2bXA4tzQdWPjxk2louUEtjUUsSr1WvRoUF+KvHCrbmqJCPoO
1IlCeU7CWU92VYqrec1vb9Aom6hUtpGQHlmWmBdWJNtdgB9fS9shG33rnLP86zG5
W8JhgET448UO4r59ROvJbXaWs5D8iwahFTesa1OPPbpQ1VGuLu9dcwjTPxcfdKo9
RWsedKq702+N0f+nHYhX50C6MP5Tr9CgUvVs2qbda8IBMSMothMlWWWLOkQYM+LC
CXak9UXQ3hj/1J6MvRcBdSm6SW8+MHL65hip7d4+3KlTRPidEUCqvzgTwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMK108KaUGcocdtPIN9Oik1AdaHpMB8GA1UdIwQY
MBaAFPNgx4sdRi1rr99zWdPCM92/kp0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kOGM5OWMtZTBjOC00YzFhLTgxZmIt
OTAwZDFjYTMyZDdlLzEvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kOGM5OWMtZTBjOC00YzFhLTgxZmItOTAwZDFjYTMyZDdl
LzEvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGB003Jt
BnjONP8fisDJlfYiQ/5kbghtdg2NFmQvZU1wC5DavGnBe1+bFlhrvi8kAcPP3Ylj
mXWRCH2V+TTuZUsw5hMtYP69vdbhVaS3f85lzyLBC+qFVXjZjsOHZcbeTFt4A+Qw
FIJzgiMDLXIxizwsVEXfVege41MGoHSS1XWqBBp8f9+lT++yiZu56kYO7VsiovH5
2L4kyj+xRvsaQL3tlee8XE82M8bEE4i1yxTEErNENsEzpwMFF3eodpRBkd63CPYt
QXtobfe4o1rxXb4Jgwe6zzaOrSJCfusgMAobvNw757OQdIf0/9F+Ss68pn1j6Zcw
Iurm2siMtIFtXA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:31 2026 by rpki-client