Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json)
Hash identifier: 2rPbkDcKajcENq6DR7TN0eY535/C8su+XeVqIGSnHBA=
Subject key identifier: FF:2E:06:F5:E5:A7:D6:73:05:F4:59:E1:E6:55:39:09:D2:AD:D2:54
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 019DA3780C7A8795FD9D91ECC83735572DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
Manifest number: 0C73
Signing time: Sun 19 Apr 2026 02:00:46 +0000
Manifest this update: Sun 19 Apr 2026 02:00:46 +0000
Manifest next update: Mon 20 Apr 2026 02:00:46 +0000
Files and hashes: 1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: v8Our+C6/YV0dDHfQPWpCQS25lCyfpwfr88/PvBdsmo=)
2: UwpamNLfVxzRkvSFFW9AtlKgwro.roa (hash: gACm/NCGRIJ7K8nc7hX0Ydqc4YIKSSniFsij+fOcodU=)
3: t6v9R3Vl-r9843WjHSItzc5x1Nw.roa (hash: fbUGdVd9LuYeKGEkn5Dg92i+LLFqhXhQi7/z7t7zmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:0c:7a:87:95:fd:9d:91:ec:c8:37:35:57:2d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: Apr 19 02:00:46 2026 GMT
Not After : Apr 20 02:00:46 2026 GMT
Subject: CN=ff2e06f5e5a7d67305f459e1e6553909d2add254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:06:87:dc:28:bf:4a:b7:9c:6a:9e:c1:8f:54:
68:fc:35:26:2b:49:0c:1e:5e:fa:e4:82:d0:91:39:
04:76:a7:ee:72:00:26:68:21:bc:bc:fc:a4:b2:46:
48:89:71:d8:eb:8f:a5:07:f5:cb:d1:a5:aa:14:40:
39:97:21:f4:8c:f6:4f:0c:99:1f:a7:9c:af:71:a7:
a4:e9:69:7c:9e:8e:c1:76:f3:5a:1c:bc:a5:9c:05:
80:77:4d:4b:fc:b5:f7:ce:df:3b:d5:15:b3:ea:52:
af:22:de:b4:60:ef:dd:6b:3e:68:94:18:2b:0f:80:
8d:1c:cf:80:b9:f9:11:09:57:ac:cb:0a:c2:c9:88:
d4:2e:74:42:e5:e8:0e:da:67:7a:1c:c6:99:11:18:
8e:83:07:67:97:4c:55:bf:dc:2e:c8:3b:91:0a:3c:
a1:80:b2:33:56:4f:fd:c7:24:d3:a5:a7:fa:b3:24:
a8:28:57:2f:1f:ec:cb:99:de:21:ef:8c:e0:d9:18:
9c:12:0e:01:bb:21:b8:bd:6d:b3:d2:c9:39:18:80:
53:65:38:56:6a:84:d9:35:cf:14:ed:25:5d:02:b2:
bd:60:a0:5e:b5:10:7a:b1:48:0a:e3:87:3c:86:64:
3b:a3:73:bb:f8:2c:ad:58:ea:57:44:c4:5b:2c:51:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2E:06:F5:E5:A7:D6:73:05:F4:59:E1:E6:55:39:09:D2:AD:D2:54
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c9:ed:91:34:45:53:13:3e:fa:4f:1d:74:0e:39:6f:c0:76:
14:42:1e:5e:ea:d8:03:a1:58:42:23:f3:8d:41:3d:ff:72:fe:
cc:d3:fa:d7:9f:34:47:16:0d:f2:cf:32:47:4e:ad:62:74:8f:
94:4a:6b:09:fa:b3:21:75:96:4a:53:f2:c4:45:b3:0e:7e:09:
16:f6:54:1f:de:32:5d:de:bf:a0:57:88:23:83:9c:90:a2:9f:
6f:ce:61:1e:9a:45:ad:e0:90:3e:2e:04:c7:89:fa:73:da:7b:
93:51:8e:ce:5a:c8:4f:91:22:a5:df:53:1b:c7:e3:78:4b:fa:
a0:6d:66:97:34:26:7c:08:3a:03:f9:53:ab:8a:a4:b4:fc:89:
19:2c:2d:8a:4d:e9:7c:02:a5:da:f7:d1:3c:eb:25:c5:97:1c:
88:32:69:25:57:95:a9:ca:ad:9a:79:27:3a:2a:f8:de:88:b6:
ef:e5:f0:97:b3:88:02:3d:45:76:f9:78:e0:71:f1:95:c8:77:
2c:31:0a:01:7a:5a:ff:62:8c:cf:9c:ae:c2:8d:5c:10:0e:c8:
56:4e:0f:f1:bd:12:a0:e4:97:c0:91:aa:a0:de:87:06:bf:86:
2b:a6:8a:ca:1e:58:fb:30:0f:89:92:d8:0d:ee:2e:b6:05:df:
74:3b:c8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:22 2026 by rpki-client