Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json)
Hash identifier: DTQvXjiu3AhnSwe9Lt/6NSVxZZwyYRfK7NbaLjz2Jk8=
Subject key identifier: 28:64:0D:2F:ED:18:0D:BF:D2:2E:BD:1B:43:C2:B0:24:A9:9C:90:4C
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 019CAA5841E6476B27483F6B910D74919596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
Manifest number: 0BF2
Signing time: Sun 01 Mar 2026 17:00:36 +0000
Manifest this update: Sun 01 Mar 2026 17:00:36 +0000
Manifest next update: Mon 02 Mar 2026 17:00:36 +0000
Files and hashes: 1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: vRRY/wUQIXmd/9GbiatdHvYNOUdG5oynVreIzFeT4Oo=)
2: UwpamNLfVxzRkvSFFW9AtlKgwro.roa (hash: gACm/NCGRIJ7K8nc7hX0Ydqc4YIKSSniFsij+fOcodU=)
3: t6v9R3Vl-r9843WjHSItzc5x1Nw.roa (hash: fbUGdVd9LuYeKGEkn5Dg92i+LLFqhXhQi7/z7t7zmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:41:e6:47:6b:27:48:3f:6b:91:0d:74:91:95:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: Mar 1 17:00:36 2026 GMT
Not After : Mar 2 17:00:36 2026 GMT
Subject: CN=28640d2fed180dbfd22ebd1b43c2b024a99c904c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:c8:7f:9a:c1:c6:a9:16:c0:d7:5f:96:b9:
35:55:9b:96:24:0d:62:61:d8:f0:e7:5a:34:d8:f0:
96:34:71:7b:b4:68:c8:90:0c:1d:f6:e2:03:c2:23:
ab:af:47:f6:5b:df:68:60:e3:91:6a:78:4c:5b:01:
67:2a:8b:ff:9c:56:da:55:8b:aa:b9:d2:20:98:a1:
df:d8:8d:d1:05:2c:1e:4c:38:08:53:34:45:47:2a:
c1:28:f0:d7:77:67:43:ce:f0:e1:07:ac:dc:c3:b2:
55:d7:20:34:21:0f:fc:ca:f2:4e:b8:af:ce:3a:d3:
9f:08:16:41:6e:6e:ac:3b:3b:b2:3b:1e:9a:fa:e3:
10:af:ee:9a:8f:7c:51:7a:52:88:74:3f:2d:fe:6f:
74:0b:b5:69:c9:ea:15:b7:91:22:19:fc:61:88:f4:
d1:56:d4:a8:50:ec:fe:44:7b:5a:57:7e:17:dc:52:
2b:57:b7:4b:4a:6a:aa:32:d6:e5:f2:5a:13:3e:e8:
7c:16:cc:4e:8f:50:bb:25:02:fd:37:15:60:2c:f9:
dd:b7:86:53:42:dc:aa:13:14:41:ee:cd:23:a8:6c:
4b:2a:77:f7:9a:34:5b:78:2b:cf:31:01:13:7e:d6:
4f:8e:84:bb:89:1d:3b:d7:96:b7:91:ef:24:78:8a:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:64:0D:2F:ED:18:0D:BF:D2:2E:BD:1B:43:C2:B0:24:A9:9C:90:4C
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:44:7d:ae:b0:3c:09:8b:21:29:80:1d:be:ae:5d:6b:e7:81:
3c:6a:01:8f:e4:80:d3:69:b0:c1:04:69:81:80:ef:1a:d7:a8:
c6:5b:d7:3f:4f:69:d8:b0:45:af:c2:17:a5:03:23:5d:c2:fe:
ae:9f:bd:f9:8a:b4:bc:c5:83:a5:82:33:c5:c7:1a:53:a5:47:
59:92:11:e2:ff:5d:da:4c:fb:ed:c6:8d:e5:81:40:d5:29:0a:
50:07:29:e3:8b:1a:ca:5c:0d:23:28:6e:4a:14:4d:b5:98:45:
04:c9:77:e7:7c:ab:87:61:f2:f3:fc:b1:86:ef:f2:d7:b4:76:
ab:30:6d:1d:84:5a:c8:3c:a5:e9:00:32:fa:76:29:7b:8c:95:
1b:d8:de:9c:3e:c2:c8:b5:a4:2a:63:23:25:08:7d:46:18:3d:
c1:32:a3:12:77:42:06:30:7e:16:5c:b1:2a:67:a8:c2:bc:c1:
3d:5c:74:ea:f8:a4:d8:6a:00:09:d0:24:1e:73:6f:89:05:0c:
11:08:95:f0:6c:38:81:23:63:70:d7:b8:4f:35:66:c0:b3:3b:
95:4f:24:c9:87:c5:06:a0:92:49:7e:86:f2:e6:06:6d:db:35:
43:79:d3:fa:3e:b1:e4:4c:e0:b9:0f:1d:bf:36:6e:aa:27:28:
02:64:04:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:06 2026 by rpki-client