Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
File: 83UsEPGw0HtfSOV539FONycT-0c.mft (raw, json)
Hash identifier: ckhZnbkJEigcMJCx0vOBpCLsOg1Oil4TeVQkS/4GSvg=
Subject key identifier: 5A:3B:D7:27:07:A9:7C:1A:9C:A7:E1:1B:73:4A:6A:71:5B:B9:41:39
Authority key identifier: F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
Certificate issuer: /CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Certificate serial: 019D38D34CC0E2BC3C90BFBEC6D255E67337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
Manifest number: 0BCB
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: 83UsEPGw0HtfSOV539FONycT-0c.crl (hash: glMB3bv4oJrthn+U/fejA8QmDfiffhw4kBZjrRf7I4Y=)
2: SEVRhCs9csFySiANJYyFSILGX2U.roa (hash: /VnUVc/+1Tu0LCR67oUx4RL+inrOahGNcaF68LU9sGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4c:c0:e2:bc:3c:90:bf:be:c6:d2:55:e6:73:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=5a3bd72707a97c1a9ca7e11b734a6a715bb94139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:c0:67:bc:bf:e4:37:69:3e:14:e6:85:c8:
8b:c6:c1:5f:20:f0:09:81:74:5d:fb:4f:0e:33:99:
9d:71:72:71:37:a1:23:b9:ce:f1:ec:9f:f3:bb:03:
05:09:1d:f4:82:86:5f:bb:d1:ba:8d:03:14:23:61:
f7:9c:5e:0d:75:40:3c:bd:e3:5d:46:4e:cf:1b:32:
0e:58:07:1c:66:82:53:6f:bb:d2:e6:8c:e9:94:11:
7c:0b:50:04:0b:16:d1:05:45:44:15:95:4a:09:b5:
51:26:94:2e:b0:13:b5:c8:1c:9b:d0:10:ca:b3:dc:
7d:36:17:fe:b3:74:aa:8f:53:65:13:53:fb:d3:5f:
f8:6f:ed:fb:24:63:80:db:fb:d9:5e:b5:05:41:14:
bf:da:22:e6:b3:0b:63:12:9a:b4:02:49:b6:4d:f6:
a4:e2:e6:86:d1:e8:59:c6:2e:f6:be:c8:19:61:ba:
e9:6d:cc:eb:90:c3:06:83:9d:da:26:ed:7c:cf:b3:
da:9f:93:0b:23:67:de:ab:c0:01:21:cc:8e:d7:09:
9d:e5:fe:6b:3d:73:b9:3b:58:9a:db:2c:bb:c3:d9:
3b:25:3f:c4:04:95:94:4f:4d:6d:73:ce:a6:84:88:
db:1c:46:8d:0d:3b:49:ae:27:3b:c6:61:fe:cb:83:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3B:D7:27:07:A9:7C:1A:9C:A7:E1:1B:73:4A:6A:71:5B:B9:41:39
X509v3 Authority Key Identifier:
keyid:F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:26:6b:10:43:95:ab:5f:4b:54:f9:3b:10:8e:59:65:0f:f8:
9e:fd:bf:a3:49:75:0c:10:c8:4f:a8:a2:d2:e1:c3:3c:71:0f:
fe:6c:72:cb:13:91:c1:53:4a:1d:61:05:f9:cd:4e:81:43:de:
fc:e2:15:5f:8e:a6:59:b1:f6:eb:9a:53:b9:46:13:cb:ab:4a:
0d:7c:1a:09:72:50:a2:4b:96:59:c9:b9:81:d2:53:e2:69:e5:
df:40:f2:a0:8e:96:76:7c:95:59:51:5d:68:dd:33:8f:6f:5c:
4c:b5:07:3a:15:51:3a:91:f1:98:ca:09:bd:68:5a:d5:ab:24:
5e:67:79:10:8a:97:22:74:54:fa:ed:8c:58:58:11:e9:29:10:
49:cd:62:03:8f:db:a1:6a:1a:62:f9:80:08:ec:4a:51:03:36:
0f:04:90:0c:0d:ad:f5:eb:c2:6e:54:ba:c5:38:0f:88:e7:75:
2a:1f:21:21:78:51:9d:e3:bf:64:02:72:25:aa:df:ba:97:3d:
2c:e3:87:98:ce:ac:86:5e:78:95:1c:61:cf:2d:13:f2:4f:aa:
85:d6:5f:c4:41:72:16:59:95:7a:10:6d:08:0c:4b:9c:03:53:
c1:0d:a7:8e:af:38:43:67:20:c9:85:a1:d6:8e:a6:eb:ca:8c:
bd:8a:05:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:26 2026 by rpki-client