Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
File: 82ct8ORpiLvu2b5UENoSo_Fw1pE.mft (raw, json)
Hash identifier: y25HJpQ5f2DcY34Onv11W8eve2nxm5wKHKUqiwAmWKM=
Subject key identifier: 1D:AA:A7:2B:34:19:A3:97:E0:E8:00:52:61:F9:13:B3:E6:3F:6E:D9
Authority key identifier: F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
Certificate issuer: /CN=f3672df0e46988bbeed9be5410da12a3f170d691
Certificate serial: 019D382E806D8EE01E9C0740596BEE224450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:01:04 +0000
Manifest this update: Sun 29 Mar 2026 06:01:04 +0000
Manifest next update: Mon 30 Mar 2026 06:01:04 +0000
Files and hashes: 1: 82ct8ORpiLvu2b5UENoSo_Fw1pE.crl (hash: 3gKRkJwZ8apQA49hhRxsUIqHVp76nTeaNjI2+YE86Js=)
2: YwCwR3LXMu11k-vznf5QFY8Ls70.roa (hash: b+6Jc3/zLUqnM8wMsCWGbM4Jx06SlYE6hCoOYI6G5cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:80:6d:8e:e0:1e:9c:07:40:59:6b:ee:22:44:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3672df0e46988bbeed9be5410da12a3f170d691
Validity
Not Before: Mar 29 06:01:04 2026 GMT
Not After : Mar 30 06:01:04 2026 GMT
Subject: CN=1daaa72b3419a397e0e8005261f913b3e63f6ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:c3:be:e6:1b:21:03:be:56:d4:b4:3a:eb:
2f:fa:c8:98:8e:6b:14:8a:f5:f1:e6:e3:15:b1:e8:
50:ee:5e:49:82:ac:a4:75:29:8b:a4:ac:3c:85:ef:
7e:e3:70:de:a4:d9:ba:7c:1f:6c:5a:16:2f:2b:11:
0e:f9:11:5c:77:fd:6e:ec:de:5c:0c:f4:4e:c1:11:
9f:a8:10:db:32:d9:7f:7f:18:91:0a:31:47:d9:20:
bd:a9:9e:4b:0c:e1:a3:40:69:0a:d8:81:33:ef:3f:
63:05:8e:06:ad:a0:9a:48:08:39:d9:03:4f:4d:dc:
a4:0b:a4:53:14:dd:bc:3f:22:78:40:08:30:97:32:
59:f1:10:48:67:0c:b3:aa:7b:99:8c:c5:70:a3:3a:
f0:c1:83:46:f2:b7:37:7d:9c:fd:bc:e4:05:d2:69:
70:15:f3:00:5f:e9:3d:16:61:31:95:ed:38:63:b6:
53:c8:b9:27:7b:a4:49:4e:86:7b:b1:ce:ea:cf:42:
cd:a1:3c:e1:e4:92:28:25:9a:cd:a9:0d:4d:b1:72:
2f:ee:b4:88:7c:ce:47:eb:61:65:22:96:ac:c8:54:
48:c6:fe:fd:2e:78:8b:64:e5:91:49:a6:73:a8:ed:
3f:73:1e:db:25:27:bd:89:f6:14:f0:6a:f2:3b:c5:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AA:A7:2B:34:19:A3:97:E0:E8:00:52:61:F9:13:B3:E6:3F:6E:D9
X509v3 Authority Key Identifier:
keyid:F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e6:12:84:e5:f2:54:12:c8:de:02:63:3f:65:37:db:b6:76:
14:93:cf:f7:62:77:a5:65:4b:89:d9:c1:ce:1d:d9:9a:55:59:
b0:e8:ae:df:84:f8:20:5c:9b:c5:08:7a:16:c6:76:40:6d:ee:
48:2b:35:32:e1:c2:11:44:e6:f8:46:2b:47:6a:7e:3e:1c:b8:
de:59:24:97:9d:3f:3f:44:96:e6:c0:d9:60:50:25:b3:fd:bb:
1f:aa:7c:5b:36:34:ab:3c:25:31:0c:95:21:75:df:e3:25:a5:
f9:56:a8:96:e7:17:50:18:1e:20:79:3b:de:08:5f:2a:68:2f:
ff:1e:96:5d:d5:2e:e7:a9:28:06:40:09:d1:8b:5b:b8:dc:bd:
3c:26:24:de:fd:5a:bc:49:5c:44:9c:0f:77:c9:45:36:8d:ce:
a6:b9:03:2c:d3:8e:17:9f:ab:d0:47:d7:eb:05:b5:fc:fd:eb:
9e:cf:0f:1d:f6:48:7e:27:92:cd:51:b3:ac:6d:0a:3e:a9:48:
a4:1d:66:e1:57:3b:d2:14:80:e4:a8:c4:c1:1a:7d:ee:42:f0:
9b:60:e7:ec:59:56:d1:10:4b:16:25:7f:7c:ce:59:a1:37:dc:
9a:ac:f0:4b:f1:8f:83:86:d0:30:79:56:bb:54:75:e1:d3:04:
45:c4:6b:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LoBtjuAenAdAWWvuIkRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNjcyZGYwZTQ2OTg4YmJlZWQ5YmU1NDEwZGExMmEzZjE3
MGQ2OTEwHhcNMjYwMzI5MDYwMTA0WhcNMjYwMzMwMDYwMTA0WjAzMTEwLwYDVQQD
EygxZGFhYTcyYjM0MTlhMzk3ZTBlODAwNTI2MWY5MTNiM2U2M2Y2ZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw/DvuYbIQO+VtS0Ousv+siYjmsU
ivXx5uMVsehQ7l5JgqykdSmLpKw8he9+43DepNm6fB9sWhYvKxEO+RFcd/1u7N5c
DPROwRGfqBDbMtl/fxiRCjFH2SC9qZ5LDOGjQGkK2IEz7z9jBY4GraCaSAg52QNP
TdykC6RTFN28PyJ4QAgwlzJZ8RBIZwyzqnuZjMVwozrwwYNG8rc3fZz9vOQF0mlw
FfMAX+k9FmExle04Y7ZTyLkne6RJToZ7sc7qz0LNoTzh5JIoJZrNqQ1NsXIv7rSI
fM5H62FlIpasyFRIxv79LniLZOWRSaZzqO0/cx7bJSe9ifYU8GryO8Vz8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2qpys0GaOX4OgAUmH5E7PmP27ZMB8GA1UdIwQY
MBaAFPNnLfDkaYi77tm+VBDaEqPxcNaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81NjVmODktNjIwOC00NzFhLWI2OWMt
M2UyMjE5OGFlYjUyLzEvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81NjVmODktNjIwOC00NzFhLWI2OWMtM2UyMjE5OGFlYjUy
LzEvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOYShOXy
VBLI3gJjP2U327Z2FJPP92J3pWVLidnBzh3ZmlVZsOiu34T4IFybxQh6FsZ2QG3u
SCs1MuHCEUTm+EYrR2p+Phy43lkkl50/P0SW5sDZYFAls/27H6p8WzY0qzwlMQyV
IXXf4yWl+VaolucXUBgeIHk73ghfKmgv/x6WXdUu56koBkAJ0YtbuNy9PCYk3v1a
vElcRJwPd8lFNo3OprkDLNOOF5+r0EfX6wW1/P3rns8PHfZIfieSzVGzrG0KPqlI
pB1m4Vc70hSA5KjEwRp97kLwm2Dn7FlW0RBLFiV/fM5ZoTfcmqzwS/GPg4bQMHlW
u1R14dMERcRrTQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:31 2026 by rpki-client