Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
File: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json)
Hash identifier: 8ThSFADMukg2mK9xjgpGf8uyHD3mECE9OVDdd02qraM=
Subject key identifier: B1:42:73:98:E3:96:E4:4C:ED:8E:A1:95:F1:36:06:4B:19:5A:81:DB
Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Certificate issuer: /CN=f37063a85445019ab845a5b7e54395cdd39927f6
Certificate serial: 019D37C050F0657994DBFF3EDDB4405E16D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
Manifest number: 13C9
Signing time: Sun 29 Mar 2026 04:00:43 +0000
Manifest this update: Sun 29 Mar 2026 04:00:43 +0000
Manifest next update: Mon 30 Mar 2026 04:00:43 +0000
Files and hashes: 1: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: t5/bufkrqjdaej9N8dbbwDFyqEoSAT2u8G6/pOkVjhs=)
2: ty6PndNE6v0aicb5nH7jK6LCpOM.roa (hash: XKTIyXg8m6KS1U1qTQli91yAnTA7Vje4/FVAAtdNNEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:50:f0:65:79:94:db:ff:3e:dd:b4:40:5e:16:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6
Validity
Not Before: Mar 29 04:00:43 2026 GMT
Not After : Mar 30 04:00:43 2026 GMT
Subject: CN=b1427398e396e44ced8ea195f136064b195a81db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:a8:f8:6c:43:cf:07:57:35:c3:fe:9f:bf:
02:72:13:76:c9:9d:b7:64:f1:ac:4b:96:fb:65:19:
c6:5f:cf:6d:52:45:6f:41:61:88:ea:82:ae:1d:91:
e6:ad:20:0a:d0:00:82:53:34:a2:d5:7c:fe:10:2d:
a8:e4:44:58:da:c9:69:3b:f4:f0:aa:a6:66:df:76:
43:77:8e:c8:83:25:82:d0:3d:80:4d:33:d6:a6:63:
82:2d:69:77:a3:4d:64:f1:6a:81:a1:28:51:98:9f:
6d:d0:70:69:8b:31:45:e4:51:7e:e8:e2:8d:76:6f:
99:3b:ec:a0:3b:2e:32:2c:d9:21:81:1d:1c:59:73:
17:24:50:ca:86:0d:3b:bc:8a:6d:2c:c5:4f:5f:49:
5d:66:12:1a:b5:f0:47:3b:3e:65:8f:39:87:f4:34:
e2:76:29:b8:98:0b:79:dd:3f:a8:e3:c7:db:d8:de:
3d:f1:1d:d4:23:f2:e5:97:db:a6:09:7a:6e:15:0c:
63:12:d9:82:f0:41:7b:1f:2e:09:1c:91:e2:33:20:
99:30:17:77:e5:fa:9f:68:30:aa:c0:56:3e:eb:82:
9d:cc:89:31:ec:31:7b:11:2b:30:ee:c5:15:c7:51:
1d:c2:af:ef:af:98:80:94:d7:af:c5:20:72:9d:3e:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:42:73:98:E3:96:E4:4C:ED:8E:A1:95:F1:36:06:4B:19:5A:81:DB
X509v3 Authority Key Identifier:
keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:cf:9a:e1:7b:80:95:31:29:03:8f:6d:0c:c3:b0:2c:58:9a:
fe:78:39:eb:0e:d0:88:a2:6a:c6:45:9c:98:0b:28:11:b2:ec:
46:f4:8b:3c:78:e8:f3:80:c7:0e:d8:ec:47:c4:ba:87:0b:2c:
19:84:fe:c7:67:7c:8c:2c:7b:48:60:c2:ed:d4:92:a3:2f:b8:
f4:3b:b1:52:49:df:17:78:28:f0:ff:d0:66:f6:6c:ba:a4:34:
34:86:e1:db:0d:a4:61:d8:da:1c:0d:40:9b:b0:a6:43:47:de:
d2:23:d1:2c:12:80:dd:9c:cf:5e:20:98:70:00:e7:75:bf:0a:
64:3c:b7:6e:f3:d1:0e:3f:a8:b9:a8:05:36:ea:6a:3d:92:b3:
9c:ec:9e:f8:c6:e1:07:4a:c1:b2:60:bc:77:25:de:72:01:da:
5f:6d:c6:97:d1:9a:2e:ad:ba:d6:26:74:a5:be:3c:6e:cc:3e:
e9:c3:7c:c7:60:bb:f1:5d:c7:8c:09:e3:a7:75:78:a9:39:cf:
b5:e4:ad:cd:7c:f5:db:37:43:68:ed:73:34:c3:d2:d9:d2:58:
10:56:29:6d:c3:5f:01:c0:f6:67:99:c1:8e:f2:43:58:e5:73:
7f:4d:af:95:42:98:c0:09:1a:9a:60:50:91:c6:b9:43:ec:90:
76:03:56:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:54 2026 by rpki-client