Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
File: 83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json)
Hash identifier: rjPE0mWRXApK7BrhP+BhS3GQxWjTYl01UJCWYEmJ5xA=
Subject key identifier: 97:34:D2:28:19:C5:4F:2D:6A:45:20:EC:C0:BD:5D:63:E7:A0:5C:BF
Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
Certificate issuer: /CN=f3730086a14f31b25640c142edfd17bc93320c5a
Certificate serial: 019D3940DAD610BE1D503DD76EF4D3A983EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
Manifest number: 1136
Signing time: Sun 29 Mar 2026 11:00:44 +0000
Manifest this update: Sun 29 Mar 2026 11:00:44 +0000
Manifest next update: Mon 30 Mar 2026 11:00:44 +0000
Files and hashes: 1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: XVd0er2aSzzmMUxWp1xnCiE/qrvmgiBwNp9fbJrmNrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:da:d6:10:be:1d:50:3d:d7:6e:f4:d3:a9:83:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a
Validity
Not Before: Mar 29 11:00:44 2026 GMT
Not After : Mar 30 11:00:44 2026 GMT
Subject: CN=9734d22819c54f2d6a4520ecc0bd5d63e7a05cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:a9:4d:9e:43:10:c2:e9:6c:23:ac:2b:36:
51:3f:d8:26:e2:a9:e5:b1:41:75:e8:6c:21:2b:73:
c1:fd:ae:17:cd:36:c2:55:99:61:95:3c:9f:01:82:
1b:5e:2f:38:55:3b:ee:73:18:f0:86:21:4c:fe:ab:
5a:ad:0a:f0:58:2c:03:6c:99:ab:16:28:c1:03:b9:
ac:1e:da:19:f4:f7:65:65:d8:d2:94:4e:a3:0c:61:
b7:40:4a:f8:a3:42:cd:73:58:19:a3:10:0a:90:bf:
f2:b6:af:cb:6a:46:95:70:1a:30:b2:06:0b:c2:bf:
37:87:05:ef:b2:a2:dd:39:58:60:f8:57:e4:15:52:
1f:ed:d3:83:64:56:21:e1:78:a2:3d:08:13:d1:e7:
bc:3a:bf:05:42:06:c7:5a:3e:23:10:4b:48:e3:c3:
39:98:19:80:64:2c:d2:78:2b:f3:cc:60:4e:da:7b:
54:e7:f4:45:ca:19:7f:a6:87:85:18:e5:c4:1c:94:
71:0e:18:e8:3b:3e:cf:47:be:e4:d6:29:8b:ab:e2:
fc:e4:2e:50:4c:ee:67:f9:1a:61:5e:22:23:36:7b:
88:59:35:dd:c4:13:fb:06:30:2b:55:15:fb:e1:2e:
60:f1:7c:a4:8f:1c:67:b3:13:c7:0f:1c:ff:e3:9d:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:34:D2:28:19:C5:4F:2D:6A:45:20:EC:C0:BD:5D:63:E7:A0:5C:BF
X509v3 Authority Key Identifier:
keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d9:c0:62:5c:73:37:57:9b:7a:4f:b9:d2:66:5c:97:6c:6d:
1b:67:1c:e4:59:a1:61:cd:f2:69:50:ed:26:86:b1:a5:74:a4:
2a:31:f0:7b:fb:88:b2:35:3a:e1:ab:8f:ee:c6:91:d3:1c:a7:
e8:40:6b:18:6e:80:28:23:f9:6b:5e:0b:56:4d:03:a9:08:e9:
9a:34:93:08:9b:86:be:be:cd:df:6b:51:b5:16:f3:97:6a:10:
07:d0:87:84:60:9f:d4:ba:66:a0:2a:8a:24:0c:70:0c:4e:69:
f4:96:4f:3f:1a:21:f0:2e:c8:e1:1d:48:c5:ec:5f:12:a0:e8:
c1:91:15:a9:eb:c3:99:1e:63:ee:52:e1:1f:eb:82:7d:6e:73:
74:db:47:12:5d:48:3c:29:6c:00:36:00:24:8f:5c:4c:72:af:
2b:73:39:63:89:5c:95:d9:72:39:c7:6a:8d:4b:9b:56:77:78:
95:bc:e4:ac:07:a4:f6:61:d2:2d:1f:ee:57:6e:21:98:0b:71:
13:82:91:34:7c:5b:55:1b:4f:05:07:cc:a5:64:e1:be:f7:b9:
a1:a0:2c:dd:67:04:46:16:55:d1:47:13:72:bf:ea:93:59:0a:
5e:8f:6e:87:68:1d:8d:e5:7a:da:51:44:90:c0:8e:54:3e:75:
de:f2:85:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:04 2026 by rpki-client