Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json)
Hash identifier: MxYAay5r8LVNphjHnyyTCIJ9kEQwA3qM9NpugyokdwI=
Subject key identifier: BE:AE:FA:84:0A:28:92:AF:25:80:B0:08:E3:53:B3:57:1D:BE:2E:08
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 019D3752933251E522A99D91AFA844FC6D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
Manifest number: 0C3B
Signing time: Sun 29 Mar 2026 02:00:51 +0000
Manifest this update: Sun 29 Mar 2026 02:00:51 +0000
Manifest next update: Mon 30 Mar 2026 02:00:51 +0000
Files and hashes: 1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: VEtRtgc7rNUd/y9ZbnArW98eHNkIsERh7DAfFeUsdWk=)
2: UwpamNLfVxzRkvSFFW9AtlKgwro.roa (hash: gACm/NCGRIJ7K8nc7hX0Ydqc4YIKSSniFsij+fOcodU=)
3: t6v9R3Vl-r9843WjHSItzc5x1Nw.roa (hash: fbUGdVd9LuYeKGEkn5Dg92i+LLFqhXhQi7/z7t7zmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:93:32:51:e5:22:a9:9d:91:af:a8:44:fc:6d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: Mar 29 02:00:51 2026 GMT
Not After : Mar 30 02:00:51 2026 GMT
Subject: CN=beaefa840a2892af2580b008e353b3571dbe2e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ca:83:83:02:51:a9:66:0a:d0:9b:96:5c:83:
f3:dd:36:61:e5:f7:f8:e4:22:82:1e:2b:a2:08:0f:
bf:74:5c:6d:6f:6a:62:5f:03:84:98:cb:6f:20:d1:
f1:50:2b:ec:4a:0d:fc:07:36:c9:fe:1b:d7:06:de:
32:50:be:9c:50:d8:b3:01:7c:0f:70:e6:1d:a3:c6:
d4:1e:16:7f:5b:8c:bc:ed:5d:82:07:6b:3b:f2:d1:
0a:fd:4d:5a:8f:e0:80:66:ed:5d:a0:5c:4f:d2:bd:
41:a2:d4:83:fc:2a:eb:12:c6:cb:28:a7:da:76:b7:
e0:4d:66:50:51:ed:78:a3:d8:7f:94:f9:b3:1e:62:
87:f3:e6:8f:7b:d1:58:bf:fd:21:3d:75:f3:82:8d:
35:e1:ea:c0:cf:65:8e:dd:8e:8c:ff:c2:db:d7:0d:
5b:9f:2d:87:a2:e9:7e:01:84:4a:dc:a0:24:f8:72:
de:a7:66:65:b7:ee:5c:09:9b:ff:f9:26:5d:00:8b:
86:ab:5b:73:98:38:4f:e7:94:d3:46:f2:0d:dd:ef:
62:75:de:23:79:e3:58:43:e4:c4:70:1e:36:8d:c9:
78:f9:75:98:e4:74:02:34:ef:4c:d7:98:b2:4d:48:
b6:a0:71:76:07:1d:dd:0d:b3:3a:fb:7f:ae:fe:62:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AE:FA:84:0A:28:92:AF:25:80:B0:08:E3:53:B3:57:1D:BE:2E:08
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:40:8b:78:1b:22:20:cf:26:07:ac:a3:89:63:48:8c:9f:9a:
a8:78:32:2d:18:fc:46:0d:41:cf:23:87:f2:71:78:62:f1:ee:
24:81:79:ce:f8:be:a8:1b:74:7e:1c:24:98:dd:c4:fb:a2:d4:
79:99:2e:21:6c:e3:41:d0:28:b0:78:11:d0:de:03:ab:3d:f0:
e9:22:6c:ba:fe:c6:54:08:a4:67:86:bd:04:b1:7f:c8:cf:47:
86:91:5e:9d:93:cb:03:98:ee:f1:8d:8c:85:a0:ed:58:ea:e6:
69:3e:21:bc:5b:43:60:8a:6d:03:40:65:ba:97:e8:80:65:68:
9d:bf:e4:2e:ad:39:59:c8:67:87:10:d5:77:a3:ab:14:95:d5:
83:52:14:0c:dc:1e:c2:a1:37:23:32:81:30:21:33:3a:b3:61:
bd:95:7f:6f:e7:83:f6:5d:e2:a4:19:61:5b:6e:23:3c:01:40:
25:7d:9d:89:62:3e:39:6a:d2:f7:a8:c6:ad:cf:52:d2:a1:e3:
76:f2:ab:32:04:4e:a5:f4:f7:e0:80:f9:b5:0f:e6:42:2a:47:
a3:81:ce:0f:0f:a8:5e:4d:3f:ef:b1:d2:3c:a8:15:54:85:e2:
de:73:29:6c:7a:9f:d3:a8:a6:a7:e2:1e:2b:86:f5:d2:74:39:
1f:49:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:25 2026 by rpki-client