Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
File: 82ct8ORpiLvu2b5UENoSo_Fw1pE.mft (raw, json)
Hash identifier: ORKiEtCWgpE72GwiKAAlksvWcfeTVq60HD/rrqqVeVo=
Subject key identifier: E3:76:35:83:02:83:12:BA:17:1E:FE:00:37:A0:86:89:85:B4:3C:53
Authority key identifier: F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
Certificate issuer: /CN=f3672df0e46988bbeed9be5410da12a3f170d691
Certificate serial: 019E1C0F98F2DA6B40CBF06333C67D043692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 12:00:44 +0000
Manifest this update: Tue 12 May 2026 12:00:44 +0000
Manifest next update: Wed 13 May 2026 12:00:44 +0000
Files and hashes: 1: 82ct8ORpiLvu2b5UENoSo_Fw1pE.crl (hash: 0K4ajdD+VtJtcZ/7+W3R02WH62xWSyjezqXYo01yYBY=)
2: YwCwR3LXMu11k-vznf5QFY8Ls70.roa (hash: b+6Jc3/zLUqnM8wMsCWGbM4Jx06SlYE6hCoOYI6G5cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:98:f2:da:6b:40:cb:f0:63:33:c6:7d:04:36:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3672df0e46988bbeed9be5410da12a3f170d691
Validity
Not Before: May 12 12:00:44 2026 GMT
Not After : May 13 12:00:44 2026 GMT
Subject: CN=e3763583028312ba171efe0037a0868985b43c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:8e:c7:ea:a9:ec:cf:3d:78:f6:b8:c4:e4:
d6:c7:60:a5:6b:dd:83:a1:3d:da:b4:b4:99:8d:07:
a1:77:bc:27:39:f6:c8:f7:26:c4:f5:80:db:b1:94:
98:07:e8:a0:4b:1e:25:94:e5:9c:66:f7:b9:9f:ad:
62:fe:0f:6f:b4:17:ee:d4:a5:b5:b6:47:de:6c:a5:
58:18:67:28:5a:01:50:14:7e:f7:4f:10:77:d9:c2:
73:ea:81:2d:1c:39:8b:89:32:72:27:03:dc:a4:ee:
40:24:e6:ae:1e:e8:bd:c1:3c:f8:e7:bb:68:38:47:
29:37:d5:2b:3b:09:97:1a:9e:99:49:03:62:8a:54:
ed:e6:ea:5d:67:34:a0:30:f6:e7:6c:5a:57:1b:33:
b8:53:59:8e:bc:4c:45:64:67:b1:e5:9b:93:0d:a4:
a1:40:57:d7:45:6b:db:27:92:bb:88:69:6c:9e:1b:
5a:94:22:25:c0:97:d6:76:db:b1:0f:8d:c1:f6:9b:
45:9f:e9:95:06:3b:2e:32:b5:e7:65:e3:16:25:0c:
02:cb:a6:d2:41:a9:1c:dd:d1:c1:d4:28:1a:d8:39:
3f:65:3f:84:92:62:54:b3:64:f8:c3:63:d2:ee:a5:
33:2e:83:68:69:f6:e5:95:8b:63:0d:b7:e3:c6:b9:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:76:35:83:02:83:12:BA:17:1E:FE:00:37:A0:86:89:85:B4:3C:53
X509v3 Authority Key Identifier:
keyid:F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a1:47:04:a3:40:f5:38:0f:3c:e4:f8:fa:65:de:1b:63:4e:
1e:5a:b3:eb:6b:1a:fb:d0:ca:d6:2c:0e:92:5d:cd:bb:bd:41:
0a:67:9f:06:e6:56:9d:2a:86:3d:3e:93:b6:14:0d:7a:b8:9c:
53:42:c1:63:bf:61:6d:58:fc:77:66:3a:02:8a:94:18:05:66:
25:f7:dd:fa:6c:17:2f:8b:59:51:da:22:1f:f9:90:b2:df:6d:
d7:11:3c:a2:2e:d3:3e:67:00:a9:1a:4f:89:d6:77:b1:05:fe:
22:60:09:e9:79:e6:8f:c3:a0:e1:93:6c:9d:98:b2:59:68:72:
80:be:f3:5b:6b:f8:78:25:e9:df:39:ec:9c:b6:d0:54:14:f9:
0a:98:61:57:bf:39:ab:fa:c7:9d:64:a8:58:ca:a1:1e:79:47:
08:87:6b:b5:15:a2:b3:4b:b0:cc:7b:fe:bf:c6:44:9a:73:a2:
79:79:da:ed:ea:84:97:6b:ac:8c:6d:97:89:d6:7d:80:68:bd:
7f:7f:87:25:c8:60:1c:7c:41:42:31:7b:9a:2c:c1:1c:97:56:
d1:50:49:74:27:bc:d6:4c:c5:85:15:1b:77:93:f7:82:82:a3:
eb:7b:60:69:64:9b:dd:e0:5a:ee:46:07:8b:14:48:53:bc:33:
94:a5:f4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:05 2026 by rpki-client