Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File: 82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier: up6EiTfQLV9EecfjXIiZJz3scajJot/rg5WjFrMGze4=
Subject key identifier: 1E:F6:1F:FD:77:AC:23:43:AD:6B:8F:92:77:7F:AD:CD:80:F1:2C:EB
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer: /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial: 01A0CCA378FADF618C1605EFF4D8DB75C0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number: 09DA
Signing time: Wed 23 Sep 2026 05:01:00 +0000
Manifest this update: Wed 23 Sep 2026 05:01:00 +0000
Manifest next update: Thu 24 Sep 2026 05:01:00 +0000
Files and hashes: 1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: tP+tmQzDq1pc7R7RVidZni4BkM3Oy/bomPZ/D5omtYA=)
2: yhxgRAr99RGmci9ROhuXvzy0jYE.roa (hash: 3wgbJG/cVAe3llBkizxknl37XeT2Rpuyh/OqTuIeXAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:78:fa:df:61:8c:16:05:ef:f4:d8:db:75:c0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Validity
Not Before: Sep 23 05:01:00 2026 GMT
Not After : Sep 24 05:01:00 2026 GMT
Subject: CN=1ef61ffd77ac2343ad6b8f92777fadcd80f12ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:4e:e8:a6:36:26:d8:23:21:c9:26:99:df:
be:70:5a:33:fd:13:b3:cd:2b:a0:8f:fd:b0:f2:56:
d1:a9:fa:50:1b:48:b2:ea:39:ad:59:53:87:50:06:
8a:12:34:df:eb:e6:af:90:b6:ad:09:47:63:cf:17:
6e:91:20:d1:e7:ec:20:71:05:d4:33:de:1c:99:3a:
92:79:66:db:81:79:56:09:0e:ad:13:52:ae:f6:64:
a5:d3:99:61:7b:eb:b9:63:ac:97:88:7c:19:e9:0e:
07:37:43:fe:f2:08:7f:fa:32:7c:24:dc:b7:64:c1:
64:88:11:77:ab:9c:9f:fd:29:65:ec:28:ca:14:1c:
15:80:5c:8f:29:50:a3:ea:33:a4:40:66:49:0e:40:
53:9f:ee:dd:d9:06:bb:b1:d2:b0:33:4b:c6:37:4a:
dc:ff:8d:76:f3:22:3c:93:c0:51:f9:7d:05:a1:33:
8b:c6:c7:45:3f:09:fe:d9:fc:39:a0:a9:c9:40:3b:
3b:8d:6b:21:f6:c5:c1:61:0b:b9:96:27:f3:b2:90:
6c:a6:a3:e2:05:d7:ae:c0:e1:cc:28:14:18:28:60:
da:02:d8:85:02:26:b0:e9:c0:39:e0:ff:8b:b9:0e:
aa:76:39:00:23:3b:c0:50:52:f6:ad:27:61:f5:83:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F6:1F:FD:77:AC:23:43:AD:6B:8F:92:77:7F:AD:CD:80:F1:2C:EB
X509v3 Authority Key Identifier:
keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e8:8e:1d:ca:23:03:cc:f5:70:29:75:2e:d2:ea:bc:0c:f1:
38:29:98:23:d7:91:d9:41:03:eb:17:6b:50:d6:7c:40:82:37:
d7:47:70:e4:c3:6d:bc:9f:d1:97:96:a0:2b:64:19:41:06:26:
a1:1c:ea:7f:e4:4a:e6:b2:87:06:61:05:42:be:1c:1f:7c:d4:
80:19:9b:1f:9a:e4:34:72:02:0a:2f:58:26:4b:05:a7:76:3a:
3a:7b:ce:33:a0:e2:0b:6d:d3:88:e7:35:5f:c5:87:0e:41:68:
ed:30:dd:1f:90:00:bf:7d:0f:ca:01:d3:74:18:79:c2:e0:d8:
77:1b:75:24:1c:87:ad:cc:0a:01:01:ff:6b:33:a9:5d:30:9c:
18:4e:54:7b:f4:36:06:9c:84:47:6e:73:74:1e:79:7d:a9:4f:
2d:00:00:38:fd:0d:30:ea:f5:c6:c7:91:83:53:75:a3:cf:1f:
e7:9a:02:5d:8d:c5:fe:ec:76:d4:a3:91:3c:6e:15:27:cb:a8:
12:c1:ae:c8:78:5e:43:30:ae:84:24:0c:fe:c0:94:6e:6a:99:
c3:cc:38:7e:5b:75:37:58:5f:d1:82:67:f1:53:49:7e:4c:df:
49:5c:14:ad:84:5d:e0:78:ab:44:dc:ef:c6:2d:08:c8:86:74:
07:b0:d5:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMo3j632GMFgXv9NjbdcCrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNjBjNzhiMWQ0NjJkNmJhZmRmNzM1OWQzYzIzM2RkYmY5
MjlkMzEwHhcNMjYwOTIzMDUwMTAwWhcNMjYwOTI0MDUwMTAwWjAzMTEwLwYDVQQD
EygxZWY2MWZmZDc3YWMyMzQzYWQ2YjhmOTI3NzdmYWRjZDgwZjEyY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxFO6KY2JtgjIckmmd++cFoz/ROz
zSugj/2w8lbRqfpQG0iy6jmtWVOHUAaKEjTf6+avkLatCUdjzxdukSDR5+wgcQXU
M94cmTqSeWbbgXlWCQ6tE1Ku9mSl05lhe+u5Y6yXiHwZ6Q4HN0P+8gh/+jJ8JNy3
ZMFkiBF3q5yf/Sll7CjKFBwVgFyPKVCj6jOkQGZJDkBTn+7d2Qa7sdKwM0vGN0rc
/4128yI8k8BR+X0FoTOLxsdFPwn+2fw5oKnJQDs7jWsh9sXBYQu5lifzspBspqPi
BdeuwOHMKBQYKGDaAtiFAiaw6cA54P+LuQ6qdjkAIzvAUFL2rSdh9YNnRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB72H/13rCNDrWuPknd/rc2A8SzrMB8GA1UdIwQY
MBaAFPNgx4sdRi1rr99zWdPCM92/kp0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kOGM5OWMtZTBjOC00YzFhLTgxZmIt
OTAwZDFjYTMyZDdlLzEvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kOGM5OWMtZTBjOC00YzFhLTgxZmItOTAwZDFjYTMyZDdl
LzEvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeiOHcoj
A8z1cCl1LtLqvAzxOCmYI9eR2UED6xdrUNZ8QII310dw5MNtvJ/Rl5agK2QZQQYm
oRzqf+RK5rKHBmEFQr4cH3zUgBmbH5rkNHICCi9YJksFp3Y6OnvOM6DiC23TiOc1
X8WHDkFo7TDdH5AAv30PygHTdBh5wuDYdxt1JByHrcwKAQH/azOpXTCcGE5Ue/Q2
BpyER25zdB55falPLQAAOP0NMOr1xseRg1N1o88f55oCXY3F/ux21KORPG4VJ8uo
EsGuyHheQzCuhCQM/sCUbmqZw8w4flt1N1hf0YJn8VNJfkzfSVwUrYRd4HirRNzv
xi0IyIZ0B7DVSQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:40:18 2026 by rpki-client