Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json)
Hash identifier: fkRwncN6Cf02L7Wdn5VQ1gGUPKPzMSgjOBHHf+VdTbs=
Subject key identifier: BF:2F:1D:0E:FE:72:FB:0F:95:B4:CA:48:62:63:F0:19:7E:C6:70:B1
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 019D29CEC00544276B9913EC55AD47719C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
Manifest number: 0C34
Signing time: Thu 26 Mar 2026 11:01:48 +0000
Manifest this update: Thu 26 Mar 2026 11:01:48 +0000
Manifest next update: Fri 27 Mar 2026 11:01:48 +0000
Files and hashes: 1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: e+QwJu2GdQYGQIb1MVjRIefZigMshQb35T57kB6elRY=)
2: UwpamNLfVxzRkvSFFW9AtlKgwro.roa (hash: gACm/NCGRIJ7K8nc7hX0Ydqc4YIKSSniFsij+fOcodU=)
3: t6v9R3Vl-r9843WjHSItzc5x1Nw.roa (hash: fbUGdVd9LuYeKGEkn5Dg92i+LLFqhXhQi7/z7t7zmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:c0:05:44:27:6b:99:13:ec:55:ad:47:71:9c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: Mar 26 11:01:48 2026 GMT
Not After : Mar 27 11:01:48 2026 GMT
Subject: CN=bf2f1d0efe72fb0f95b4ca486263f0197ec670b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:15:17:e6:b8:41:c6:e3:1e:af:04:b6:cf:
00:35:7a:82:cb:e9:ab:bd:b6:85:53:14:cb:0f:46:
38:6a:ba:d3:6e:38:a0:49:28:75:8c:8e:48:74:32:
ba:86:ac:8d:0a:c6:ed:b7:3b:63:32:85:0c:bd:9c:
a9:01:a9:4a:58:fc:bb:20:a7:6e:bd:c9:aa:16:8f:
7a:0c:82:57:53:ce:57:40:a9:8d:1e:a4:d5:bb:2e:
de:a8:71:8c:fd:4c:a3:a1:39:2e:47:ed:c3:91:4e:
ad:29:80:40:fa:c9:30:72:05:31:de:ed:a4:2f:76:
b8:9b:6f:25:f5:4d:4d:b0:65:eb:99:9e:f7:18:30:
d5:fd:2a:39:14:0d:9d:bd:b5:1f:71:b9:0a:fb:7e:
22:a4:29:20:c7:51:d0:ce:7c:2d:62:52:5f:6a:be:
64:dc:45:1f:a3:ba:e3:a5:10:57:50:8f:d8:93:cb:
6a:e8:b3:57:da:c5:ea:34:de:25:ed:29:56:87:ea:
6f:5e:3c:92:a9:d8:43:64:96:bb:ac:b7:3b:fb:84:
ca:9f:4a:b8:b4:29:eb:9c:1f:a8:85:3c:00:aa:fe:
fc:af:05:89:51:40:bb:dd:ae:51:3a:6c:4a:eb:92:
7c:16:93:da:bf:b9:76:23:c7:b4:c5:cf:2f:67:da:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2F:1D:0E:FE:72:FB:0F:95:B4:CA:48:62:63:F0:19:7E:C6:70:B1
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5e:3f:a3:25:8e:72:61:fb:0a:6f:c9:0e:52:e2:85:7e:c7:
e0:23:14:1f:92:f3:c0:19:ba:be:ee:75:63:53:9e:a6:2d:67:
89:39:65:34:a7:c5:08:d5:70:cd:f3:6f:cf:9b:39:1f:2a:58:
5d:da:b0:bb:13:38:b7:2f:99:87:34:38:57:c3:00:36:ac:0d:
34:ad:41:4f:97:d1:da:0c:de:3a:21:65:32:ec:63:31:dd:4e:
8d:b3:08:7e:c6:47:6d:80:f6:a9:31:80:d1:34:c4:23:25:1c:
8a:aa:c4:8c:2e:69:8d:72:d5:55:9d:3c:ef:09:9a:73:54:d0:
58:cf:04:f8:85:0f:06:48:d6:55:27:92:37:94:72:f3:6e:59:
42:9d:86:19:b1:74:e1:d0:c4:de:a8:e2:bd:f7:f1:ad:ee:80:
3c:97:ad:f9:3e:b8:18:d2:85:ff:ee:f2:4d:a9:eb:71:f9:b3:
47:05:e4:08:96:49:09:0e:8d:9c:0a:e0:ea:4e:42:b1:16:3b:
5c:00:04:c9:c0:58:90:2d:fc:d2:18:23:82:40:fe:8a:15:c3:
29:1d:75:1e:d1:e6:0d:80:2b:e3:5d:55:f1:92:7b:1c:30:f8:
d0:a4:7c:03:e2:d9:cd:1e:4c:3e:38:45:2f:27:d6:44:f5:7e:
0c:30:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:22:08 2026 by rpki-client