Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json)
Hash identifier: ++oAWKLFmuXMGriil1Grz5ISw6l4jDJA4KRXCWhA/Io=
Subject key identifier: 9F:6C:37:20:1B:AF:42:B4:A9:FA:E8:12:C6:03:63:82:77:54:16:F7
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 019E1D223D29DA7843E41C40C58871DB5CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
Manifest number: 0CB2
Signing time: Tue 12 May 2026 17:00:43 +0000
Manifest this update: Tue 12 May 2026 17:00:43 +0000
Manifest next update: Wed 13 May 2026 17:00:43 +0000
Files and hashes: 1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: 0fm7nnHZvWfZIBS3OxEbfyPsHW0BUN44uI+4p5rmwpA=)
2: UwpamNLfVxzRkvSFFW9AtlKgwro.roa (hash: gACm/NCGRIJ7K8nc7hX0Ydqc4YIKSSniFsij+fOcodU=)
3: t6v9R3Vl-r9843WjHSItzc5x1Nw.roa (hash: fbUGdVd9LuYeKGEkn5Dg92i+LLFqhXhQi7/z7t7zmYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:3d:29:da:78:43:e4:1c:40:c5:88:71:db:5c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: May 12 17:00:43 2026 GMT
Not After : May 13 17:00:43 2026 GMT
Subject: CN=9f6c37201baf42b4a9fae812c6036382775416f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:3d:1c:6f:2a:7f:2f:32:a1:07:e2:2e:98:
4c:f4:5d:80:5e:ce:88:50:62:12:15:d9:1b:7a:4b:
03:f9:7d:2a:49:fa:87:32:59:14:12:da:18:2e:ba:
52:06:d6:41:dc:f7:6b:33:1d:77:71:5a:ff:a7:d0:
5c:ec:36:2a:dc:63:50:01:e8:2b:60:a1:75:01:c5:
c7:06:ac:cf:9c:5c:06:48:5c:04:74:27:24:30:f0:
76:4c:09:37:a9:44:33:8f:5f:b9:45:eb:f5:5d:ed:
fa:c2:d8:64:5c:4f:fd:38:9d:9f:b5:3c:d4:77:57:
6d:29:e0:c7:6f:1a:4e:38:b3:13:9b:6a:b5:6f:d1:
8f:38:3c:3e:fa:eb:ac:91:5f:51:d9:2b:21:2f:5c:
d3:54:d3:19:82:71:ad:5b:37:63:15:db:ed:cd:65:
1f:35:1b:89:b1:8f:d6:32:0f:cd:93:ed:16:03:a8:
13:0c:25:34:2b:1c:98:3a:bf:b1:ae:46:44:29:fe:
45:b8:60:d6:44:97:9e:a6:c3:60:c4:dc:0c:54:96:
9e:7a:03:fc:bf:69:30:3e:9e:33:29:c0:07:de:48:
5d:b7:84:e0:a3:86:b4:5e:23:d2:92:ac:8f:15:b1:
81:98:a2:5f:01:f9:3d:3e:73:26:ca:4c:f2:0c:61:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6C:37:20:1B:AF:42:B4:A9:FA:E8:12:C6:03:63:82:77:54:16:F7
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5e:88:c1:bc:60:05:c5:25:7e:a1:29:23:21:ef:6e:80:84:
56:29:8c:aa:95:90:e2:c2:09:54:c6:3b:ad:98:75:d0:95:08:
3c:6a:b5:d4:da:e6:d2:00:25:84:ba:a1:1b:85:6e:71:76:4b:
a7:9c:ec:9a:4d:0a:96:9d:f2:88:ce:20:7e:63:fa:f8:ef:73:
10:6b:3b:0b:48:8a:70:a0:33:82:e7:f2:90:46:da:31:33:48:
39:e2:8e:4f:c0:eb:dd:ca:d4:82:23:ef:c3:94:a7:90:37:b4:
e0:fb:74:c9:00:2b:de:3a:27:94:ce:a2:a1:14:3c:ef:fc:23:
21:ff:c1:c0:02:ba:32:b4:4d:e6:5e:00:e9:13:a2:fb:e2:f2:
40:69:0d:c1:7e:77:d9:42:ea:e7:f1:37:b4:08:b5:10:c2:d5:
35:34:6d:ec:ef:ba:89:d7:24:fe:92:05:22:3b:0d:0e:b1:d6:
0b:a3:30:10:17:83:73:e7:d1:42:9f:1c:9f:fb:43:be:b5:69:
ce:aa:e3:9b:f8:20:68:72:92:a1:80:31:e4:ba:23:80:45:ca:
88:79:a1:12:bf:53:61:1a:99:5f:d7:58:61:54:5f:0a:57:72:
de:29:c6:f5:4a:f3:74:55:e4:8a:75:12:a4:18:36:eb:22:8f:
6b:51:c1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:29:42 2026 by rpki-client