
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json)
Hash identifier: J1Twfc4Yz4WCw/YiqjHtOMVT9Z1xJMqL72KvqfvLewU=
Subject key identifier: 88:33:8B:47:AA:06:6B:B8:23:9F:61:52:1E:D2:92:05:9A:26:40:AE
Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641
Certificate serial: 6EC5B418455930D62DD90D74F3493008908FDBBF
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
Manifest number: 0559
Signing time: Tue 24 Mar 2026 10:46:16 +0000
Manifest this update: Tue 24 Mar 2026 10:41:16 +0000
Manifest next update: Wed 25 Mar 2026 13:06:16 +0000
Files and hashes: 1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: joAEPn9ggJnOJibwtnJz8w4Tu9b024lTJQ13MXp3eQ4=)
2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: 7db74RjEv4lOAbXa5meh9EatJZMBDVPs17aHa0Qh8fQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 08:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c5:b4:18:45:59:30:d6:2d:d9:0d:74:f3:49:30:08:90:8f:db:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641
Validity
Not Before: Mar 24 10:41:16 2026 GMT
Not After : Mar 25 13:06:16 2026 GMT
Subject: CN=88338B47AA066BB8239F61521ED292059A2640AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:b6:ff:e7:8d:6c:08:15:8b:df:b8:45:c7:
d1:e9:f1:8a:d4:68:61:30:e8:e0:96:fc:61:12:22:
79:2a:c4:53:68:eb:1c:f4:27:ae:83:01:ac:c2:0d:
97:97:38:99:f0:f7:b8:4a:ff:65:25:7c:85:d2:46:
0c:ba:a8:82:5d:7f:0d:db:16:8b:f7:9d:45:02:52:
23:f3:1c:09:97:c2:a5:a6:17:0b:f0:36:1f:ce:59:
57:c5:ac:d6:82:1f:0c:77:b2:b2:47:74:db:63:ce:
91:a5:2c:4a:bf:5d:c8:5f:d4:b4:ef:3a:da:60:42:
c8:05:8e:3b:0f:f7:62:63:53:bc:05:65:03:a9:f6:
a0:2d:78:42:0c:02:f0:80:48:ce:32:a7:3d:3d:b7:
16:02:b6:3b:55:64:24:7e:a2:46:9b:fe:16:10:84:
c2:b7:f8:e1:5c:6f:16:35:30:c5:83:e4:dc:ad:d7:
40:b8:f4:fc:ea:c7:5c:31:29:d8:4c:3e:76:7f:09:
5f:d1:f5:3c:e9:48:2e:d0:f8:65:b2:7b:9b:37:13:
c6:ad:a8:0f:ef:aa:a2:41:d0:77:ee:fd:5b:2a:bf:
9c:ac:66:1d:dd:8e:53:46:5a:3b:36:dd:c9:38:23:
98:50:fb:74:bf:4b:64:b4:60:ab:3c:51:fa:35:d1:
f9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:33:8B:47:AA:06:6B:B8:23:9F:61:52:1E:D2:92:05:9A:26:40:AE
X509v3 Authority Key Identifier:
keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ee:7b:d2:a8:c6:46:2e:70:d3:b9:5f:0e:f3:e6:f3:3c:15:
a7:0b:24:b8:97:3a:ff:2b:1b:56:58:9d:c8:b0:1f:49:06:c5:
9a:03:cd:e7:f0:82:05:ba:cc:29:2f:56:19:ea:67:1a:5e:da:
4c:22:82:9a:e9:93:93:79:0e:ae:60:20:24:66:0e:23:0b:5b:
fb:a7:69:0b:9a:d3:c7:e1:b2:c9:a3:68:91:11:7c:37:02:19:
4c:8e:ad:89:f9:a1:60:17:d4:61:d1:bb:31:f2:1b:f3:ba:c2:
13:20:a7:d6:53:8f:59:2f:d3:52:68:fb:c4:63:e7:48:ce:95:
33:e5:bd:c9:29:5a:2c:ae:7c:24:c1:6b:42:a3:43:fd:74:09:
3d:48:fd:a8:5f:56:1c:09:56:a7:e4:c5:81:e0:53:76:df:3b:
19:78:ca:a4:69:99:9e:23:45:27:64:15:0f:9f:54:2e:7e:4c:
f9:75:d3:ab:9f:b6:c9:61:8c:02:c2:0c:14:e3:33:c6:c3:5d:
27:fb:8a:12:24:6d:9a:a0:4d:03:03:9d:de:0c:2a:0e:86:a0:
a4:d4:0e:ca:2c:32:e8:f3:43:4a:f2:f9:22:15:e4:55:c4:0f:
54:dd:51:52:f6:b3:b1:89:7d:d7:db:2a:8e:70:b0:fa:c2:37:
3a:e3:74:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 05:02:30 2026 by rpki-client