Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
File: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft (raw, json)
Hash identifier: eFosiepXgzuV+7XLeSiz7tfFTH1H0TprMNplgd3LXcs=
Subject key identifier: 4C:D2:E0:4D:53:F6:71:17:56:CC:17:6E:12:D7:0A:9D:9A:5C:C6:DD
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Certificate issuer: /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial: 019D389C39756559563EC8A8EA31792B3C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
Manifest number: 1333
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl (hash: 6WY6omykt/6RCHqpL8wQsrAG556med/A0XkhNAg4vSM=)
2: RWhg5dykMAyiD73Q4T3IDgPuoVY.roa (hash: btU2vDOWfazE6wfyTegJ86hgsn+iO0cAhM7Jywody24=)
3: RsFe9krKRUtkC3L7-MC9WR0bVdM.roa (hash: lbqH6pbmwmSHgVXzsms7NFLtSzq9IEJtOR+CsCDKF1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:39:75:65:59:56:3e:c8:a8:ea:31:79:2b:3c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=4cd2e04d53f6711756cc176e12d70a9d9a5cc6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:5e:db:dc:50:a4:1d:0b:5a:79:ce:09:05:
84:5d:b4:7f:45:32:60:77:1a:ac:6a:62:c0:32:a6:
59:ab:ab:b1:ea:91:45:b3:49:d4:87:a2:3d:aa:b2:
34:07:b7:92:a3:33:50:f9:4d:e0:33:3e:82:20:67:
fd:4b:6e:e7:ca:f4:8a:51:11:95:6d:ca:b6:a1:ff:
ba:98:66:cf:7b:0d:5b:35:dc:2e:40:b4:9b:30:53:
97:ca:d3:be:86:5b:64:4a:cf:e0:b0:53:e2:cb:96:
16:2b:88:ce:81:b0:ee:81:c9:85:bf:8e:e3:33:f0:
37:cb:08:ac:38:3a:93:ad:74:92:1a:a1:46:b8:a1:
b6:b7:34:af:ea:10:4d:b1:b8:43:a2:0f:21:62:23:
12:9d:bd:cf:07:a5:b2:79:43:06:9e:85:24:e3:66:
a1:6e:6f:d0:20:22:0c:76:5a:c4:8c:69:7c:b4:fc:
b4:ea:45:77:96:53:37:62:3c:30:b9:f3:ff:ea:80:
4e:5a:53:9a:bf:4f:45:0f:f9:51:f2:ca:2a:98:fb:
66:e8:1e:0b:d2:6a:12:c0:58:bb:2f:0a:61:93:36:
c5:c3:16:6f:15:a0:ca:01:c2:36:a8:62:b6:f0:d6:
bb:dc:66:b3:bd:ea:ee:9e:0d:37:46:e8:fe:a7:c4:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D2:E0:4D:53:F6:71:17:56:CC:17:6E:12:D7:0A:9D:9A:5C:C6:DD
X509v3 Authority Key Identifier:
keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5e:5d:9f:4c:6b:3c:81:98:d5:fc:6e:5f:dc:27:2f:39:72:
f5:2f:62:88:f7:67:fe:17:1f:59:ab:08:fc:ad:08:70:e1:b5:
d7:76:12:16:2d:7b:2f:1c:8f:cd:39:72:64:41:26:ba:fa:e7:
05:d3:f8:73:c6:fb:9f:4a:73:b8:06:52:8d:33:9b:0f:ad:d5:
2a:fa:11:b9:3c:07:f7:cf:8f:fc:24:47:a9:1b:87:55:8e:fe:
40:5c:62:99:59:fa:7b:d0:a0:21:cf:53:26:1a:63:f6:a5:08:
1e:ca:26:95:44:fc:e0:a4:4a:81:ba:9a:ba:5a:53:de:e0:e0:
e2:54:30:52:45:b6:8d:e5:d9:3d:ae:ab:28:35:a2:13:55:96:
b4:42:7a:86:40:92:16:46:44:1b:49:17:2a:9a:68:3e:af:72:
13:e7:12:bf:74:37:16:d2:52:57:9c:16:4b:75:f2:df:4c:f1:
7c:d9:17:b2:8e:51:0d:39:cc:0d:13:2d:e5:cc:4e:b7:c4:28:
70:11:b9:8a:ce:0f:19:24:9b:7e:de:f8:32:f6:0f:32:58:eb:
b4:af:0f:cf:11:c2:40:06:41:f3:0e:3f:a4:49:a3:59:53:39:
d1:9b:e5:9c:ec:0a:4e:73:5e:77:67:58:ad:ad:ea:49:af:e5:
e4:2f:b3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:57 2026 by rpki-client