Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier: IVHFSy94msdhV5kmj/rpygOSw+uhr90E3LizayH6/50=
Subject key identifier: 8B:04:74:E7:CD:CB:DC:07:2D:2F:25:3A:05:BC:BC:35:94:E4:08:D7
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial: 01A13F026CEDD24EAD41BA8FFFD2F8ED6005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number: 1615
Signing time: Thu 15 Oct 2026 10:01:25 +0000
Manifest this update: Thu 15 Oct 2026 10:01:25 +0000
Manifest next update: Fri 16 Oct 2026 10:01:25 +0000
Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: YSrWQa4kKVPdBOvmkVxkTkdLOriVAS+f/StsKMJvO6c=)
2: aj-7Q6-jz1X5ml3Zo_ezji9nyp0.roa (hash: ctiS31QHzRCLWu4eXUhOOHg5pxlmeJ2+c2/2FvVGuLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:6c:ed:d2:4e:ad:41:ba:8f:ff:d2:f8:ed:60:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Validity
Not Before: Oct 15 10:01:25 2026 GMT
Not After : Oct 16 10:01:25 2026 GMT
Subject: CN=8b0474e7cdcbdc072d2f253a05bcbc3594e408d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:92:4c:9a:75:74:b4:28:9f:a3:d2:c3:63:
da:1a:9b:9f:8e:6d:7f:c0:65:79:fb:ac:07:6f:19:
27:6a:85:fe:8e:76:39:5e:95:b4:4e:62:f4:42:16:
bb:24:27:02:e6:74:ca:c0:ba:18:c4:8e:6a:d4:f7:
e7:d0:db:95:49:57:bb:95:69:fd:70:9e:e5:45:cd:
78:82:b7:df:fb:63:d6:ac:bc:d0:8d:e7:a6:58:f2:
ce:d2:37:80:45:eb:b3:9f:bd:14:52:54:cf:f8:0c:
20:20:43:e3:7c:f9:3c:b2:5b:23:54:7d:0b:1d:38:
22:37:fb:45:49:91:c5:0e:40:31:5f:6d:e1:13:0f:
51:ae:2f:6e:f0:a8:3f:d8:98:6d:08:1f:c4:69:e7:
52:06:e6:61:16:42:69:d7:a4:5a:dd:7b:ef:87:21:
76:fd:4c:26:d2:93:da:21:14:45:c7:a2:55:ca:45:
ec:83:d2:cf:6d:98:19:f7:44:68:94:4f:5a:24:fa:
60:d4:90:44:3a:42:3f:ab:93:9a:47:b5:f3:c5:4d:
3e:a6:7d:a1:16:99:c8:4d:c2:a8:d0:0d:1d:82:98:
77:e2:65:6d:68:ce:25:6b:85:29:4a:0e:e9:04:58:
f4:30:26:a7:d2:70:83:c9:e7:b0:60:7e:f8:e3:09:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:04:74:E7:CD:CB:DC:07:2D:2F:25:3A:05:BC:BC:35:94:E4:08:D7
X509v3 Authority Key Identifier:
keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:aa:4c:f1:0e:03:01:9d:e6:f0:65:25:3b:d5:5e:47:4e:51:
3f:90:b6:0e:71:0b:fa:4a:c8:9d:f7:f1:e0:cf:cb:bd:9f:3f:
21:fe:76:44:52:0f:f8:1d:03:5e:34:6f:d0:71:9a:89:83:c9:
57:1c:5a:79:28:7a:a1:58:0a:e2:b7:b5:dc:7b:57:d2:33:a8:
e3:50:a6:95:87:b5:0c:f5:54:09:6e:87:7a:6d:79:fd:27:bd:
cc:fd:9b:f3:72:91:84:58:3f:79:fb:de:b2:16:7e:a8:04:57:
37:12:fa:e2:d6:ee:3c:d5:f8:1e:f1:1a:d2:b9:9a:e2:da:59:
05:2b:99:93:8f:ad:ad:6f:41:83:d1:06:f1:75:27:ac:54:43:
bc:78:44:4c:13:0e:60:a4:4b:6b:ce:fc:bd:39:15:e0:04:94:
26:01:74:55:10:b5:68:2f:49:83:1c:a2:19:96:5b:2f:5e:5b:
40:b8:42:10:d4:93:98:2c:50:dc:75:9b:52:90:6d:46:e5:9c:
63:d2:39:56:d3:5d:15:21:76:f9:24:82:f9:7c:c5:3a:b7:d5:
49:d3:cc:1f:d5:be:18:76:42:76:3e:10:38:98:e3:b9:99:b6:
37:4f:86:eb:be:f2:38:d5:b3:59:42:31:e1:4c:5b:13:ab:2a:
56:d4:ab:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:21:50 2026 by rpki-client