Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier: DT2rzgKb5JBxOGGWxD8SzEVypvjjFlTnxUk9GvgrqKU=
Subject key identifier: 5F:2B:A3:C0:88:23:AB:50:22:F8:D8:7A:A1:A8:93:92:11:4F:6F:0E
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial: 019D37C021A765A53C1D921F0F62B80B4396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number: 13FF
Signing time: Sun 29 Mar 2026 04:00:31 +0000
Manifest this update: Sun 29 Mar 2026 04:00:31 +0000
Manifest next update: Mon 30 Mar 2026 04:00:31 +0000
Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: d73xDqjmPq9WSfa+h2gsMDqrTqPadZ+5/NVrFzKFlN0=)
2: aj-7Q6-jz1X5ml3Zo_ezji9nyp0.roa (hash: ctiS31QHzRCLWu4eXUhOOHg5pxlmeJ2+c2/2FvVGuLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:21:a7:65:a5:3c:1d:92:1f:0f:62:b8:0b:43:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Validity
Not Before: Mar 29 04:00:31 2026 GMT
Not After : Mar 30 04:00:31 2026 GMT
Subject: CN=5f2ba3c08823ab5022f8d87aa1a89392114f6f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:31:1d:f6:32:28:15:30:b0:c7:86:d5:61:d4:
74:d0:5c:60:ad:67:3a:b3:b0:f4:91:5d:4f:8b:91:
8a:00:04:11:f8:56:d3:83:a2:cd:59:43:3f:11:45:
7b:df:34:8e:ed:2a:2b:ae:45:d9:2d:0a:68:12:2a:
1e:40:60:39:8e:ea:b1:b5:d4:a3:31:db:b2:3b:fa:
9a:94:0f:cc:49:81:a9:04:5e:e8:98:90:09:f5:06:
4f:57:42:43:8a:48:d5:f9:7f:e1:c4:67:7e:66:b1:
59:9d:6e:e4:b4:71:3e:35:b7:d0:3c:ef:89:12:e0:
1b:b9:3d:30:a6:8e:27:62:30:c5:b5:5d:ef:e6:d5:
6e:93:67:7b:21:19:0d:27:66:3d:6d:ca:6e:ab:4a:
ec:55:cf:e7:d5:d7:09:d5:59:07:63:15:f3:ad:38:
83:18:4b:a7:25:cc:f1:66:ab:26:fd:a3:18:d0:83:
3e:1f:ee:6f:4c:0a:09:a9:c4:4b:4e:d8:33:db:53:
3f:7f:c1:ca:17:47:dc:33:01:c1:94:0c:66:99:d7:
41:42:b8:6c:77:49:ee:90:4e:c2:a3:36:b0:15:da:
e9:fc:8c:cf:c8:93:8a:59:5a:70:29:40:5e:5a:5d:
8a:54:26:a9:24:da:13:bf:2c:95:9a:d6:08:ee:fb:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2B:A3:C0:88:23:AB:50:22:F8:D8:7A:A1:A8:93:92:11:4F:6F:0E
X509v3 Authority Key Identifier:
keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:63:d5:be:cf:4e:51:ee:e5:55:98:8f:41:91:5c:70:3f:88:
a4:78:43:c2:ac:1f:3c:a4:97:66:a2:78:86:ff:44:cf:62:3d:
14:6a:3b:4f:5f:d9:4e:f2:cd:30:a7:27:98:c2:9b:c5:a1:3c:
6e:04:ee:6d:2d:20:01:ab:5c:d6:50:02:0b:15:05:25:6f:36:
42:44:c9:3f:c5:0d:e2:87:2a:00:48:8e:ef:6b:8b:1f:fb:10:
c0:d8:fd:58:6b:46:db:e8:e1:e2:40:cd:33:d3:e5:f9:6c:98:
50:bf:c1:cc:ae:6b:b9:b9:a8:02:1d:bb:70:be:2b:86:cb:eb:
3c:0d:c8:66:3d:c6:78:14:a6:3a:34:09:45:62:d2:63:d1:e6:
1d:f7:dc:98:77:2b:2e:9f:44:82:67:c4:62:5d:f1:8e:0e:82:
26:d2:35:cf:6b:da:e1:31:6f:56:9b:d2:a5:45:46:77:94:99:
c5:7f:c6:3e:99:32:cf:73:ab:00:25:39:fc:63:9c:1b:a4:a2:
83:f3:ad:02:af:93:0a:a1:31:0a:9b:11:fd:82:93:29:6f:99:
80:7a:b7:5c:e9:3b:30:65:71:9c:c0:64:f8:69:cf:57:28:a2:
b3:3c:bd:0a:a0:6c:8d:b5:a8:ec:ed:b0:12:1d:21:2e:3a:13:
64:4b:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:03 2026 by rpki-client