Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
File: 470BQW0GPp8si7MOunJUmJ1oyl4.mft (raw, json)
Hash identifier: mqz99zwLElUz3pN4bPEVrLV4B4S1/P/uqWn14yB85y8=
Subject key identifier: A7:BA:DA:54:8E:6E:EE:4B:86:56:58:7E:7C:3F:50:86:9F:AC:E9:D6
Authority key identifier: E3:BD:01:41:6D:06:3E:9F:2C:8B:B3:0E:BA:72:54:98:9D:68:CA:5E
Certificate issuer: /CN=e3bd01416d063e9f2c8bb30eba7254989d68ca5e
Certificate serial: 01A040175D706EE493630C0FFC316E712A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
Manifest number: 010E
Signing time: Wed 26 Aug 2026 22:01:08 +0000
Manifest this update: Wed 26 Aug 2026 22:01:08 +0000
Manifest next update: Thu 27 Aug 2026 22:01:08 +0000
Files and hashes: 1: 470BQW0GPp8si7MOunJUmJ1oyl4.crl (hash: URPQJRmoAWumApITt3Ov5kkN1cC7HIah71j/iD6+7k4=)
2: pqm9KQxmnlmsEcZ1a4GqPZpyF0M.roa (hash: KCyynhPI7ik936knmtF7PX4p6nVsyuU0oUPtdUxG/Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:5d:70:6e:e4:93:63:0c:0f:fc:31:6e:71:2a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3bd01416d063e9f2c8bb30eba7254989d68ca5e
Validity
Not Before: Aug 26 22:01:08 2026 GMT
Not After : Aug 27 22:01:08 2026 GMT
Subject: CN=a7bada548e6eee4b8656587e7c3f50869face9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:9d:ce:4e:b8:23:79:e4:5b:ae:45:3f:b4:
cc:a5:f1:4b:d1:65:ad:9b:af:7c:56:f3:08:7e:f8:
91:5d:e7:f6:3c:08:27:d8:a6:cd:d9:7e:5a:cd:af:
a2:16:10:18:31:a4:93:2a:a7:28:71:dd:25:f6:c3:
80:c0:a4:8b:c4:9d:a4:0e:ac:7e:b8:5b:7d:4e:bb:
d5:db:74:a5:39:04:2c:4c:60:d1:75:56:68:7d:cd:
33:eb:9c:26:e9:a6:43:c3:f3:df:7b:46:0e:c4:f0:
ae:e8:7c:88:ca:65:58:53:5a:e3:fd:be:11:00:42:
58:ae:10:23:bd:c6:b6:83:89:c4:34:13:e2:8b:12:
ec:d8:70:a8:28:3a:6a:60:07:7f:40:a4:92:88:9d:
d5:c1:82:48:4b:03:9a:c9:90:db:92:04:c4:d9:9d:
1b:3e:ac:7a:7e:6d:88:56:ce:9e:bf:e6:e4:d6:6d:
91:37:8b:75:3b:38:89:9f:9c:41:f3:9b:6c:1a:3e:
71:5e:44:cb:fe:1e:1a:16:9e:78:c8:47:18:d8:da:
88:e7:80:78:f1:ec:cf:16:75:28:23:5a:0b:af:86:
2e:e1:d3:d2:02:34:4c:e9:23:82:cf:77:39:2e:d9:
07:da:3e:60:4a:e0:c9:78:77:7c:4d:5a:b8:8b:48:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BA:DA:54:8E:6E:EE:4B:86:56:58:7E:7C:3F:50:86:9F:AC:E9:D6
X509v3 Authority Key Identifier:
keyid:E3:BD:01:41:6D:06:3E:9F:2C:8B:B3:0E:BA:72:54:98:9D:68:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a2:74:6b:99:17:b0:df:1e:0f:71:4e:23:39:3c:54:16:eb:
49:4e:44:30:22:de:e8:ff:d0:79:31:cf:ac:83:fd:5a:69:9c:
18:85:a2:08:bf:c0:1d:36:56:ca:25:e6:22:7c:6f:19:3a:17:
1d:3e:a1:94:6b:44:6c:1e:d7:4a:52:0a:02:5a:66:01:89:dc:
06:49:ac:e2:bc:e8:05:f9:c5:39:04:0d:27:24:13:a0:e1:a0:
fe:08:e8:78:85:60:86:c2:51:8e:e2:78:76:16:68:0a:b1:ef:
d8:d1:e8:e8:a7:79:8d:11:34:ec:35:e0:c0:e2:09:1c:a8:59:
23:15:6c:55:15:ee:91:8c:e2:7d:37:7a:87:e4:cb:da:6e:a5:
d0:3c:0e:8f:08:c3:9c:24:92:15:c9:1c:a9:b7:80:f1:21:ce:
5a:48:9f:00:9d:c2:ad:93:88:b1:d4:02:bb:ff:72:7f:5f:54:
ca:43:c4:b8:84:36:65:9f:96:5b:d4:77:f5:ba:71:49:7e:7e:
d3:2b:bb:f2:e8:fb:d0:d3:2d:d0:c2:7a:a4:74:8d:3c:e3:9f:
57:76:36:14:61:03:c2:76:f0:86:fe:2d:c9:bb:a4:e2:c7:bc:
73:f5:38:ab:5a:b4:30:b6:70:10:e1:e5:97:3e:77:76:44:59:
8a:91:05:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:32 2026 by rpki-client