Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: TcanF0fxLZyL6WnmNERY7IPCVOK+K0pyiQEpCGF5E6g=
Subject key identifier: 47:C2:91:03:14:A8:F1:9C:28:29:40:40:33:D7:46:F3:E9:AD:4F:D1
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 01A000CA0BFA84688D7D21EA6DB25756275E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 1268
Signing time: Fri 14 Aug 2026 15:00:36 +0000
Manifest this update: Fri 14 Aug 2026 15:00:36 +0000
Manifest next update: Sat 15 Aug 2026 15:00:36 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: hIRltHyXlqunby4SJskvwjP/bCjj2ujEHYuizWz6RsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:0b:fa:84:68:8d:7d:21:ea:6d:b2:57:56:27:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Aug 14 15:00:36 2026 GMT
Not After : Aug 15 15:00:36 2026 GMT
Subject: CN=47c2910314a8f19c2829404033d746f3e9ad4fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c0:51:fe:99:e1:59:16:03:3c:3e:74:4e:28:
22:8c:2d:be:a2:62:c2:48:c2:bd:b6:95:53:26:d6:
6d:be:45:0c:e9:09:c9:12:b5:5a:59:bf:56:c9:75:
30:3c:88:6c:31:55:b7:f8:ac:10:3e:77:bc:f1:29:
57:d3:c1:1a:01:53:f1:60:95:a6:e0:1b:6b:bb:2f:
a5:10:e5:25:eb:83:63:20:4b:74:5d:01:0c:76:48:
d8:cd:71:e5:a9:68:c0:f2:a2:b7:78:a1:54:93:6b:
fd:f8:21:0c:26:24:5b:be:16:bc:3f:39:f6:0e:46:
fe:c3:b1:7c:03:cd:52:fe:05:b5:73:e6:42:6a:f6:
cb:80:c9:2c:2e:17:7c:d1:d9:b2:43:60:54:4c:50:
14:5c:48:ac:2b:c9:56:82:72:78:f6:cd:55:67:b1:
57:4c:b5:e5:7f:8a:c9:75:a2:a3:ef:ad:47:b7:bc:
f9:69:09:ad:e3:aa:e9:73:6a:f8:bd:fe:ae:60:bb:
d8:2e:30:38:36:74:da:c6:ed:5e:cf:a9:7b:fc:04:
e7:0c:e3:f9:de:65:5e:58:90:5d:75:1e:5d:9f:a1:
0d:c3:3c:a5:2e:ab:96:f8:81:68:ca:92:74:c5:92:
2b:60:da:85:ec:35:7d:aa:fe:88:d1:a2:f1:48:a5:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C2:91:03:14:A8:F1:9C:28:29:40:40:33:D7:46:F3:E9:AD:4F:D1
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5b:9e:fe:bc:ab:c6:1a:ab:ad:f7:19:fc:50:33:41:72:e0:
c2:4f:cc:84:55:18:2e:45:e4:56:d2:b8:40:5f:8c:d8:7b:08:
3f:1a:9a:a3:d9:fd:19:10:4f:cc:db:97:5f:85:28:cd:dc:a8:
90:4e:08:c6:bc:7a:c1:7d:ce:ee:68:74:86:9b:bf:61:05:ff:
e8:93:1e:b2:de:a7:0f:b9:b2:a9:33:55:a1:52:e8:1b:d3:71:
a4:fe:57:25:98:f7:8a:ee:cf:48:73:02:5d:d4:b8:9d:22:fc:
a2:eb:4f:49:55:f9:17:d7:0a:ae:5b:e7:66:05:04:ca:17:38:
e4:10:2a:68:a1:09:a7:ea:e2:89:cc:ba:b9:3a:7b:09:22:4c:
3d:72:2d:f2:c9:bb:9b:b4:51:92:98:a9:7f:4c:16:6b:1d:ba:
49:27:eb:65:b4:8a:46:09:a7:8b:56:0f:56:25:67:5c:34:7f:
39:47:6b:7d:da:23:55:a3:ce:49:50:7e:6f:f4:01:01:6c:7d:
bd:59:77:e8:b3:8c:24:e9:ec:52:fa:b1:2b:59:8b:7c:8a:16:
fb:73:a8:92:e0:ef:61:a5:6e:98:7a:bb:fb:73:51:33:36:4b:
11:d4:eb:70:fc:34:69:d2:e5:2b:a9:73:44:6b:5d:e6:9f:79:
98:2a:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:43 2026 by rpki-client