Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: /lXKU1w3PGZ2baBBzfkQ8u7I2l6V8ze6mwt11mAZ3fc=
Subject key identifier: 3B:DF:5A:8D:B3:DE:57:1C:77:F8:2F:33:0C:69:82:12:A0:CA:8D:BF
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 01A00137D6E7C574C44678A0C3D7B30B6AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0FFE
Signing time: Fri 14 Aug 2026 17:00:31 +0000
Manifest this update: Fri 14 Aug 2026 17:00:31 +0000
Manifest next update: Sat 15 Aug 2026 17:00:31 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: lfO7WeGO5D82XRt66FiCEPt6goWeUE+4DzLP+bTlNY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:37:d6:e7:c5:74:c4:46:78:a0:c3:d7:b3:0b:6a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Aug 14 17:00:31 2026 GMT
Not After : Aug 15 17:00:31 2026 GMT
Subject: CN=3bdf5a8db3de571c77f82f330c698212a0ca8dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:b8:c2:7f:62:34:e8:e3:a5:01:e6:75:0e:
9a:e5:16:db:72:2d:f2:ff:27:ed:b8:77:56:14:4b:
70:a3:5d:d9:2d:ec:70:77:5e:01:63:bf:6e:dd:74:
69:1c:5b:e0:e8:04:ef:e1:bb:3f:33:ba:32:7e:b8:
3d:ed:cb:3f:a1:b7:90:93:64:9e:fd:dd:b8:a5:bd:
95:4b:fb:f3:86:77:ab:27:fd:42:48:4b:e1:66:11:
0c:a0:c2:0e:24:12:e6:f4:81:b6:d9:b5:ee:80:6c:
7b:39:d9:d0:6f:d5:4f:06:89:c0:be:2a:be:a9:85:
21:95:2d:6f:3f:53:de:e3:e7:04:34:6b:f0:3f:89:
d0:0d:0b:95:f8:e8:c5:9f:60:27:27:2d:10:fd:10:
57:17:f0:bc:32:cf:3e:0f:81:80:92:80:33:01:ef:
55:3c:42:9c:98:37:a9:de:e9:0c:29:8b:09:b4:37:
6e:3e:71:0d:58:c1:c8:d7:d4:76:01:cb:06:44:7d:
9a:c3:a5:a6:dc:d7:ae:d0:80:aa:50:60:27:53:a4:
ff:eb:0b:36:e7:f9:dc:1b:50:9a:be:22:ed:4b:4c:
77:2d:b3:9e:12:4f:b3:49:61:ed:52:7c:78:83:fc:
f8:21:41:d5:74:ca:02:14:c3:5f:e8:87:7e:45:9d:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DF:5A:8D:B3:DE:57:1C:77:F8:2F:33:0C:69:82:12:A0:CA:8D:BF
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e8:59:7f:a0:1b:ee:a6:c3:07:c2:83:fd:78:62:54:d2:50:
b1:43:e2:41:09:24:a9:10:36:aa:f5:9a:df:88:f1:20:c3:a3:
b7:e3:2c:70:74:9d:cb:dd:10:fc:e7:59:33:50:b1:77:02:50:
6e:2f:ff:3a:d0:e6:26:a6:e3:2a:c7:10:72:c6:41:b2:4f:3f:
0a:80:9c:5a:3d:db:c6:1a:ee:cd:22:2e:34:22:1f:8f:86:10:
66:9e:63:52:07:d2:18:5e:f2:b1:e5:33:4d:6a:22:cd:65:7b:
83:57:74:d6:ee:2a:c1:48:5c:11:47:56:61:80:70:5c:cb:49:
b1:e6:32:b5:8b:d6:04:a0:7a:bc:32:d0:0e:78:26:d2:c6:a3:
ad:b5:fb:94:f1:eb:7c:2c:23:1d:4a:82:86:f1:56:39:0e:be:
3f:6a:6d:23:52:c3:2e:7b:df:6f:7c:4a:d8:1e:d1:5e:a7:0b:
99:49:65:f5:3b:20:19:49:40:78:38:56:3f:73:56:af:8b:8b:
be:2f:a0:b2:07:ed:5c:ef:1d:7c:42:c9:11:24:84:4d:21:dd:
20:1c:9b:32:ce:18:84:59:50:d3:ad:a0:8a:f2:9e:a3:3c:2b:
ca:f2:41:fd:cd:07:92:55:f3:54:8d:2e:a3:08:cf:ec:33:48:
c4:91:6c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:32 2026 by rpki-client