Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: Ne29zKU7IRrJuRS5qvIjJMNxYGQCBvqme3pSZP8X1HA=
Subject key identifier: 9E:94:7D:71:20:89:34:21:96:8B:2D:9D:D5:A0:B6:C9:F3:82:58:72
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 01A13DEF39D76AF4B7B8EAE7E2D7F1839230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 10A2
Signing time: Thu 15 Oct 2026 05:00:50 +0000
Manifest this update: Thu 15 Oct 2026 05:00:50 +0000
Manifest next update: Fri 16 Oct 2026 05:00:50 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: a6opKApOoFxJJzxJhfuA+g/cWt48Pq7PmVuDuFIcnj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:39:d7:6a:f4:b7:b8:ea:e7:e2:d7:f1:83:92:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Oct 15 05:00:50 2026 GMT
Not After : Oct 16 05:00:50 2026 GMT
Subject: CN=9e947d7120893421968b2d9dd5a0b6c9f3825872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:55:46:e9:58:1f:a2:ba:85:f5:53:45:bd:
c1:50:fd:c5:06:29:0c:e8:0e:cf:a8:a9:09:db:e3:
c3:1f:76:d5:49:7e:97:b8:8e:c0:f7:8e:20:c5:1f:
15:a1:74:a3:f4:81:48:81:4b:12:4a:5f:d2:f7:27:
78:b8:40:f8:82:44:ea:bf:60:1c:40:71:66:e8:60:
1e:c1:d5:9b:75:6e:6d:74:e0:5e:06:85:80:45:81:
c5:e2:f8:82:3e:8a:24:79:c5:d4:a3:72:96:29:65:
99:ea:e3:60:57:de:08:6a:72:a3:72:90:0a:f2:49:
da:a9:67:8b:98:e2:f9:19:f5:8d:c1:2b:0e:9c:dc:
69:44:41:e6:61:41:f3:76:84:78:a8:99:8f:63:e8:
67:c6:3b:2a:16:1c:f7:2d:c7:49:f2:1f:db:69:b0:
42:ba:75:42:0e:44:ec:9a:2e:82:bb:71:77:8f:72:
b7:fb:1d:36:43:01:3f:e3:9a:3c:76:07:4b:f6:cc:
f3:79:0b:e0:c0:47:75:62:a1:de:be:2b:ac:dc:ea:
4e:49:27:ae:76:cc:37:bc:3f:38:6b:ad:cc:6d:60:
11:b3:80:4e:db:4f:55:2e:69:5a:21:e9:4d:d1:87:
9a:7d:08:d0:b8:b1:55:0f:d7:44:3d:5d:9f:9b:a9:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:94:7D:71:20:89:34:21:96:8B:2D:9D:D5:A0:B6:C9:F3:82:58:72
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:95:3a:23:4c:0a:a2:65:7a:0d:ad:ee:3c:22:a4:0b:b4:7f:
fa:ce:2b:81:94:f0:85:a2:35:66:3a:ae:0d:ca:bf:cd:50:cc:
67:9d:b3:8c:e0:21:37:b5:19:0d:80:71:f0:d1:8f:92:4c:28:
bc:40:31:5f:43:f4:c2:2a:c3:00:0a:46:25:93:4d:be:68:8a:
25:22:34:2e:6d:2e:69:59:3f:80:f0:74:7c:36:cf:bc:6a:d7:
e5:7d:be:1b:1d:c4:a0:f1:0d:91:43:f2:f7:4a:9b:47:08:cc:
dd:98:58:e0:3d:15:b6:0c:89:d7:05:ab:83:a1:66:d7:32:1c:
89:5d:8c:bf:59:28:7f:64:8a:84:81:58:58:a4:38:bf:c8:28:
81:47:a8:d3:8f:f3:c8:1c:91:5a:70:ae:1b:d2:3c:f1:fe:cc:
70:86:23:f6:63:b5:7e:31:b1:28:f0:43:e5:a1:fc:89:5d:aa:
6b:94:11:4e:5a:03:3e:1f:b6:b5:c7:c7:ac:50:f8:30:c4:1c:
5c:35:52:1f:af:89:04:86:55:b6:ea:47:d9:ea:0e:14:59:a3:
47:00:f4:11:f0:99:30:b6:8a:4d:8f:15:47:62:51:7c:d0:a9:
4e:57:63:dc:58:41:94:b7:8c:e1:06:51:c2:5c:33:92:08:83:
4b:93:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:54:44 2026 by rpki-client