Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: 9+W0aGj9i6+TvHAX1S3i5KeB+WUKju0wsfaoqOPECJU=
Subject key identifier: 8A:52:9C:8A:99:69:0C:B5:F7:5E:0C:E2:64:8A:A3:0B:47:00:12:C7
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 019D389BB8684C3FF938BA05D4878C32C3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0E8D
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: rVmvFY1AWSrwDRK/Xckcd50ShJX85iBFQ4fOlIke4qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b8:68:4c:3f:f9:38:ba:05:d4:87:8c:32:c3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=8a529c8a99690cb5f75e0ce2648aa30b470012c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:15:52:fc:54:1b:97:76:d5:a3:a9:2b:ae:
6b:64:d2:9c:3f:51:a4:ef:64:36:c7:df:d9:64:8e:
cd:10:13:e7:5b:9b:93:73:f1:6b:e6:f8:77:57:2c:
f8:66:8f:1a:1f:d4:08:91:31:ef:73:07:39:7b:f6:
01:7d:fe:c8:5c:9a:dd:9c:20:fe:9b:ea:50:ca:13:
f5:f4:ff:44:e9:d5:22:67:94:72:ab:7a:77:39:dd:
51:63:92:1c:7b:2f:08:57:8c:83:35:1c:00:4b:08:
85:f5:24:5a:7b:ba:aa:1b:08:d2:f8:d1:94:5c:b7:
6f:9f:f5:27:aa:62:44:8b:29:72:f4:85:68:08:3c:
40:b5:1a:c9:51:08:9a:4e:63:91:9e:f1:42:03:18:
2c:8b:00:f7:5c:39:c0:2e:a9:8f:2b:bb:10:c4:25:
a7:77:7c:6f:9d:c6:10:a6:4f:df:ae:da:ac:b0:4d:
59:b7:26:34:36:18:a3:67:87:0f:a5:b0:45:b8:61:
71:95:55:5f:7d:8d:6b:0c:31:39:70:f9:5d:61:e1:
fd:3e:fc:b9:a0:ed:7b:48:78:3f:d3:72:f4:90:75:
33:38:5f:e3:c4:b8:00:bd:0f:fc:18:64:9f:a1:22:
31:04:d3:01:97:c2:c0:9e:e8:34:e4:7b:46:a9:2e:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:52:9C:8A:99:69:0C:B5:F7:5E:0C:E2:64:8A:A3:0B:47:00:12:C7
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:33:bc:cb:c3:3d:29:6f:2c:6f:0b:4b:d3:53:58:ff:6e:7b:
aa:89:da:d8:96:7d:61:10:2d:00:68:23:84:f6:5e:6d:63:64:
b3:1d:0b:7c:fe:ef:12:16:b2:86:c1:ac:ca:c6:89:93:d4:23:
3c:04:07:20:fc:bd:17:c7:3b:f5:ed:d8:f7:5e:df:e5:a3:fa:
37:12:ad:fa:8c:06:35:09:ff:cf:28:55:73:f3:f3:d6:1d:94:
33:1e:6a:aa:76:55:a6:99:d5:c2:dc:e5:b6:e7:8b:a7:14:f8:
43:59:e2:98:5b:5e:19:6c:73:a4:5f:c2:a8:72:60:f0:83:29:
5e:ce:ea:74:1b:22:89:e2:6f:76:81:df:a4:9e:6c:94:8b:7a:
5e:ea:fc:65:1a:83:ad:e8:c9:7d:df:f4:62:bf:5c:56:b1:aa:
79:7d:23:01:72:5b:b8:4b:89:c4:d1:7b:f3:95:2e:d3:19:83:
70:d3:24:35:08:4e:28:32:fb:d1:d4:1a:bf:cd:ea:89:e4:a7:
e6:cf:67:af:84:f5:77:93:a1:52:ab:1a:9c:4d:6d:2a:0b:c7:
52:ef:66:99:75:6d:86:04:74:18:64:57:ed:15:98:3c:55:a2:
ee:4d:bd:ca:e2:e0:26:5c:89:1a:67:c2:ca:df:fd:86:33:5d:
b2:d3:ba:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m7hoTD/5OLoF1IeMMsOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYjhkODZmYWVmMzkzODFkNjlhMjE4MjU5NTgyYWYyODVl
YWI4ZGYwHhcNMjYwMzI5MDgwMDIyWhcNMjYwMzMwMDgwMDIyWjAzMTEwLwYDVQQD
Eyg4YTUyOWM4YTk5NjkwY2I1Zjc1ZTBjZTI2NDhhYTMwYjQ3MDAxMmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpQVUvxUG5d21aOpK65rZNKcP1Gk
72Q2x9/ZZI7NEBPnW5uTc/Fr5vh3Vyz4Zo8aH9QIkTHvcwc5e/YBff7IXJrdnCD+
m+pQyhP19P9E6dUiZ5Ryq3p3Od1RY5Icey8IV4yDNRwASwiF9SRae7qqGwjS+NGU
XLdvn/UnqmJEiyly9IVoCDxAtRrJUQiaTmORnvFCAxgsiwD3XDnALqmPK7sQxCWn
d3xvncYQpk/frtqssE1ZtyY0NhijZ4cPpbBFuGFxlVVffY1rDDE5cPldYeH9Pvy5
oO17SHg/03L0kHUzOF/jxLgAvQ/8GGSfoSIxBNMBl8LAnug05HtGqS4hVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpSnIqZaQy1914M4mSKowtHABLHMB8GA1UdIwQY
MBaAFOO42G+u85OB1pohgllYKvKF6rjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDdqWWI2N3prNEhXbWlHQ1dWZ3E4b1hxdU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82NTgzNzUtNDJjOC00ZmUyLTg1MDgt
YzI1YTJjODI4YzVmLzEvNDdqWWI2N3prNEhXbWlHQ1dWZ3E4b1hxdU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82NTgzNzUtNDJjOC00ZmUyLTg1MDgtYzI1YTJjODI4YzVm
LzEvNDdqWWI2N3prNEhXbWlHQ1dWZ3E4b1hxdU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjO8y8M9
KW8sbwtL01NY/257qona2JZ9YRAtAGgjhPZebWNksx0LfP7vEhayhsGsysaJk9Qj
PAQHIPy9F8c79e3Y917f5aP6NxKt+owGNQn/zyhVc/Pz1h2UMx5qqnZVppnVwtzl
tueLpxT4Q1nimFteGWxzpF/CqHJg8IMpXs7qdBsiieJvdoHfpJ5slIt6Xur8ZRqD
rejJfd/0Yr9cVrGqeX0jAXJbuEuJxNF785Uu0xmDcNMkNQhOKDL70dQav83qieSn
5s9nr4T1d5OhUqsanE1tKgvHUu9mmXVthgR0GGRX7RWYPFWi7k29yuLgJlyJGmfC
yt/9hjNdstO6dA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:28 2026 by rpki-client