Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: 8xO8fkA0hEkErro03oBtjPs60sxiBGEjew+7nNwL1Dc=
Subject key identifier: 20:73:FD:3F:24:82:D0:68:BB:08:95:90:D0:59:BC:49:5E:4D:3F:9F
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 019E2FCE0872B23D331DF145852558E993CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0F0D
Signing time: Sat 16 May 2026 08:01:31 +0000
Manifest this update: Sat 16 May 2026 08:01:31 +0000
Manifest next update: Sun 17 May 2026 08:01:31 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: gfLEAEUeakc2htLzJSc5F+xX1aBv1Fmxk8Zn9pWqq3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:ce:08:72:b2:3d:33:1d:f1:45:85:25:58:e9:93:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: May 16 08:01:31 2026 GMT
Not After : May 17 08:01:31 2026 GMT
Subject: CN=2073fd3f2482d068bb089590d059bc495e4d3f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:79:52:01:7e:a2:ea:e2:70:de:fa:2b:cc:89:
d0:83:72:49:8b:ff:c7:dd:2a:f6:67:86:6b:19:e1:
44:db:10:f7:cb:d6:b4:75:c1:5a:48:cb:22:2a:d5:
56:71:c6:5c:85:bc:30:0b:38:d0:52:da:1f:81:2b:
ce:06:99:5c:25:b4:bd:72:7d:0d:09:f8:3b:d0:a1:
0a:0d:7d:41:c9:57:38:39:3b:6a:0d:68:7d:d6:73:
c5:75:1b:04:5e:22:b0:77:7c:7b:c1:52:bd:26:a1:
42:a9:31:85:10:b9:dd:e2:37:9b:ca:51:7b:97:b4:
f0:9f:d2:6d:b0:e2:19:63:cf:76:5b:32:47:8a:8d:
f8:a3:ea:ce:04:0d:c1:fe:1b:8a:48:28:87:a4:d0:
a2:2b:9d:37:7e:a0:f9:94:a6:9a:86:8d:04:92:a4:
8b:14:1b:43:95:e7:8a:3e:86:56:56:00:5c:91:40:
3a:55:6b:5b:be:47:5b:62:c5:dc:a2:73:66:9f:8c:
4a:19:c0:96:e9:a9:bb:6a:b1:be:24:b2:57:41:ae:
0a:1d:fc:06:f5:69:0a:d0:4f:c0:22:c1:10:01:ee:
af:e9:8f:d1:ff:85:80:fd:e8:22:6b:fa:36:94:ef:
5b:32:16:18:46:c4:8b:65:d5:09:11:7d:9f:0e:55:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:73:FD:3F:24:82:D0:68:BB:08:95:90:D0:59:BC:49:5E:4D:3F:9F
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d5:5e:c8:dd:ba:ee:fd:ef:84:61:9c:78:8d:74:f2:6f:61:
c9:59:d8:d1:1f:75:65:ce:38:30:55:6f:ce:11:c6:b5:c1:ad:
e3:93:96:49:24:63:e3:ee:91:1c:ab:86:69:8b:c8:fc:1b:90:
62:28:6c:b9:b6:0e:c2:9a:89:00:b6:c4:91:07:f4:aa:a9:c1:
e9:be:10:39:af:83:7c:ef:ee:40:06:97:14:7a:2e:af:26:16:
a0:9f:7f:59:62:72:da:3f:f8:33:be:88:71:f0:96:a0:61:96:
d9:d8:45:32:b0:d8:44:02:04:7f:9a:cd:94:f1:51:2c:11:f7:
c9:fc:13:cf:1f:ba:46:14:e1:e9:11:2b:4b:66:34:df:32:c0:
9a:51:08:dc:87:60:0d:7a:c6:40:7b:0d:1e:99:78:6f:66:e6:
e6:da:a7:db:4c:fb:5d:1d:e6:3e:b1:de:70:86:6d:ea:45:03:
e0:5c:a8:02:d2:89:7f:3f:9b:ca:f5:fb:32:5f:54:47:6a:13:
10:0a:2a:59:08:28:30:34:74:5b:47:c6:6d:64:56:26:29:ff:
9d:a1:5f:d6:68:cc:7e:68:1b:04:02:bb:a6:5f:5d:97:e8:7c:
47:50:c4:ca:ee:e7:4b:1d:7f:22:04:9b:23:a0:0f:6f:18:bb:
4e:06:a1:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vzghysj0zHfFFhSVY6ZPOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYjhkODZmYWVmMzkzODFkNjlhMjE4MjU5NTgyYWYyODVl
YWI4ZGYwHhcNMjYwNTE2MDgwMTMxWhcNMjYwNTE3MDgwMTMxWjAzMTEwLwYDVQQD
EygyMDczZmQzZjI0ODJkMDY4YmIwODk1OTBkMDU5YmM0OTVlNGQzZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknlSAX6i6uJw3vorzInQg3JJi//H
3Sr2Z4ZrGeFE2xD3y9a0dcFaSMsiKtVWccZchbwwCzjQUtofgSvOBplcJbS9cn0N
Cfg70KEKDX1ByVc4OTtqDWh91nPFdRsEXiKwd3x7wVK9JqFCqTGFELnd4jebylF7
l7Twn9JtsOIZY892WzJHio34o+rOBA3B/huKSCiHpNCiK503fqD5lKaaho0EkqSL
FBtDleeKPoZWVgBckUA6VWtbvkdbYsXconNmn4xKGcCW6am7arG+JLJXQa4KHfwG
9WkK0E/AIsEQAe6v6Y/R/4WA/egia/o2lO9bMhYYRsSLZdUJEX2fDlVGKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBz/T8kgtBouwiVkNBZvEleTT+fMB8GA1UdIwQY
MBaAFOO42G+u85OB1pohgllYKvKF6rjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDdqWWI2N3prNEhXbWlHQ1dWZ3E4b1hxdU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82NTgzNzUtNDJjOC00ZmUyLTg1MDgt
YzI1YTJjODI4YzVmLzEvNDdqWWI2N3prNEhXbWlHQ1dWZ3E4b1hxdU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82NTgzNzUtNDJjOC00ZmUyLTg1MDgtYzI1YTJjODI4YzVm
LzEvNDdqWWI2N3prNEhXbWlHQ1dWZ3E4b1hxdU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9VeyN26
7v3vhGGceI108m9hyVnY0R91Zc44MFVvzhHGtcGt45OWSSRj4+6RHKuGaYvI/BuQ
YihsubYOwpqJALbEkQf0qqnB6b4QOa+DfO/uQAaXFHouryYWoJ9/WWJy2j/4M76I
cfCWoGGW2dhFMrDYRAIEf5rNlPFRLBH3yfwTzx+6RhTh6RErS2Y03zLAmlEI3Idg
DXrGQHsNHpl4b2bm5tqn20z7XR3mPrHecIZt6kUD4FyoAtKJfz+byvX7Ml9UR2oT
EAoqWQgoMDR0W0fGbWRWJin/naFf1mjMfmgbBAK7pl9dl+h8R1DEyu7nSx1/IgSb
I6APbxi7TgahhA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:23:52 2026 by rpki-client