Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: nCr1Lpnc2BvGZJ/bJOSVM8dUW4dVDL7uNbGLdM51Kgg=
Subject key identifier: 67:C5:74:DD:79:B9:97:1C:00:34:CF:9F:10:9E:F4:B2:40:74:5B:78
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 019F178C4A7D214BB7B6633212D56A48F7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0F85
Signing time: Tue 30 Jun 2026 08:01:37 +0000
Manifest this update: Tue 30 Jun 2026 08:01:37 +0000
Manifest next update: Wed 01 Jul 2026 08:01:37 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: 0Xa9h1xbYIZlx4MOFTG2pavbfjULqcBvtBuSwZBG56Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:4a:7d:21:4b:b7:b6:63:32:12:d5:6a:48:f7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Jun 30 08:01:37 2026 GMT
Not After : Jul 1 08:01:37 2026 GMT
Subject: CN=67c574dd79b9971c0034cf9f109ef4b240745b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:c1:bd:a6:17:7e:9c:63:5a:6c:bc:ba:97:
a3:c5:bc:c4:e0:06:cd:a4:6b:37:68:03:1c:b4:f4:
1a:61:a6:d3:96:b4:d0:5c:fa:29:db:ba:2c:15:82:
ed:40:df:77:fa:7b:2a:f6:02:ac:bb:c3:3a:71:65:
08:ff:07:3a:da:a1:57:2b:e5:0a:d0:2d:0a:7a:95:
b6:dc:03:27:d3:66:fb:2e:03:9e:be:d7:cd:74:e4:
5c:60:bd:b7:f4:b7:3f:ca:69:f5:52:39:46:eb:38:
cf:e0:b6:fb:c6:50:d3:92:67:98:28:03:b6:6b:0e:
4a:d4:94:f9:3e:d1:0b:d2:68:5f:98:ac:a0:f2:7c:
ff:c2:35:9b:c0:3b:34:ea:44:36:0c:14:a5:aa:fe:
e7:eb:a4:82:5d:09:e7:6b:53:85:81:dd:4d:67:7a:
03:13:c6:0c:ad:02:18:43:2c:e1:e0:2d:16:af:d9:
72:ca:5d:22:e9:4d:57:70:f9:78:f8:9b:35:ed:da:
04:1c:76:30:65:3b:6b:b0:24:71:b7:c7:c0:86:90:
b1:02:f4:a1:99:17:ff:32:b2:7b:86:c4:da:03:31:
b3:2c:2d:d8:b0:7e:eb:4c:01:87:ef:b6:7b:21:af:
d2:47:84:57:25:e6:12:68:80:86:00:50:ab:80:cf:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C5:74:DD:79:B9:97:1C:00:34:CF:9F:10:9E:F4:B2:40:74:5B:78
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:77:4a:d7:d1:d2:c8:fd:40:cc:33:93:8f:55:51:3e:90:84:
15:a7:5e:2e:1e:bd:12:c5:d4:79:e1:25:3f:42:40:2b:4e:f0:
88:67:e2:7b:2b:3f:6c:4a:08:5f:e1:de:96:23:f5:1b:2e:2d:
43:62:9e:f2:a0:cc:c2:3a:d4:53:99:ba:49:7d:e3:6c:ff:de:
ef:82:4d:33:2c:c8:31:ba:a1:74:62:2a:7b:2e:f3:35:8e:5c:
f3:73:18:bf:24:fd:41:c4:c0:55:99:c6:92:51:01:62:69:ae:
87:3d:70:d9:fe:bb:3f:58:30:da:9e:e3:6e:71:8e:d6:df:9c:
0a:48:f5:f3:88:6f:2e:b8:dc:62:99:53:86:c2:ef:f3:7c:5a:
79:5e:1f:6f:d7:03:fa:9c:33:e6:b7:40:56:c8:13:d6:2d:3a:
04:72:f3:5e:57:a3:21:41:34:4f:e9:6e:f7:57:b7:ec:8d:46:
e9:6f:53:69:51:bb:e5:5c:fb:67:e4:d0:b6:a4:07:96:35:8b:
9d:61:cc:cd:a6:e8:69:a5:b9:ca:e5:ab:39:7d:79:27:d0:4a:
95:a7:29:5e:70:62:24:b7:4b:19:3d:d2:3d:75:c8:21:09:b9:
1d:16:0c:33:68:b4:d1:47:5b:2e:16:ed:8c:ad:33:66:d9:5b:
06:89:67:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:14 2026 by rpki-client