Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
File: R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft (raw, json)
Hash identifier: XASbrIwUPjcXXUnQXf2VU5EpUGE9oCWGEauKjWtqJhM=
Subject key identifier: E3:2D:75:32:99:1F:28:E3:1D:9C:9C:80:99:3C:03:A4:7E:0B:36:15
Authority key identifier: 47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
Certificate issuer: /CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Certificate serial: 01A193C3D8F3CD677DDDC2EB54FC3C2CA16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
Manifest number: 02B5
Signing time: Sat 31 Oct 2026 21:00:48 +0000
Manifest this update: Sat 31 Oct 2026 21:00:48 +0000
Manifest next update: Sun 01 Nov 2026 21:00:48 +0000
Files and hashes: 1: 1-TqiAazLK9RAar2iXroZHFof6YM.roa (hash: WVVq8CYPuWlLC3tvTr+h2SKeyS4SEjc0OCpY8ivnCV8=)
2: R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl (hash: nS3bEIf2aDaO2OHXZizZ+qxLIEIAVrWKBDlkbI4Gm1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:c3:d8:f3:cd:67:7d:dd:c2:eb:54:fc:3c:2c:a1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Validity
Not Before: Oct 31 21:00:48 2026 GMT
Not After : Nov 1 21:00:48 2026 GMT
Subject: CN=e32d7532991f28e31d9c9c80993c03a47e0b3615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:23:8d:6b:49:c8:c4:03:0f:14:2c:64:33:
c7:72:ac:cf:ea:a9:de:92:b8:f5:66:b7:14:c0:33:
cd:a0:09:3d:f3:05:8d:30:92:a8:6d:1b:19:59:c2:
f5:19:cb:e9:73:60:1f:ee:1b:a8:13:7d:67:33:a2:
4a:db:72:64:dd:5f:8e:28:89:c5:cd:ef:20:a4:ef:
94:7f:9b:37:8f:f7:b4:bb:c0:59:d0:6f:b1:22:e8:
46:ac:91:14:ae:89:1a:1f:1b:98:a3:88:dc:34:bb:
3e:ca:8e:41:ff:f5:93:3d:25:44:82:78:c7:22:53:
3e:27:cf:c1:bf:bd:a0:79:0f:6e:7c:18:81:9a:23:
7b:37:aa:3d:12:44:66:dc:76:52:be:75:71:49:7c:
3e:7e:3e:1c:26:06:e9:10:67:94:08:10:7a:6e:9f:
09:12:06:47:c0:89:1a:ee:7a:07:5f:d0:24:35:f9:
0c:6b:2a:09:e5:42:e3:85:ff:3f:c5:32:3c:ca:f4:
8d:ea:c2:e6:d2:46:47:cc:56:93:80:5f:5a:12:25:
20:4e:66:dc:8b:5a:f5:8d:0b:58:3e:93:a4:87:b4:
8d:d7:90:50:f2:01:cd:7d:2c:b1:d8:14:e2:0e:5f:
c6:3e:71:eb:f6:06:b9:b4:6a:75:45:9d:d0:d7:10:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:75:32:99:1F:28:E3:1D:9C:9C:80:99:3C:03:A4:7E:0B:36:15
X509v3 Authority Key Identifier:
keyid:47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ff:b3:2e:60:1a:9e:08:60:e1:e3:8d:80:54:4c:26:88:3d:
f7:8d:c3:34:7c:73:86:ed:71:b9:f3:3b:71:50:1c:e6:70:17:
37:86:75:aa:e6:db:c7:e9:e8:e8:b6:0c:4f:09:1b:57:68:0a:
26:f9:99:a9:2b:77:35:e0:c9:9f:42:04:1a:ef:f5:72:38:d2:
a5:50:c4:d1:82:5c:0f:0c:0f:4f:11:f3:a5:b3:a2:e0:2a:3f:
96:e5:01:76:4b:56:bc:0c:79:cf:02:da:99:db:96:be:bf:73:
d6:ae:3e:91:95:94:c6:64:40:ae:1b:b7:b9:39:a1:ee:af:4d:
d1:93:0b:c4:52:ec:82:7e:67:a0:57:48:79:5b:51:72:95:ec:
aa:a7:30:6b:df:75:fc:16:98:c0:87:1c:7d:2e:b7:74:b0:18:
44:d4:12:fc:7b:a0:ae:fb:f2:ae:f6:36:e3:fb:ea:0e:c6:6b:
2e:c8:9d:4b:1d:d2:6b:f5:8c:21:b3:3a:57:73:91:53:7b:a4:
d4:a1:35:1a:9d:19:43:25:58:54:90:47:b8:aa:f8:e0:f0:e7:
cd:76:9c:d7:ac:82:54:34:36:e9:3e:91:e7:a2:ee:20:61:30:
50:e8:a0:8e:2c:61:8b:a3:76:43:42:62:27:d8:b9:bc:80:0a:
e7:83:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:53:35 2026 by rpki-client