Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: hAtvgp1urr1kaQnT2pkyPsnUQ8Y6J4RJyvfBIi/B5h0=
Subject key identifier: 17:46:1A:9B:2C:4E:E1:52:52:94:88:E9:5F:7E:8B:B4:9B:8B:88:A9
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 019CE3D998ED4599613F441E517C3F8F0B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 0486
Signing time: Thu 12 Mar 2026 21:00:14 +0000
Manifest this update: Thu 12 Mar 2026 21:00:14 +0000
Manifest next update: Fri 13 Mar 2026 21:00:14 +0000
Files and hashes: 1: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: 91lSrcvPVCw4LoiR5zA/ijzzXgIqBA33DSsBf7K0k20=)
2: SBUsospASb3EsMhP62NmTHT6SVw.roa (hash: 0+KXBZnA9I41d7SaRHS/S7In8wI7A6juxPzuhg0b63k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:98:ed:45:99:61:3f:44:1e:51:7c:3f:8f:0b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Mar 12 21:00:14 2026 GMT
Not After : Mar 13 21:00:14 2026 GMT
Subject: CN=17461a9b2c4ee152529488e95f7e8bb49b8b88a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:df:dc:c4:15:d3:86:75:7a:fb:78:c6:9a:
c8:6a:77:82:1b:af:fb:52:e5:8c:53:fe:c9:07:a3:
74:2c:9e:d2:34:93:88:57:e4:80:dd:1e:ce:8d:26:
d3:9e:1c:92:83:dd:09:9f:16:d9:68:7b:3f:cf:03:
ac:cd:1e:a7:54:86:59:f3:5b:c8:ea:57:5d:9c:20:
48:8e:ea:5a:8c:dc:f7:8e:ff:ae:d0:5a:21:60:dc:
5c:17:c4:ee:e9:e3:9d:73:71:36:01:5e:c0:38:b1:
6a:e7:b0:91:31:6d:1d:de:32:54:ed:00:5d:e9:50:
1c:5c:d1:4a:23:90:bb:75:65:43:4b:f6:d3:fa:05:
92:82:d9:a6:1f:06:bd:eb:b9:02:2e:37:f5:e6:b4:
d7:dd:89:e3:04:58:63:92:4b:ea:56:4c:d2:20:16:
07:32:47:d0:b1:69:8a:f3:50:c5:b9:27:50:ca:a5:
4d:95:42:ec:b9:8d:08:82:ca:2e:3d:f4:03:37:d5:
86:58:2b:37:c1:49:1b:1d:14:d7:97:02:f4:41:0e:
18:09:e7:4d:b1:bf:95:a2:c1:89:9e:df:00:c7:1f:
f8:00:6d:73:8b:d1:2c:5f:ea:14:b7:87:2b:81:b7:
6f:4d:5c:58:f1:87:de:37:70:52:a7:ed:12:62:b3:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:46:1A:9B:2C:4E:E1:52:52:94:88:E9:5F:7E:8B:B4:9B:8B:88:A9
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cd:2d:84:62:bc:70:e9:93:d7:17:85:4e:ff:de:97:d6:36:
b7:35:7b:59:47:71:a3:a8:eb:2c:e6:1f:29:b5:ae:14:7b:7b:
9d:e0:b1:ef:64:7f:00:17:b1:4d:7f:1b:37:9c:77:50:90:c2:
d3:75:39:f9:eb:03:ae:92:ac:4e:1c:15:85:c6:63:db:e2:87:
cd:98:11:62:00:53:ed:6a:0a:e5:84:ab:cd:93:24:34:ba:2a:
7d:ce:06:30:10:51:24:ea:1d:25:6b:74:07:72:22:31:2b:71:
a3:bf:8e:fb:8a:c4:c2:64:a0:b8:49:32:2a:08:e3:3e:a6:86:
50:b1:30:53:ce:49:b1:40:80:22:90:ed:61:3a:0b:97:89:66:
d1:a6:1e:9f:69:e6:f7:28:54:19:59:cf:f0:cb:e4:98:ee:58:
94:0f:9a:82:dc:67:43:9c:8f:ec:c3:cf:fd:99:18:ba:3b:31:
26:b9:d5:d8:25:fa:14:5a:b5:c0:8a:32:6c:a1:6a:03:95:7b:
1a:ac:c2:10:1b:e6:04:d4:6f:34:01:93:69:ed:d7:78:a8:7b:
7e:d7:1f:c0:9a:3c:d5:e8:e1:d0:39:eb:70:bf:7c:b0:8a:b6:
f7:88:81:21:b8:78:2c:c3:44:cf:dc:cd:3d:7f:9b:5a:35:f5:
50:55:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:48:24 2026 by rpki-client