Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
File: R8zghicbSUmlCfHjcYDpioCkVOU.mft (raw, json)
Hash identifier: w8RANJw4vfqMsiDq2L7SyQWjErT9AWn0hCGh5z9+9DU=
Subject key identifier: 0C:FB:46:B0:11:6A:E5:AB:9F:50:F0:DE:83:E0:9D:99:ED:FB:9A:AB
Authority key identifier: 47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
Certificate issuer: /CN=47cce086271b4949a509f1e37180e98a80a454e5
Certificate serial: 01A181BD95B1BAD07B86DCB8F3CB2D5D9732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:00:47 +0000
Manifest this update: Wed 28 Oct 2026 09:00:47 +0000
Manifest next update: Thu 29 Oct 2026 09:00:47 +0000
Files and hashes: 1: 84nImxweqqr5ryKumI1pSxwnVkY.roa (hash: +HbQ4MWmkmjb64P4pJWJRCcWwhVgoZJ30TVPJhtlbcM=)
2: R8zghicbSUmlCfHjcYDpioCkVOU.crl (hash: gZTJ4yzEGNGVhWrCzqbwI+rYArTynP7UtWOYwvKENtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:95:b1:ba:d0:7b:86:dc:b8:f3:cb:2d:5d:97:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cce086271b4949a509f1e37180e98a80a454e5
Validity
Not Before: Oct 28 09:00:47 2026 GMT
Not After : Oct 29 09:00:47 2026 GMT
Subject: CN=0cfb46b0116ae5ab9f50f0de83e09d99edfb9aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:9b:99:45:7d:bd:2e:09:95:36:d1:fc:6a:
70:1c:44:75:ea:d0:3c:59:8f:9a:ee:67:a8:e1:5a:
f0:3d:17:76:81:4f:cd:40:1f:dc:ca:ad:fc:2b:dd:
cd:f1:37:85:c6:fe:30:39:3e:b1:6a:8d:08:29:4a:
de:c8:6b:af:09:c9:5a:3d:b0:4e:a2:a4:f5:29:cc:
d8:62:9c:aa:f6:88:49:c2:1a:e4:b3:d1:26:c1:8e:
c5:76:65:db:d1:19:02:e6:52:12:2e:2f:7f:c9:5f:
43:0a:35:19:05:11:83:33:ea:2d:9f:25:2d:04:1a:
ce:7b:b8:3a:bc:18:2d:a4:b5:e3:6e:35:74:fa:16:
50:d8:a9:96:99:4a:32:94:1c:26:81:e1:09:05:e1:
30:8e:d3:1e:d0:a0:56:bc:3b:7e:f5:37:07:da:c4:
9b:42:cc:8f:14:81:71:62:7c:e6:06:bb:5c:b6:34:
52:a6:a5:c1:8d:0c:8e:00:ec:2a:62:95:7f:9a:16:
61:e1:0a:7f:5f:20:eb:95:e6:f2:cd:1f:4d:a6:3a:
8c:e1:ca:22:70:0c:ef:ab:10:02:14:e5:8b:24:64:
00:78:ec:95:f1:46:cf:4e:ea:15:9b:5e:9f:97:44:
6b:28:27:d0:cf:9d:fa:f6:4e:38:5f:b4:84:53:ae:
4b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FB:46:B0:11:6A:E5:AB:9F:50:F0:DE:83:E0:9D:99:ED:FB:9A:AB
X509v3 Authority Key Identifier:
keyid:47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:79:ec:7f:2b:92:0c:34:25:32:b7:7c:dd:ad:f8:7a:f3:70:
da:94:d0:bf:e2:05:99:2a:6e:31:3d:05:91:3d:a8:10:f3:c4:
98:e0:94:45:0a:7a:5f:69:ef:eb:8e:8b:60:37:c3:2a:15:b8:
5b:05:39:55:58:e0:fb:14:2e:6f:4d:be:87:94:aa:cc:9a:ec:
b7:24:30:ce:ca:63:85:60:88:46:23:60:39:06:fc:75:c3:f9:
04:6d:83:d1:8c:d6:b4:e7:22:b1:3b:b2:ce:db:c4:dd:77:b8:
88:fc:af:fc:ff:f4:4f:6c:2d:e9:02:51:a2:84:3c:ec:49:3f:
3c:8b:04:ea:3b:aa:51:f8:55:00:28:3a:7a:d2:46:61:55:db:
12:a6:4d:e9:a0:1e:5f:1b:d5:5b:8e:99:05:3a:6a:88:f7:a7:
fc:7f:7a:c3:44:36:37:52:fa:74:54:a9:36:35:ae:be:5d:62:
d8:49:14:9c:fb:1b:1a:54:ff:49:7c:ba:16:e1:be:f5:d9:d0:
8a:85:b3:4a:28:ce:70:96:b9:92:95:2d:1b:2e:1b:9e:77:32:
a3:0e:ee:fc:6c:19:d6:eb:ed:83:d8:9e:4d:51:71:57:10:7c:
43:fb:f5:1a:58:18:fc:1c:e8:d2:9b:db:28:86:47:86:ed:3b:
92:48:d4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:23:02 2026 by rpki-client