Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier: PMTiqj+x+kTpTGFeVoTUG8TksxKseM0Hh8PcSVwU7PI=
Subject key identifier: CA:50:1D:AC:DF:5C:F5:3B:88:E9:8E:CC:12:23:80:67:91:F0:19:4B
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 019FA37346B27EB5D64FFC529E7F8E1552AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number: 17C4
Signing time: Mon 27 Jul 2026 12:01:08 +0000
Manifest this update: Mon 27 Jul 2026 12:01:08 +0000
Manifest next update: Tue 28 Jul 2026 12:01:08 +0000
Files and hashes: 1: QfZV5akA_LVlGiRS4Ipop_sv1Gc.roa (hash: vjfnrfXaTawfVYXNYU+0NjZYU8xM90SngyWSZqja7G0=)
2: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: Y/15SqEHeReg+4c7n4XtHXY7a5vurLQrrse6CROQnqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:46:b2:7e:b5:d6:4f:fc:52:9e:7f:8e:15:52:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Jul 27 12:01:08 2026 GMT
Not After : Jul 28 12:01:08 2026 GMT
Subject: CN=ca501dacdf5cf53b88e98ecc1223806791f0194b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:87:28:7b:ff:ea:d2:7b:8a:28:a3:2e:b3:
1e:47:9e:ff:57:e3:b1:ea:94:9a:3d:31:08:f0:7d:
22:fb:1a:ec:a1:c8:85:a3:6c:c9:c0:9d:e6:45:24:
1e:6f:ec:9c:bb:30:62:e9:4d:25:1f:87:51:68:7c:
16:4d:aa:dc:c6:65:09:64:b0:dd:35:e4:36:c5:71:
15:a7:c5:c9:44:1a:5e:a0:f9:9e:e5:41:79:26:9a:
7f:79:60:96:61:b2:1b:6b:33:dc:96:af:45:13:92:
da:2e:0e:d7:8e:17:c5:57:61:9f:09:54:d2:13:b4:
4e:b9:b0:f4:d8:fe:3e:05:bb:84:25:33:a9:ba:bf:
08:7f:25:b8:a4:83:a9:0a:a5:aa:30:29:2d:46:c4:
6c:49:52:b4:e8:c9:bf:d3:47:aa:d2:82:e1:34:2d:
c6:88:35:83:10:cf:1c:5b:1e:3c:a4:74:d5:d9:94:
b9:ca:07:a4:2e:7d:75:b5:65:a6:f2:1e:7a:bd:14:
36:80:5e:74:97:a2:7b:92:16:cb:30:b4:f2:19:2e:
1c:60:7e:9c:b3:ae:46:99:44:4c:7b:36:6d:6b:84:
94:cc:22:4a:aa:af:e9:8d:d2:e8:2d:ed:fb:ae:0b:
94:ff:8f:f5:d3:1d:c3:b0:6c:cf:97:9e:80:74:b4:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:50:1D:AC:DF:5C:F5:3B:88:E9:8E:CC:12:23:80:67:91:F0:19:4B
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:aa:be:ba:0e:1c:0b:56:d3:50:70:e1:8c:81:7b:7b:73:4b:
50:d0:c5:78:f1:b2:fa:dc:e2:59:ca:7f:5d:0b:dc:0d:21:fe:
8e:5f:b1:b5:6b:b1:b7:4f:7f:c6:34:7c:d3:a3:58:95:55:f8:
b6:c9:88:77:6d:48:14:89:d0:03:9f:7b:97:4f:1a:6b:08:37:
a6:9b:8d:c8:97:9d:ba:55:27:a0:24:fc:65:92:16:ae:f5:1a:
75:e1:3e:83:4a:a4:a6:91:59:96:a6:9b:32:18:e2:a3:67:95:
48:6c:68:eb:e8:25:e9:ac:08:08:2f:07:21:83:33:c3:22:48:
41:7c:a9:69:30:0b:2d:e6:55:f2:1d:9e:07:e1:bd:b8:22:82:
86:5f:2b:06:65:67:3c:17:d4:20:8b:3f:e0:37:dd:12:56:38:
e2:fc:b4:c7:2a:cd:77:01:bc:a8:00:c5:8e:1f:23:a7:55:e0:
c1:31:fc:3e:50:31:2a:59:2b:55:72:f8:d8:88:82:07:ad:8e:
41:19:0c:d7:18:8b:76:53:f5:1a:2b:ae:6d:c0:5d:10:77:02:
6e:2a:e7:40:e1:17:6b:88:84:2e:4d:10:0e:6c:ff:b2:9e:00:
39:c3:e6:e8:2e:74:26:cd:60:fd:19:8f:8e:f9:ae:13:46:db:
a2:3b:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:13:33 2026 by rpki-client