
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: b/tWCIqXrAFjnFmREplQJMCrnuVw6AoIzro0jZlivtw=
Subject key identifier: A2:EB:A5:A9:9E:8A:B5:79:C1:56:AE:0C:B6:35:91:1F:72:D9:66:EA
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 01A0024B1840F5FC4FF009402B9D2E372094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 22:01:10 +0000
Manifest this update: Fri 14 Aug 2026 22:01:10 +0000
Manifest next update: Sat 15 Aug 2026 22:01:10 +0000
Files and hashes: 1: 5_doYFv7yc7pk0TQwTiDRsnYDyk.roa (hash: roZ57WpPuuxZ3dcx0tH7+LdHwoSOY302cY6k9E5x4os=)
2: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: FE2CyIeYG+Eo5mMZtpqQEK2S6j+0evcghOksNw7DpjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:18:40:f5:fc:4f:f0:09:40:2b:9d:2e:37:20:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Aug 14 22:01:10 2026 GMT
Not After : Aug 15 22:01:10 2026 GMT
Subject: CN=a2eba5a99e8ab579c156ae0cb635911f72d966ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:fe:d4:08:83:9f:3c:27:53:5c:19:f9:33:
11:a0:37:22:0e:04:b8:5a:14:15:93:b1:f3:ef:97:
63:fb:7e:36:76:fe:52:5e:5c:33:df:3f:89:b2:bb:
c8:f8:88:c8:c5:85:b0:e0:eb:91:8c:58:a9:41:d4:
00:f6:ed:2f:65:e4:b2:c9:85:a5:14:8c:c4:ae:c2:
de:33:4d:2a:ec:04:1a:66:7c:3d:3b:24:a5:24:6f:
2f:1e:1f:73:c9:3d:73:89:a8:71:ee:20:95:2e:4d:
d5:83:f4:41:9f:03:85:ff:f2:bb:ea:22:1c:a9:c0:
3b:e8:6b:94:06:de:67:28:0a:15:23:bf:2b:c5:dd:
e7:7c:25:b4:a9:7f:67:7c:13:c2:77:8a:ab:30:95:
c6:af:b6:21:e9:8b:f8:3c:3e:07:cb:a1:d4:9e:b0:
4f:73:cf:ed:7b:a8:08:32:4d:4d:b3:34:8d:f9:9e:
a0:2c:f2:0c:ef:11:6f:6f:d1:bb:41:f3:69:0c:38:
6a:7e:13:8a:4d:05:96:7d:c3:ce:16:16:68:d9:81:
9f:28:18:61:eb:23:89:96:12:a9:33:f7:b0:c1:8b:
53:3e:63:a6:b3:f0:00:be:c8:1f:eb:44:a1:82:0f:
89:b0:c2:f6:a9:73:24:46:d9:15:fd:30:08:27:9e:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:A5:A9:9E:8A:B5:79:C1:56:AE:0C:B6:35:91:1F:72:D9:66:EA
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7a:52:7b:b6:91:4e:48:5a:7d:26:99:9d:be:00:f7:30:e0:
5b:24:61:2e:69:bc:e3:8d:da:b2:da:15:fd:c4:3d:b9:72:6b:
02:b0:88:1b:72:45:eb:0d:89:a2:c5:c2:d5:27:7f:84:68:30:
32:75:37:c6:7f:37:65:0e:38:84:60:0a:72:17:75:9a:8f:be:
d4:57:e5:a5:14:46:dc:60:b1:20:52:89:55:8a:a2:f7:dd:79:
45:f8:95:95:2a:06:db:58:d6:30:17:b4:6d:ff:4e:a8:6f:54:
17:33:0a:cc:84:fa:d1:71:fb:e1:20:45:64:05:9c:0f:5f:a7:
b7:56:d4:e2:e3:45:06:6c:89:a7:a3:78:28:88:61:8a:4f:28:
23:8b:07:2b:b1:b3:1e:7b:8d:dc:16:df:eb:c5:2b:e7:21:6b:
15:df:00:36:a7:79:1a:a9:ab:77:11:ad:e9:e3:ee:0c:10:c0:
50:d0:54:62:91:92:5a:53:1e:78:d4:9f:b6:0f:29:d6:2e:87:
25:62:63:9e:2b:05:40:9c:a6:49:74:a7:d8:fd:06:e5:1a:22:
fc:0a:40:ff:1a:5b:ce:31:62:5f:a3:90:3e:9b:b0:1d:db:6e:
24:9e:a8:4f:10:b9:bf:a1:2c:a6:a2:1c:1d:06:57:dc:29:3f:
3e:15:ee:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:43:55 2026 by rpki-client