Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: O3SLmvKTqNFquMj9A8I0TTpk5FNvYIMT3zokbT+JXAo=
Subject key identifier: A3:4B:E3:F0:0D:B7:97:78:E6:A9:B0:30:58:70:7E:3F:31:6C:00:65
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 019D39AE7A4F5F2F757E10B5F8E09585F1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 13:00:29 +0000
Manifest this update: Sun 29 Mar 2026 13:00:29 +0000
Manifest next update: Mon 30 Mar 2026 13:00:29 +0000
Files and hashes: 1: 5_doYFv7yc7pk0TQwTiDRsnYDyk.roa (hash: roZ57WpPuuxZ3dcx0tH7+LdHwoSOY302cY6k9E5x4os=)
2: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: ZMxPjzWW/71G8yy99FM3i8SRv7msGmnoqkGVQJfvxzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:7a:4f:5f:2f:75:7e:10:b5:f8:e0:95:85:f1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Mar 29 13:00:29 2026 GMT
Not After : Mar 30 13:00:29 2026 GMT
Subject: CN=a34be3f00db79778e6a9b03058707e3f316c0065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:26:53:74:a9:5e:e4:81:f0:55:70:2c:1f:
31:74:63:9c:ae:d7:e0:1d:1f:79:89:5a:d5:b2:aa:
20:70:da:47:5a:dd:87:ec:01:1f:3d:a3:61:8b:42:
24:aa:21:e5:88:70:aa:cd:88:45:81:01:81:b1:43:
c1:17:47:9e:a4:28:fd:23:04:d9:57:4a:28:dc:ed:
dd:67:c5:38:bd:b4:bd:ba:1d:db:d2:32:16:dd:b8:
22:bc:7e:15:ff:41:ba:14:f8:d6:3e:29:d6:a0:f9:
0c:5b:fd:e0:62:cd:4c:3d:e8:e3:bd:3f:a7:72:2b:
4d:d8:87:7b:c7:6b:fa:03:e2:3a:67:d0:f7:14:6e:
e5:47:4f:a9:c6:16:34:eb:2f:aa:a9:f3:8d:8f:8c:
5c:d4:7d:8f:c4:ef:83:8a:09:2f:4e:51:03:85:1f:
94:c4:d4:ec:24:69:d2:2f:a4:4f:6f:05:bc:71:dc:
12:ea:74:9c:a6:1e:bd:c7:c3:58:70:79:4a:e5:a2:
1f:27:4a:24:d6:01:e3:38:4c:73:97:3b:55:78:66:
a9:7b:8d:d9:c1:02:c3:0f:5a:53:f4:57:24:1f:17:
02:41:96:85:e7:84:a7:51:a6:a1:55:d9:27:26:7e:
cf:6e:cd:87:16:76:5e:fc:9d:81:4e:4c:68:63:53:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4B:E3:F0:0D:B7:97:78:E6:A9:B0:30:58:70:7E:3F:31:6C:00:65
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f3:81:50:36:79:68:61:f7:34:3f:08:59:6d:a9:52:61:a6:
2f:17:5b:5f:4d:95:90:a0:c2:6b:cd:14:8a:cc:c8:07:42:f9:
6c:75:1a:c7:0e:39:0b:3d:68:6c:71:38:b3:2c:7b:98:e2:c1:
77:ad:83:5c:a5:e6:64:aa:78:2e:c9:8c:63:98:a9:d0:83:fe:
75:c9:0a:3c:f5:d5:08:a8:ac:4c:6e:68:af:04:53:3e:4d:61:
8f:f1:02:c6:7d:b4:39:f9:0a:58:f6:8f:93:31:c0:6c:fa:76:
9d:c4:e4:78:81:92:74:ee:3e:4c:a1:46:c4:8d:04:bb:bf:42:
bb:c7:fe:f3:57:cc:08:3b:ba:58:55:c1:b5:a4:7c:02:c8:e7:
94:4d:f6:6f:ad:54:4e:13:92:80:c9:37:a9:c0:52:a9:a2:6e:
70:5f:be:3c:3b:f6:0a:70:f5:de:18:ab:62:31:4d:1f:90:e5:
e8:84:be:f3:14:93:37:4e:eb:84:6e:9b:83:20:2d:ad:5d:72:
fb:ff:93:16:b3:87:f2:63:86:e9:fb:55:a3:f6:d7:85:a9:be:
99:a1:a3:e6:3c:66:3f:ce:83:ba:a2:87:9f:2d:da:07:4e:76:
b7:db:82:50:26:0f:69:35:4d:cd:18:da:ba:8f:96:1c:da:95:
84:f5:89:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:50 2026 by rpki-client