Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: brm0tAM3n13uLaUE9gHjghuE+9/HTaGTHfTPX1t13no=
Subject key identifier: CC:AA:64:7C:4C:D8:20:08:A7:A7:28:CB:AF:E1:C4:25:89:6D:71:4A
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 01A029212DB90C5095E936A6458EB511664B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 0D43
Signing time: Sat 22 Aug 2026 11:00:35 +0000
Manifest this update: Sat 22 Aug 2026 11:00:35 +0000
Manifest next update: Sun 23 Aug 2026 11:00:35 +0000
Files and hashes: 1: 1_qKx7XK-VslkQaQcY5wLcf-kY4.roa (hash: aIIfDPGVCndIRJ9cOc5IQ8o5NAq5xG4vSe+WEowhC+8=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: VReDI0UXRgk/pIzywry7g5TQ5gJ4e/J28Mqap8N/QIA=)
3: v1Q5deDRNaYN2rkW1eCtdP2QCKw.roa (hash: h5DLp92XQ3AvM1H/BlIZUWuG5teJsgAD0mDg6kM2v3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:21:2d:b9:0c:50:95:e9:36:a6:45:8e:b5:11:66:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Aug 22 11:00:35 2026 GMT
Not After : Aug 23 11:00:35 2026 GMT
Subject: CN=ccaa647c4cd82008a7a728cbafe1c425896d714a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:08:f7:cc:53:68:23:85:a3:d9:ad:85:b4:
eb:18:99:78:7a:15:d0:d4:54:a8:ec:50:5a:53:36:
fb:e5:f1:09:65:ed:f7:8b:f5:43:17:f0:67:d7:75:
7b:86:54:79:b5:d9:57:a8:2e:57:06:51:aa:b4:28:
3e:6e:e7:90:77:9e:2a:13:95:a7:87:f3:5b:06:fe:
85:09:b2:9c:9f:11:21:b6:10:19:ab:1a:b7:4d:b6:
49:02:7a:80:24:f1:6c:1d:96:f9:d8:73:07:93:ac:
94:43:19:f4:ad:18:d6:14:38:fa:26:93:f2:b3:b6:
21:44:fb:00:da:11:06:03:ae:a0:75:89:a9:86:5f:
40:d9:0a:d9:68:6e:6c:c7:62:f8:0c:fd:f0:58:03:
7e:b5:8a:3a:bc:34:51:4f:d4:70:a3:78:8b:ca:e7:
64:be:66:60:6e:9b:e6:c3:2d:cc:aa:17:26:51:c0:
83:f6:17:65:ab:c3:aa:66:b9:dc:ba:0a:02:fb:fa:
0a:fa:86:15:c9:6c:36:42:f2:a4:bf:4b:91:a1:ae:
d7:95:e1:d5:14:01:89:95:e5:51:1c:dd:e7:72:0d:
94:b6:4a:2b:cd:30:44:f3:3e:1b:5b:0f:52:51:12:
91:42:de:2a:4d:85:b8:45:e5:bb:97:88:f9:c7:1e:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AA:64:7C:4C:D8:20:08:A7:A7:28:CB:AF:E1:C4:25:89:6D:71:4A
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2c:73:a7:3c:62:53:e6:0b:ad:db:12:d5:f8:ee:28:50:9e:
ed:4c:d9:46:4f:e3:21:84:16:18:18:4f:0e:a7:74:9b:9a:1e:
8e:e9:cd:aa:d9:76:10:fc:52:a7:01:c6:5d:d2:76:09:61:0f:
8a:e3:1e:f4:f1:39:cc:c9:4e:0a:d2:2d:a4:ae:2a:09:da:13:
ab:04:3b:4f:45:33:d5:0d:43:ad:01:39:22:f4:d3:3f:97:92:
40:cc:0e:ad:61:1c:79:46:bd:71:41:09:dc:6b:9f:fd:d3:21:
a5:61:9a:2d:ca:15:dc:27:0f:87:f9:11:90:0e:98:35:7a:94:
56:c3:7b:b4:5f:d9:c2:b5:d2:b6:ca:29:8a:0d:28:e1:6c:db:
39:72:27:a4:fc:05:a9:2f:96:af:e1:85:8c:41:64:18:0b:3e:
02:f3:a1:ad:ee:c8:96:0c:f4:0b:4e:cf:bb:14:36:99:6f:99:
39:1e:3a:95:8a:14:7d:d3:b0:e3:45:b8:4f:ec:dd:b6:ad:bb:
3c:52:97:e6:ca:e3:ec:49:50:67:3c:c9:a3:33:02:d2:74:2f:
a5:2c:60:9b:41:95:33:21:86:6d:08:23:be:02:a7:a1:17:0e:
0e:7d:99:80:9f:46:eb:df:37:d0:af:90:91:b0:54:5e:53:d1:
dc:50:37:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaApIS25DFCV6TamRY61EWZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmYyZmZlZGEzODFlNTQ4MThkZjA3MDUyY2Y2N2UyMjI1
MTVmODkwHhcNMjYwODIyMTEwMDM1WhcNMjYwODIzMTEwMDM1WjAzMTEwLwYDVQQD
EyhjY2FhNjQ3YzRjZDgyMDA4YTdhNzI4Y2JhZmUxYzQyNTg5NmQ3MTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzwI98xTaCOFo9mthbTrGJl4ehXQ
1FSo7FBaUzb75fEJZe33i/VDF/Bn13V7hlR5tdlXqC5XBlGqtCg+bueQd54qE5Wn
h/NbBv6FCbKcnxEhthAZqxq3TbZJAnqAJPFsHZb52HMHk6yUQxn0rRjWFDj6JpPy
s7YhRPsA2hEGA66gdYmphl9A2QrZaG5sx2L4DP3wWAN+tYo6vDRRT9Rwo3iLyudk
vmZgbpvmwy3MqhcmUcCD9hdlq8OqZrncugoC+/oK+oYVyWw2QvKkv0uRoa7XleHV
FAGJleVRHN3ncg2UtkorzTBE8z4bWw9SURKRQt4qTYW4ReW7l4j5xx6jywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyqZHxM2CAIp6coy6/hxCWJbXFKMB8GA1UdIwQY
MBaAFEe/L/7aOB5UgY3wcFLPZ+IiUV+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEt
MGJkMDk1ZGE3OGVmLzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEtMGJkMDk1ZGE3OGVm
LzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyxzpzxi
U+YLrdsS1fjuKFCe7UzZRk/jIYQWGBhPDqd0m5oejunNqtl2EPxSpwHGXdJ2CWEP
iuMe9PE5zMlOCtItpK4qCdoTqwQ7T0Uz1Q1DrQE5IvTTP5eSQMwOrWEceUa9cUEJ
3Guf/dMhpWGaLcoV3CcPh/kRkA6YNXqUVsN7tF/ZwrXStsopig0o4WzbOXInpPwF
qS+Wr+GFjEFkGAs+AvOhre7Ilgz0C07PuxQ2mW+ZOR46lYoUfdOw40W4T+zdtq27
PFKX5srj7ElQZzzJozMC0nQvpSxgm0GVMyGGbQgjvgKnoRcODn2ZgJ9G69830K+Q
kbBUXlPR3FA3og==
-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:08 2026 by rpki-client