Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: 9kU4c/g6PxXFQpW6Uq9WK60+ZTTYuJ4ATd5fekAMoKk=
Subject key identifier: BB:ED:C4:76:0A:66:2C:6A:5A:F8:2A:EA:61:DC:6F:7C:81:54:45:A0
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 019D37F720212064BA79C018CFD48B64BD1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 0BBD
Signing time: Sun 29 Mar 2026 05:00:35 +0000
Manifest this update: Sun 29 Mar 2026 05:00:35 +0000
Manifest next update: Mon 30 Mar 2026 05:00:35 +0000
Files and hashes: 1: 1_qKx7XK-VslkQaQcY5wLcf-kY4.roa (hash: aIIfDPGVCndIRJ9cOc5IQ8o5NAq5xG4vSe+WEowhC+8=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: 1VKht+kTO6yRite+znm2LYE2d9xm/Htv2QOQGmy+i7Q=)
3: v1Q5deDRNaYN2rkW1eCtdP2QCKw.roa (hash: h5DLp92XQ3AvM1H/BlIZUWuG5teJsgAD0mDg6kM2v3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:20:21:20:64:ba:79:c0:18:cf:d4:8b:64:bd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Mar 29 05:00:35 2026 GMT
Not After : Mar 30 05:00:35 2026 GMT
Subject: CN=bbedc4760a662c6a5af82aea61dc6f7c815445a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:f3:b0:80:64:d5:5a:e2:20:a4:09:36:66:
9e:41:7e:b4:4c:ac:b5:26:a3:c4:81:2b:36:4e:f9:
96:4c:35:d1:05:47:99:76:95:29:6e:ec:cd:a6:e2:
59:19:15:e2:c7:32:fd:ee:c0:73:fd:70:ba:b9:82:
3c:99:27:43:90:d1:59:f6:51:f9:eb:bc:b8:57:8a:
7a:83:da:78:a4:7a:41:54:ed:11:5f:4c:ce:14:f8:
31:2d:df:12:bf:74:ca:a2:cd:fc:b5:78:77:6a:db:
6e:4d:58:91:74:89:c7:01:98:bc:6e:9d:4c:69:31:
99:58:0d:a5:e6:21:51:9c:fa:78:92:97:38:34:f5:
45:ee:86:29:62:07:78:28:c5:1a:7c:79:41:d7:21:
4d:1c:f3:fa:3b:10:11:8d:2f:5a:d5:36:bd:31:e0:
f1:75:53:28:42:25:55:08:89:49:13:57:2b:62:e2:
20:6b:22:60:a1:05:1e:5d:ce:d3:0e:24:85:c8:e6:
a7:97:e8:2f:52:b3:64:9e:0e:2b:85:60:64:1a:40:
01:fa:ec:15:06:f1:bb:81:5c:8f:78:66:05:65:25:
a8:63:56:f2:78:03:16:6d:bd:93:60:c7:4e:33:3b:
ed:83:00:fb:de:68:91:ac:cd:d6:11:f6:15:50:2e:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:ED:C4:76:0A:66:2C:6A:5A:F8:2A:EA:61:DC:6F:7C:81:54:45:A0
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8c:c0:93:4e:a3:f3:f0:c4:79:10:3b:5f:b6:4a:f9:68:9d:
35:0d:2d:9e:4e:65:ce:b1:9f:8d:70:6d:9b:d8:dc:e4:04:52:
56:05:af:65:c8:cc:24:64:52:f6:c8:3e:83:ee:af:a2:8b:8b:
46:51:d3:b0:44:b5:e3:91:04:db:fc:2c:16:b9:1e:b0:b7:db:
a6:4b:fd:85:20:88:4e:ad:8d:f1:ff:6c:12:67:89:5d:84:ca:
26:f0:96:44:50:e6:df:83:87:fd:5b:1b:96:3c:d3:e2:10:9a:
e9:d0:6f:c1:5d:28:10:5d:94:87:33:69:68:7b:30:28:e1:2b:
95:c3:d1:4b:e1:14:7a:80:d2:bd:09:b1:69:31:0d:74:71:23:
7c:37:a8:46:2e:e7:bb:9e:10:72:02:ae:d0:34:63:ab:2c:95:
dc:e3:21:c3:43:d1:e9:f7:9f:64:0e:eb:58:08:1a:50:ba:e0:
da:6c:ec:58:16:5c:0c:c6:47:f1:75:20:36:13:66:02:7d:92:
76:77:5a:fc:49:01:a4:15:aa:7d:33:0e:1e:93:33:bf:49:fb:
67:1a:01:54:46:67:db:29:6b:79:ca:20:b8:3c:ab:7c:d9:58:
98:12:35:22:5f:fb:1b:73:08:b0:96:8e:f0:65:b6:a5:af:75:
1a:8f:fe:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039yAhIGS6ecAYz9SLZL0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmYyZmZlZGEzODFlNTQ4MThkZjA3MDUyY2Y2N2UyMjI1
MTVmODkwHhcNMjYwMzI5MDUwMDM1WhcNMjYwMzMwMDUwMDM1WjAzMTEwLwYDVQQD
EyhiYmVkYzQ3NjBhNjYyYzZhNWFmODJhZWE2MWRjNmY3YzgxNTQ0NWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GfzsIBk1VriIKQJNmaeQX60TKy1
JqPEgSs2TvmWTDXRBUeZdpUpbuzNpuJZGRXixzL97sBz/XC6uYI8mSdDkNFZ9lH5
67y4V4p6g9p4pHpBVO0RX0zOFPgxLd8Sv3TKos38tXh3attuTViRdInHAZi8bp1M
aTGZWA2l5iFRnPp4kpc4NPVF7oYpYgd4KMUafHlB1yFNHPP6OxARjS9a1Ta9MeDx
dVMoQiVVCIlJE1crYuIgayJgoQUeXc7TDiSFyOanl+gvUrNkng4rhWBkGkAB+uwV
BvG7gVyPeGYFZSWoY1byeAMWbb2TYMdOMzvtgwD73miRrM3WEfYVUC7pfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvtxHYKZixqWvgq6mHcb3yBVEWgMB8GA1UdIwQY
MBaAFEe/L/7aOB5UgY3wcFLPZ+IiUV+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEt
MGJkMDk1ZGE3OGVmLzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEtMGJkMDk1ZGE3OGVm
LzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4zAk06j
8/DEeRA7X7ZK+WidNQ0tnk5lzrGfjXBtm9jc5ARSVgWvZcjMJGRS9sg+g+6voouL
RlHTsES145EE2/wsFrkesLfbpkv9hSCITq2N8f9sEmeJXYTKJvCWRFDm34OH/Vsb
ljzT4hCa6dBvwV0oEF2UhzNpaHswKOErlcPRS+EUeoDSvQmxaTENdHEjfDeoRi7n
u54QcgKu0DRjqyyV3OMhw0PR6fefZA7rWAgaULrg2mzsWBZcDMZH8XUgNhNmAn2S
dnda/EkBpBWqfTMOHpMzv0n7ZxoBVEZn2ylrecoguDyrfNlYmBI1Il/7G3MIsJaO
8GW2pa91Go/+8g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:28 2026 by rpki-client