Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: AaabW4/o/OevMDwSVc05rgnmVzGolV66Jukp4ykf33g=
Subject key identifier: 83:BD:3B:A2:BB:5B:6B:E8:EE:57:0E:EC:4D:11:07:EA:20:D5:32:49
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 019E57B6E6BA8C4004942D3E462407DEB14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 0C52
Signing time: Sun 24 May 2026 02:01:04 +0000
Manifest this update: Sun 24 May 2026 02:01:04 +0000
Manifest next update: Mon 25 May 2026 02:01:04 +0000
Files and hashes: 1: 1_qKx7XK-VslkQaQcY5wLcf-kY4.roa (hash: aIIfDPGVCndIRJ9cOc5IQ8o5NAq5xG4vSe+WEowhC+8=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: 50LLgz8T5/r4364V0ednc/qSVFjzUa19PsIJ1o0NUjI=)
3: v1Q5deDRNaYN2rkW1eCtdP2QCKw.roa (hash: h5DLp92XQ3AvM1H/BlIZUWuG5teJsgAD0mDg6kM2v3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:b6:e6:ba:8c:40:04:94:2d:3e:46:24:07:de:b1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: May 24 02:01:04 2026 GMT
Not After : May 25 02:01:04 2026 GMT
Subject: CN=83bd3ba2bb5b6be8ee570eec4d1107ea20d53249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:63:61:5e:ba:75:7a:89:dc:26:e8:94:1b:
3c:4b:5b:68:b0:75:07:e9:8c:ac:c1:bf:bd:82:1a:
08:31:c5:ff:f1:5b:94:0e:c9:81:3b:2c:39:2d:50:
70:72:75:08:76:f7:55:9f:78:bb:bc:8a:cb:c3:bd:
fd:1b:59:c3:aa:c9:70:32:90:f5:9b:d2:a1:52:83:
39:68:1b:82:09:74:f6:ee:90:0f:bf:57:84:cc:89:
4e:d2:28:bc:0d:16:0c:ba:09:d2:d0:97:db:3c:32:
3b:45:7b:d4:2f:e0:05:28:7b:dc:6b:d5:8e:03:61:
3f:57:9e:e0:64:37:e2:64:35:9e:6f:aa:bf:9c:cb:
a9:7a:10:ae:81:96:a4:dd:6f:39:1c:ff:19:99:df:
f3:92:cd:fe:2d:12:f3:c9:ce:97:14:70:1c:8f:dd:
06:d2:c2:32:76:ed:30:d1:ee:02:a4:7b:df:8e:86:
6c:8d:ea:7d:6e:ea:2d:f1:68:97:24:73:a9:10:10:
a9:7c:77:53:80:f7:f6:44:5f:bc:74:4a:c1:2f:3d:
b0:be:9a:83:03:79:79:17:8a:80:3d:ac:fc:ba:54:
14:4a:96:35:bd:64:17:32:8d:b4:2f:29:15:1e:0d:
f3:53:f3:52:a4:75:7f:de:3b:0d:60:08:3f:60:5d:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BD:3B:A2:BB:5B:6B:E8:EE:57:0E:EC:4D:11:07:EA:20:D5:32:49
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a0:60:b8:0a:d4:cb:f5:cf:e1:de:36:f2:e3:f2:b4:43:f2:
94:05:78:e3:60:da:f1:26:cb:f3:0a:8a:80:0b:ed:0c:e4:eb:
99:9e:8a:ba:f6:d5:0b:77:a7:47:95:de:22:a9:6d:b6:10:f9:
0e:b6:00:f8:58:ea:85:f0:aa:78:25:c0:d4:f8:a6:0e:7b:b6:
4f:3a:2d:e2:6d:e2:d2:f7:c3:11:56:f8:01:1d:ec:2c:05:58:
9d:28:ed:f9:a9:05:e9:87:5c:a4:0c:0c:98:79:43:9c:cd:25:
30:71:f2:ed:b8:a8:f7:a0:0d:9a:05:42:5e:2d:93:a5:53:9b:
bb:d0:d7:ae:44:1c:47:17:93:77:fe:c5:78:dc:bd:da:73:af:
86:8e:34:4a:4d:a7:c2:a4:85:46:7d:b5:12:3d:d8:06:d0:f1:
ac:83:85:83:46:ed:c5:5a:b8:cb:5c:e6:60:84:98:5f:7e:97:
6c:b7:64:21:e0:9b:89:a9:29:4b:26:1b:29:5a:98:93:20:fb:
55:28:a3:b6:aa:55:e8:c8:29:a3:4c:e7:df:2d:84:7f:b8:d9:
a4:60:a5:fa:1a:22:9c:3c:13:f3:3f:64:85:8a:09:5c:22:1c:
fd:4d:5a:d1:09:a0:3a:aa:2e:a4:8b:d5:ee:57:0e:a6:d9:56:
f9:9d:bd:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5Xtua6jEAElC0+RiQH3rFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmYyZmZlZGEzODFlNTQ4MThkZjA3MDUyY2Y2N2UyMjI1
MTVmODkwHhcNMjYwNTI0MDIwMTA0WhcNMjYwNTI1MDIwMTA0WjAzMTEwLwYDVQQD
Eyg4M2JkM2JhMmJiNWI2YmU4ZWU1NzBlZWM0ZDExMDdlYTIwZDUzMjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPBjYV66dXqJ3CbolBs8S1tosHUH
6Yyswb+9ghoIMcX/8VuUDsmBOyw5LVBwcnUIdvdVn3i7vIrLw739G1nDqslwMpD1
m9KhUoM5aBuCCXT27pAPv1eEzIlO0ii8DRYMugnS0JfbPDI7RXvUL+AFKHvca9WO
A2E/V57gZDfiZDWeb6q/nMupehCugZak3W85HP8Zmd/zks3+LRLzyc6XFHAcj90G
0sIydu0w0e4CpHvfjoZsjep9buot8WiXJHOpEBCpfHdTgPf2RF+8dErBLz2wvpqD
A3l5F4qAPaz8ulQUSpY1vWQXMo20LykVHg3zU/NSpHV/3jsNYAg/YF36PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIO9O6K7W2vo7lcO7E0RB+og1TJJMB8GA1UdIwQY
MBaAFEe/L/7aOB5UgY3wcFLPZ+IiUV+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEt
MGJkMDk1ZGE3OGVmLzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEtMGJkMDk1ZGE3OGVm
LzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6BguArU
y/XP4d428uPytEPylAV442Da8SbL8wqKgAvtDOTrmZ6KuvbVC3enR5XeIqltthD5
DrYA+FjqhfCqeCXA1PimDnu2Tzot4m3i0vfDEVb4AR3sLAVYnSjt+akF6YdcpAwM
mHlDnM0lMHHy7bio96ANmgVCXi2TpVObu9DXrkQcRxeTd/7FeNy92nOvho40Sk2n
wqSFRn21Ej3YBtDxrIOFg0btxVq4y1zmYISYX36XbLdkIeCbiakpSyYbKVqYkyD7
VSijtqpV6Mgpo0zn3y2Ef7jZpGCl+hoinDwT8z9khYoJXCIc/U1a0QmgOqoupIvV
7lcOptlW+Z29XA==
-----END CERTIFICATE-----
Generated at Sun May 24 04:37:54 2026 by rpki-client