Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: oAvXtR3WH/3GycUjy9YpduzO3hADXTQkvXPJuHDyf2I=
Subject key identifier: 91:5F:CA:B4:DD:43:BF:FE:E3:49:19:93:47:4A:A0:58:52:EC:A2:21
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 019E52C7AB296751DAAAB67DA04A17FABD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 0821
Signing time: Sat 23 May 2026 03:01:17 +0000
Manifest this update: Sat 23 May 2026 03:01:17 +0000
Manifest next update: Sun 24 May 2026 03:01:17 +0000
Files and hashes: 1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: de+A26QpSDFdN7kZXKnMqq4W6ER4unLldt4di0+vM+k=)
3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 21:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:52:c7:ab:29:67:51:da:aa:b6:7d:a0:4a:17:fa:bd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: May 23 03:01:17 2026 GMT
Not After : May 24 03:01:17 2026 GMT
Subject: CN=915fcab4dd43bffee3491993474aa05852eca221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:25:71:87:77:a9:7d:6f:68:26:77:f1:22:
dd:5c:e0:54:65:62:e8:bd:2e:06:90:fd:a9:3a:b7:
1a:ec:1b:98:5c:1a:40:dc:ef:59:d5:59:a1:66:f5:
8e:8e:13:2c:03:c0:98:33:e6:79:38:d4:5f:76:13:
9a:64:0e:fb:3a:63:69:3e:c3:fb:f0:bb:21:c6:ab:
d4:f3:7e:9f:d7:bc:17:58:32:86:83:67:16:93:e4:
fa:12:ec:5c:02:0f:62:66:d5:60:d9:06:8c:94:85:
c3:f6:ba:39:de:11:28:ec:43:0d:9f:8e:9b:67:52:
e3:32:7d:e2:5a:ab:5b:61:6d:9d:56:9c:c4:20:ec:
0b:da:8d:e8:74:2d:44:78:07:d4:f6:bb:75:80:3c:
e3:70:eb:90:36:ed:cd:a1:ed:25:0f:98:af:65:b7:
b9:e5:f5:8f:cf:a1:be:99:1e:3f:56:74:02:ee:8e:
5a:d6:70:b9:81:33:18:d6:5c:2a:ca:71:84:09:d1:
a4:05:03:c0:39:2a:50:e5:30:26:e7:a0:e2:25:3d:
a2:25:e8:cb:85:7f:0a:bd:08:3f:7c:d6:e8:93:05:
50:a9:2c:96:8a:4b:c6:ac:86:08:f8:b6:fa:ee:35:
8e:65:10:83:51:77:55:2b:ae:47:7a:1b:0f:42:93:
4e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:CA:B4:DD:43:BF:FE:E3:49:19:93:47:4A:A0:58:52:EC:A2:21
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c8:a9:33:91:ac:9e:73:3f:b9:ee:72:15:a5:80:85:d0:d6:
d8:41:ba:9e:e2:34:18:c3:78:77:29:9c:66:6c:f0:7d:23:e2:
1f:c5:f6:7e:1e:9f:e8:84:d4:27:0f:9f:dc:e1:cb:87:a1:bd:
15:a6:f0:b6:5f:7e:0d:d1:25:97:3c:9f:9c:96:81:3d:58:7a:
25:83:19:17:8e:0e:28:3d:3c:0c:29:6d:7f:7d:96:7f:bc:83:
61:d6:d4:88:fc:95:0c:df:9a:b2:79:74:6d:25:a7:f5:52:4c:
70:cd:c7:e7:26:6e:84:49:e1:7f:c6:a7:50:30:61:80:66:e7:
16:d8:e9:52:66:00:bd:9a:e4:22:c9:c3:a6:45:d2:31:f7:73:
e9:6f:f2:96:37:fc:b0:64:32:bf:fc:0e:5e:b4:fb:5f:3a:05:
f6:74:52:85:9d:12:dd:ae:46:cb:fe:67:24:af:0b:da:82:8e:
5c:bf:c2:81:2b:43:44:e2:aa:0b:4a:d7:78:70:f4:ba:d2:8c:
14:8a:08:2f:39:fa:10:de:62:a9:f0:40:e3:19:51:b2:28:91:
7b:3e:92:1b:69:dd:87:6b:cd:8a:51:a2:fa:c0:c7:de:5e:07:
36:70:c9:e8:4b:46:95:51:2c:80:e6:1a:5e:73:1c:b7:5d:9a:
47:3e:71:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:57:12 2026 by rpki-client