Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: 8hmmTD8aKNUHk3usEBfS7bxnmoqUJPB4KOZ+yQ/bcZg=
Subject key identifier: B2:0B:9B:23:AF:58:9C:6D:1D:3E:BC:08:AD:0E:42:B1:32:CE:92:3E
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 019D38D3336042C6365250F6193C620415DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 078F
Signing time: Sun 29 Mar 2026 09:00:58 +0000
Manifest this update: Sun 29 Mar 2026 09:00:58 +0000
Manifest next update: Mon 30 Mar 2026 09:00:58 +0000
Files and hashes: 1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: o6QFq69CJZzmzZJF/XiC6mMZik9OyolpqOZ3Zmv5cd0=)
3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:33:60:42:c6:36:52:50:f6:19:3c:62:04:15:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Mar 29 09:00:58 2026 GMT
Not After : Mar 30 09:00:58 2026 GMT
Subject: CN=b20b9b23af589c6d1d3ebc08ad0e42b132ce923e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:56:e5:a2:f0:c9:fc:ed:73:26:89:3c:88:
da:de:f5:b6:c1:06:30:d3:08:3b:74:b7:7d:be:8a:
73:3d:26:f1:f1:77:ba:40:da:bd:33:ba:39:77:d7:
30:3e:c6:a5:61:b2:0e:2c:1a:e5:cb:5c:75:67:bc:
55:92:32:87:7c:f4:48:71:f2:ea:fa:4a:81:71:b2:
fa:5a:70:d8:e9:6e:1d:77:7d:8f:1e:20:72:28:d8:
b2:f2:14:aa:b1:04:89:61:92:de:f8:22:55:8a:07:
72:68:64:f6:b9:6c:32:b3:66:e2:9c:d9:cd:7e:98:
2e:29:38:a9:50:e8:b2:4b:b2:e5:37:f5:e2:e7:a2:
59:55:42:e3:d2:ce:e8:d0:4f:69:7e:17:c6:60:26:
a3:93:0d:9e:0f:90:be:a2:a6:cd:be:90:07:e1:09:
b1:d4:05:b9:86:3b:bd:4c:3b:6e:09:d5:7c:a6:8a:
85:fb:58:63:51:78:46:89:8a:1c:71:78:79:70:d4:
4d:97:5c:ce:9e:ba:2b:b1:94:f4:66:c0:43:7a:7e:
63:fe:f0:96:9b:c5:cd:0e:aa:94:34:18:8f:1a:7d:
4e:19:80:18:a6:d4:a1:0f:2a:82:5e:11:7a:f0:f4:
fb:50:fa:b2:f5:42:c7:cc:2d:3c:65:fb:14:a5:a2:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:9B:23:AF:58:9C:6D:1D:3E:BC:08:AD:0E:42:B1:32:CE:92:3E
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:87:34:57:bd:e0:4b:43:50:cf:f6:38:13:d7:b8:60:23:84:
b3:74:92:46:5d:df:11:f7:37:a1:c9:58:75:7f:16:ed:f3:fe:
f1:4a:c8:6e:44:d1:40:3c:22:a7:46:35:fd:ce:cc:37:72:f4:
a5:2c:28:97:ff:f4:23:d3:63:11:0c:bd:3f:6a:ea:c7:33:ff:
b5:33:4b:c0:55:b1:c2:c7:28:53:27:80:a3:b7:8d:e1:00:bd:
a9:6d:a7:61:b1:5c:d0:9d:bb:e4:d1:c9:e9:37:4a:ef:86:c4:
ad:6a:b9:94:3b:43:72:de:29:bc:37:1b:30:12:16:ee:cf:51:
40:29:e1:b8:6b:01:ce:1d:58:1c:b9:0d:44:8e:aa:91:1d:5a:
19:e9:f6:c9:7d:da:48:33:94:22:2c:1d:01:eb:af:e2:58:fe:
12:6b:f7:d7:aa:83:50:c7:9f:d6:3f:a5:cd:3d:f1:74:77:33:
d1:80:41:f4:dc:1f:33:a0:fe:61:e7:2d:af:6e:0a:50:1d:41:
96:b3:a0:9c:1d:49:9f:d7:80:d2:fb:54:b6:e2:c4:a6:e9:09:
12:ec:22:39:0f:d7:b4:b0:ee:51:c6:b4:a3:90:96:76:73:df:
91:6f:6b:73:dc:cb:d9:f1:0f:17:d3:78:5d:ce:11:7c:ca:0e:
40:2b:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:12 2026 by rpki-client