Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: aTXkk/XIbEjShztmDihq9fbmrnbuhhOJgfm1/Ha5lec=
Subject key identifier: B1:43:99:E1:38:54:E2:62:D3:9D:28:E8:01:15:03:F0:FD:68:0A:15
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 019F3C74A5697EB2EB9F64D1122D48222C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 089A
Signing time: Tue 07 Jul 2026 12:01:45 +0000
Manifest this update: Tue 07 Jul 2026 12:01:45 +0000
Manifest next update: Wed 08 Jul 2026 12:01:45 +0000
Files and hashes: 1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: EWrspQZ8lviFCPXeNb0X6eVzQkHtHFzHXdnp4xs9FBw=)
3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 12:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:74:a5:69:7e:b2:eb:9f:64:d1:12:2d:48:22:2c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Jul 7 12:01:45 2026 GMT
Not After : Jul 8 12:01:45 2026 GMT
Subject: CN=b14399e13854e262d39d28e8011503f0fd680a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:f5:bb:d5:fe:47:95:9c:9a:b9:ba:c2:2d:
a0:8b:77:86:e4:72:5d:d5:05:c7:f9:74:64:3f:3b:
70:f4:0e:e5:68:06:76:ad:02:26:eb:06:f0:fb:52:
fe:23:27:43:c7:c9:c6:09:d2:69:40:3b:1e:9e:17:
af:ff:77:3d:b5:b0:d4:7c:62:e5:23:11:f3:fb:e5:
cf:b9:a1:cd:8b:67:5b:30:a7:62:a9:73:bf:4d:3e:
35:da:38:80:8b:78:b2:43:95:dd:10:69:70:e1:bf:
19:fe:bf:1c:83:cb:a4:08:1a:b9:4a:19:25:29:22:
4b:d9:7f:ea:f5:21:1f:a4:3e:32:5c:d1:4a:38:fb:
33:34:73:e5:58:74:59:56:06:65:91:68:b0:c9:7d:
1d:93:b9:4f:58:37:13:61:bf:3c:5a:de:b0:1a:57:
1b:2f:0f:5e:67:40:e6:d0:db:5d:62:d7:30:fd:34:
86:df:39:ed:a4:ad:4c:6a:10:65:ee:f2:84:b2:cc:
61:bf:d7:e3:ce:59:4e:ff:12:23:61:3f:64:44:ae:
05:d5:66:86:9c:88:0a:f5:93:1e:19:ca:d3:32:dc:
03:77:13:9a:9f:00:66:3c:67:bc:be:63:73:af:bf:
9c:d7:43:6c:eb:c4:5e:5c:99:3e:e8:27:95:87:0f:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:43:99:E1:38:54:E2:62:D3:9D:28:E8:01:15:03:F0:FD:68:0A:15
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:73:93:2d:b6:d0:bb:bf:0d:82:60:ba:6b:9e:5e:da:fc:1a:
b0:ff:60:48:eb:dc:41:76:0a:2d:4b:73:28:a1:48:a1:0d:a5:
64:8b:01:c4:68:ec:8e:ef:5c:dd:2a:c9:30:08:e7:9d:e7:f3:
e1:b8:60:68:82:80:1b:25:aa:0c:8b:0a:2d:df:8b:ae:20:5a:
92:72:74:e5:5c:8a:06:2a:e0:9c:c7:de:1c:c4:ee:fe:d8:c8:
7e:3f:9e:4e:c8:78:5f:95:07:fb:18:28:88:c4:93:03:2e:1c:
41:a8:15:fb:3c:b2:12:03:6e:dc:fd:33:e5:f5:64:80:5a:fa:
fa:90:25:1d:42:dd:70:7d:d7:d8:06:43:a7:4f:c6:af:cc:39:
a6:1f:72:e6:91:71:25:68:82:ce:83:e5:26:ee:8d:83:59:a9:
0f:47:9b:e9:07:9e:b2:00:5b:52:bd:6b:43:ce:63:bf:8a:85:
56:3b:f2:cc:b9:dc:33:be:2f:13:e2:a8:cb:66:6f:36:32:5a:
81:1a:b5:7d:46:04:4e:5e:07:c1:b6:da:c0:17:d9:31:87:71:
5e:c8:e5:de:64:1c:72:76:3e:ec:73:af:e1:f4:d4:4c:d1:5c:
c1:3d:c1:76:05:d9:85:b2:62:02:ed:7c:d8:35:3e:f2:91:4f:
cf:d1:e4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 16:52:16 2026 by rpki-client