Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: S8+jnuO/aOLq4FojxoSahKAZyhir76P6uJk3GO3uPsE=
Subject key identifier: 0B:A5:E4:88:8C:F5:AD:71:DF:B2:4F:34:35:87:1E:75:07:85:CF:26
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 01A026213F0BE8DF48D7125E19C28D9D2BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 0913
Signing time: Fri 21 Aug 2026 21:01:48 +0000
Manifest this update: Fri 21 Aug 2026 21:01:48 +0000
Manifest next update: Sat 22 Aug 2026 21:01:48 +0000
Files and hashes: 1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: sHoGE61AUcyWfj3cXEPn/1KoYJiu1ATUNOXB1/2YXZk=)
3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:21:3f:0b:e8:df:48:d7:12:5e:19:c2:8d:9d:2b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Aug 21 21:01:48 2026 GMT
Not After : Aug 22 21:01:48 2026 GMT
Subject: CN=0ba5e4888cf5ad71dfb24f3435871e750785cf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:97:37:a3:d2:53:99:65:09:e7:f3:43:c1:
b4:56:36:b0:94:a1:44:9c:75:94:c5:14:b7:a7:4b:
70:bc:76:2a:d5:80:07:ec:ec:29:16:31:3a:e7:21:
86:3f:57:51:8e:01:1b:a6:0f:36:e8:22:f1:26:62:
8b:46:0b:e1:75:a5:00:c9:16:d6:25:65:42:7b:ef:
10:1e:9a:32:22:86:ff:22:ad:b8:b9:77:a0:c5:6c:
cc:4c:dd:de:7e:67:91:c7:de:f6:1e:c2:ba:1f:36:
cb:2c:f7:12:40:40:f2:27:06:a6:d4:31:50:a5:f3:
2c:b0:a0:18:8f:4e:ff:5c:0e:28:4a:47:cd:c1:f8:
79:67:f7:56:fd:20:19:ca:59:2a:6d:6d:51:e4:6f:
f9:6e:10:56:4f:2d:bc:dd:8f:a7:7a:1a:b8:65:07:
b1:a6:5f:3d:ee:15:1f:d7:e6:67:c1:5d:10:06:4e:
ca:99:2b:a0:04:75:e1:aa:88:77:29:79:df:ca:d7:
ad:03:de:4a:33:23:3b:df:e0:c4:2b:80:8e:7c:74:
5e:7b:f8:53:03:f8:a0:98:9d:9e:14:c8:88:01:68:
09:13:2d:81:40:0e:bc:e1:20:cc:31:a7:e6:d9:ff:
c3:ac:2f:a6:8c:32:97:2d:0d:52:8a:3a:9e:b0:64:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A5:E4:88:8C:F5:AD:71:DF:B2:4F:34:35:87:1E:75:07:85:CF:26
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:75:1c:be:13:4e:33:2a:35:5f:e2:12:36:59:b3:10:b9:8b:
46:ba:7b:f0:dc:ca:d1:ff:97:52:50:aa:75:7e:30:ed:d0:bf:
23:43:17:e8:5b:5c:2a:11:a4:06:be:22:58:2d:43:8b:f5:ca:
12:86:95:99:f2:4a:d9:e6:18:25:a5:64:10:52:11:9a:ad:cb:
3d:07:14:2b:41:1e:29:74:b0:56:bd:34:4f:1c:24:68:0c:24:
43:06:d8:2e:6e:e5:d8:ac:6a:f4:99:89:6e:8d:30:4a:81:a0:
19:80:22:80:ce:a4:2f:fe:0a:70:44:06:a2:d0:a5:30:1d:6c:
9c:a0:99:e2:48:15:32:25:40:79:93:76:b8:04:2a:d6:b2:03:
e5:51:69:e7:6d:95:0a:6a:3b:f0:a4:45:54:47:6f:b0:11:11:
29:c0:46:37:88:69:01:23:1e:a3:e0:3d:9b:25:37:b0:0d:60:
82:3f:aa:37:a5:87:25:00:3f:80:fd:98:55:01:70:4b:56:48:
85:93:f6:14:a8:3c:d0:b5:3b:b0:e1:4d:d9:63:77:57:65:75:
52:e8:ec:53:1b:ab:1f:25:7c:cb:aa:f5:fd:09:33:2f:a5:f5:
f4:73:dd:25:5b:8d:7b:5c:db:90:61:e2:d9:ac:a6:37:38:8a:
8e:b4:09:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:56:56 2026 by rpki-client