
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier: dm/rMsY3qlYSHamglm9YfriHLdsa0N/e0RHQpZGChdw=
Subject key identifier: 33:63:2F:48:6B:FB:B9:46:FE:CF:3E:AE:55:21:69:EC:BF:25:11:D2
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial: 01A08CB1F574AE0C1D88B427934EC6471CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number: 09F5
Signing time: Thu 10 Sep 2026 19:01:07 +0000
Manifest this update: Thu 10 Sep 2026 19:01:07 +0000
Manifest next update: Fri 11 Sep 2026 19:01:07 +0000
Files and hashes: 1: EK0F93TMdb3mWGdibqrR_m6Xz-I.roa (hash: mx33ExzlOw54fpOREl279Ht7q+DRDKueDOMyUR0ZqEk=)
2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: IP8LREogyl6GdKYQwkvwPxwo95rxm96ShsMcHBmGYs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:f5:74:ae:0c:1d:88:b4:27:93:4e:c6:47:1c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
Validity
Not Before: Sep 10 19:01:07 2026 GMT
Not After : Sep 11 19:01:07 2026 GMT
Subject: CN=33632f486bfbb946fecf3eae552169ecbf2511d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:77:2b:86:d8:e7:49:e5:ed:7c:e1:98:ac:
2b:46:3c:30:5c:ba:48:1c:0e:dc:8f:7d:95:60:8d:
82:ba:61:2d:2e:18:b2:ae:b6:a2:90:cb:57:6a:13:
b5:54:bf:d2:55:8e:dd:89:b4:80:8b:1d:42:af:4f:
11:43:34:4d:ce:5e:96:9e:74:e6:9e:ec:8a:12:e7:
2d:a5:d6:e1:05:7f:47:af:a4:ed:b5:f0:99:7e:41:
49:41:4f:92:fa:0e:4d:99:22:ee:fe:95:45:c7:19:
7b:64:aa:63:a5:bb:7b:2d:58:c1:14:49:b7:77:58:
29:c1:a2:df:9c:dd:00:78:a0:16:fa:19:6a:a3:11:
3b:d2:cd:9f:cc:fc:c5:88:62:3e:10:26:c4:41:cb:
00:65:7b:e8:f5:ea:ba:43:c2:bb:2a:e8:24:b9:44:
9a:c1:15:84:e3:b8:cb:33:4c:5c:38:f6:46:ea:b8:
81:8b:25:8c:00:37:42:1f:ae:61:5d:83:f1:d1:1b:
8f:fc:d5:32:4e:d0:42:c9:ac:18:f0:e7:ce:cc:bd:
44:07:90:75:f9:37:fb:3c:3c:fb:32:d9:49:f0:72:
dc:29:33:29:d8:da:31:86:70:42:62:d1:eb:39:ef:
84:7e:5b:28:b3:6f:52:5b:00:9c:10:30:81:c1:d8:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:2F:48:6B:FB:B9:46:FE:CF:3E:AE:55:21:69:EC:BF:25:11:D2
X509v3 Authority Key Identifier:
keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:61:c8:76:9b:fc:8d:8e:4b:89:fa:00:f5:c0:f2:75:16:63:
26:98:68:ee:0c:83:6f:5e:3c:a9:78:d9:11:44:a1:43:6b:67:
5f:7f:05:56:62:8e:46:98:d0:c7:21:3c:e7:31:1e:c3:53:42:
cd:97:f7:f8:0d:01:05:c0:2c:09:36:18:fc:2f:87:5c:07:26:
4f:77:76:fc:4d:48:af:5b:77:6c:3c:cf:06:87:e8:03:7b:08:
da:67:06:e5:a0:5e:4e:b4:ad:6c:5f:e9:1e:6d:c4:05:4c:83:
3e:20:40:99:32:06:e2:6a:e6:3f:bd:0d:4e:16:06:b1:8d:bd:
cd:15:ef:44:73:30:80:98:58:84:0f:e6:22:05:a9:b0:23:8e:
b7:b3:5c:04:c3:a9:ed:46:11:0e:6c:06:2e:2a:d2:8c:c8:fb:
b0:da:94:4f:ef:93:3e:1a:e1:96:3b:e8:7a:de:8d:52:e9:8e:
8d:27:7e:25:10:8f:09:24:19:c4:c8:1a:4a:8d:86:1b:27:7a:
93:6c:31:e7:03:01:7b:6e:a3:7b:43:eb:d6:40:14:c3:3a:95:
5f:46:0f:1d:e2:10:22:89:40:c5:68:77:a1:0d:f2:35:c5:a9:
70:b4:ec:f1:b6:9b:c7:39:db:65:a1:a4:62:86:f5:a9:cb:62:
d9:b0:4b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:24:25 2026 by rpki-client