Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier: j5JIf0EKNYP6dmrB/IPA/h283tJHT71XS0YeRPGLwEA=
Subject key identifier: 41:61:E6:E2:24:29:4B:E3:E6:01:CC:84:20:0E:44:12:2C:BA:6F:57
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial: 019DCFAC35F1E028A851AE72E42D8A19EBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number: 088A
Signing time: Mon 27 Apr 2026 16:01:02 +0000
Manifest this update: Mon 27 Apr 2026 16:01:02 +0000
Manifest next update: Tue 28 Apr 2026 16:01:02 +0000
Files and hashes: 1: EK0F93TMdb3mWGdibqrR_m6Xz-I.roa (hash: mx33ExzlOw54fpOREl279Ht7q+DRDKueDOMyUR0ZqEk=)
2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: 6u4NzrOcocZEtdk+6Y0g5vjM/ciCJVPspKEYlNTg57I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:35:f1:e0:28:a8:51:ae:72:e4:2d:8a:19:eb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
Validity
Not Before: Apr 27 16:01:02 2026 GMT
Not After : Apr 28 16:01:02 2026 GMT
Subject: CN=4161e6e224294be3e601cc84200e44122cba6f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:35:f5:a2:0a:67:54:ec:69:16:67:e5:71:
73:3b:e5:87:07:b4:fb:cf:74:12:da:32:ba:d3:0c:
8f:ab:43:65:f7:c5:94:bd:b3:ec:e0:12:12:e7:d1:
c7:bd:b1:2b:e7:46:cd:2d:e8:b6:3f:a6:90:0d:eb:
f9:f2:28:3f:24:fd:ed:58:06:9b:23:d5:9c:bc:37:
5d:b6:46:ea:af:d3:5f:42:10:90:e6:85:7a:cc:fa:
fe:89:da:22:3b:e5:2c:93:b2:db:83:df:8c:0b:c5:
c1:da:66:7e:cb:4b:89:3e:37:43:0a:ec:d7:d2:00:
f4:8b:c7:1b:36:fa:7c:12:bb:4c:86:8d:a2:98:c9:
54:96:68:56:a4:9e:bf:2e:e6:b0:99:60:e2:4b:7f:
98:2e:2b:a9:16:a3:9f:77:d4:f5:26:08:7f:42:6b:
a7:97:ec:4f:d4:79:7c:21:65:eb:dc:4d:d0:6e:51:
f0:40:df:da:15:c0:fd:5d:47:46:d7:9b:d6:b9:73:
4d:21:b2:80:69:af:8d:91:05:e5:28:5b:70:76:b8:
1e:3b:85:5a:93:8d:cc:05:a5:dc:c0:6d:66:c6:75:
97:af:5b:46:53:00:57:77:ee:5b:cd:d9:a2:f7:ab:
2b:db:f0:28:36:33:41:99:de:4b:0a:fb:10:57:f0:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:61:E6:E2:24:29:4B:E3:E6:01:CC:84:20:0E:44:12:2C:BA:6F:57
X509v3 Authority Key Identifier:
keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2e:2d:d8:fc:4d:d9:c3:4e:99:00:0f:dd:71:e4:14:84:2c:
d6:c4:51:5f:29:e8:af:35:3e:32:34:4c:ea:d7:8c:2a:56:27:
6f:fe:ca:1a:5d:ef:c0:bb:3a:2e:31:bc:66:a6:21:56:f4:a1:
05:69:7b:4b:59:18:60:e8:d7:af:b3:0b:bb:07:92:72:fc:a7:
69:39:f5:9e:cb:f4:16:d2:9c:b5:ad:ff:60:04:e4:08:72:f2:
ba:3b:5a:ff:82:aa:a4:5a:6c:b8:f4:11:ad:04:6f:f1:b7:da:
dd:b7:19:e4:ad:dd:e3:87:1b:66:a9:a8:5b:32:ed:ea:fd:63:
2e:0d:c6:92:2e:08:95:fd:a8:8c:a4:b3:a8:91:b3:24:3c:64:
98:fd:df:86:07:ea:bb:7b:45:08:43:03:47:6a:0d:82:f0:a2:
2a:ab:7e:50:92:fc:0e:a7:9c:52:1f:e8:72:11:ab:0c:ce:b6:
76:29:40:43:e8:f1:f0:c5:44:cc:90:59:ec:97:13:ee:0f:28:
10:07:e6:ba:e0:87:ef:c5:7c:21:2a:3f:59:1a:25:e3:b1:2b:
1d:a8:fd:91:cf:f2:46:32:5c:7c:a7:76:97:de:5e:ce:71:e8:
17:e7:b5:ca:51:f1:5d:3b:04:10:d5:03:9c:8b:25:05:e0:88:
bb:c2:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:48:02 2026 by rpki-client