Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier: trXpmvwoa+9VoNXPjqUv4lqQVQJKcH1QwyVWknl4zes=
Subject key identifier: 1A:07:D0:0C:01:7C:74:E3:A9:1A:C8:D6:8A:D1:E0:88:54:5E:3A:AC
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial: 019CE5FFB62FE0D75562E3B856FEDB7D9D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number: 0811
Signing time: Fri 13 Mar 2026 07:01:06 +0000
Manifest this update: Fri 13 Mar 2026 07:01:06 +0000
Manifest next update: Sat 14 Mar 2026 07:01:06 +0000
Files and hashes: 1: EK0F93TMdb3mWGdibqrR_m6Xz-I.roa (hash: mx33ExzlOw54fpOREl279Ht7q+DRDKueDOMyUR0ZqEk=)
2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: wO9LCUIIFkii0criAtA0QEYoogzcHqSyIJnqY4mXESM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:b6:2f:e0:d7:55:62:e3:b8:56:fe:db:7d:9d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
Validity
Not Before: Mar 13 07:01:06 2026 GMT
Not After : Mar 14 07:01:06 2026 GMT
Subject: CN=1a07d00c017c74e3a91ac8d68ad1e088545e3aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:54:62:4f:94:4e:31:79:ec:e9:ae:42:e4:
06:50:f6:98:70:2f:2c:ef:a0:0c:68:21:eb:de:d8:
d9:99:a0:c0:60:a2:18:55:e8:38:6f:7e:fe:c5:fb:
50:bc:eb:a3:c0:05:5c:1b:8b:e9:4b:d7:e3:4e:0b:
b2:59:0d:6e:1a:cd:a3:82:01:ca:fe:e7:61:f2:ee:
b1:ef:4c:64:82:bf:fc:59:6b:d3:f8:9a:49:e7:b1:
0d:87:a0:c8:25:32:61:31:b9:ed:47:52:ea:b4:f9:
15:62:21:bb:da:dd:23:c1:97:f2:35:5b:8f:48:5e:
a0:24:95:ec:56:79:b1:5d:5c:ef:f5:07:06:5a:cf:
59:2b:b0:18:e0:81:c1:2b:9b:d9:d1:42:5b:36:87:
d0:01:6c:a4:bd:ac:4b:b3:58:59:22:01:5d:8f:8d:
e2:5e:cc:63:bd:94:f8:15:97:da:61:f2:68:95:43:
de:f5:0e:de:9e:f5:69:69:07:68:a5:45:17:13:38:
09:e1:50:37:4e:f6:3b:f5:43:fa:83:1f:66:94:04:
24:3c:ed:64:4d:9b:ea:55:a5:09:65:fb:88:0d:54:
4c:94:be:b1:2b:d7:d5:49:83:c3:15:fc:ed:8b:89:
e5:d5:55:7c:55:ae:4e:15:0b:b9:be:ce:01:b8:f3:
00:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:07:D0:0C:01:7C:74:E3:A9:1A:C8:D6:8A:D1:E0:88:54:5E:3A:AC
X509v3 Authority Key Identifier:
keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b3:ac:94:82:6d:34:e3:53:e1:5e:eb:28:b6:57:a0:64:c8:
13:04:7c:fa:e6:09:8f:f4:95:3b:1b:88:e1:13:ac:41:16:0c:
6b:6a:09:14:ed:0d:83:3d:36:85:5a:1d:e6:df:97:bf:68:b3:
86:c7:6e:5e:97:85:18:b4:bd:77:69:eb:b7:b5:ae:49:48:50:
99:8d:9d:08:be:26:22:2c:0e:51:eb:dd:ac:f2:92:43:4c:bb:
f6:d2:7d:e9:0c:49:14:ba:4d:90:61:3c:4d:d5:23:9d:ee:d9:
db:b9:f6:8b:fd:22:ca:47:e1:59:ef:0f:93:e0:0b:e9:e5:30:
35:36:0f:31:8b:81:87:c7:c3:d4:26:e0:07:27:99:c3:29:eb:
2b:75:11:c7:b7:55:b0:d8:88:40:ae:0d:61:bb:a1:f6:5b:03:
06:39:1f:ab:6b:33:05:97:0c:0d:0d:85:f9:6d:40:39:84:10:
62:1f:7b:2c:ec:9e:47:f7:6f:3f:d1:42:f9:6f:2d:a0:65:74:
ff:7c:29:e7:db:b4:76:d1:fc:cf:43:27:1a:38:b6:b0:62:37:
9c:52:9e:8a:dd:f8:a9:84:bc:31:c4:2d:6b:0e:03:36:93:c9:
8d:4e:fe:5f:79:db:64:05:36:ff:f3:1a:db:29:37:f4:f0:b1:
4e:91:2f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:44 2026 by rpki-client