Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier: ZNgLOx2VM7nJgNTgkf8Df9aIo1Kg6fvGHUo/UFM+yyk=
Subject key identifier: DC:4D:5A:4C:9E:BA:29:0B:66:21:7A:92:C5:E1:ED:02:20:86:5B:8F
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 01A13F025F6057AC0C44D5EBFAF5ED33C16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 10:01:22 +0000
Manifest this update: Thu 15 Oct 2026 10:01:22 +0000
Manifest next update: Fri 16 Oct 2026 10:01:22 +0000
Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: PU6bezsFhocSki2QkFg8dL+uFgenQZDCSfzyZnGv3Ro=)
2: CshAZZODRLNLmNGlI2avtLyw1y8.roa (hash: Hf1RE2bw+HGP7b/6j+X1+6eXzCajo5UkBDMdWtNUDgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:5f:60:57:ac:0c:44:d5:eb:fa:f5:ed:33:c1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Oct 15 10:01:22 2026 GMT
Not After : Oct 16 10:01:22 2026 GMT
Subject: CN=dc4d5a4c9eba290b66217a92c5e1ed0220865b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bb:44:4f:54:34:31:62:06:ea:05:d4:9e:54:
3d:4e:a5:1b:2e:bb:48:ac:ef:c2:be:03:52:e0:c2:
5e:56:61:a3:93:8d:a1:ff:67:18:fe:74:50:61:a1:
ee:7a:03:92:17:00:a8:d7:23:6f:93:e4:9c:89:d5:
ff:c7:3c:1a:b4:50:0a:57:19:a5:fc:f4:3a:71:41:
fc:12:7b:d0:99:76:a6:04:aa:16:c5:b9:d6:d2:bd:
a6:19:c2:6f:19:e5:39:26:57:a9:37:46:9c:f0:63:
e4:a5:38:70:a8:10:a6:5f:4b:28:fd:49:97:00:88:
11:31:e3:a3:66:85:7a:97:33:dd:d9:d0:4e:6c:62:
d4:9f:be:d5:55:94:b4:dd:ef:a4:31:04:7c:80:57:
62:f4:0d:ed:a0:57:2b:a6:aa:77:d2:66:ae:81:5b:
c8:b7:83:d8:9c:91:ae:2e:bf:2b:ee:39:f8:d8:cd:
44:91:af:01:80:c2:1b:10:62:11:2d:d0:a6:66:8f:
84:9b:c6:6e:1a:02:4d:d4:24:79:96:d6:90:21:17:
e4:87:e3:cf:6c:6c:90:17:04:07:9c:74:79:dd:ab:
33:0c:5d:51:54:48:98:14:d1:fb:87:e6:e0:a4:13:
e5:e3:03:66:91:70:f0:b0:ed:e3:44:19:8a:f1:7f:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4D:5A:4C:9E:BA:29:0B:66:21:7A:92:C5:E1:ED:02:20:86:5B:8F
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:fa:71:45:d1:d0:cb:66:1b:2f:f8:fa:2b:b4:5c:8a:19:f8:
61:0f:50:56:a8:92:87:6a:46:66:a7:69:fe:01:4f:63:5e:b7:
c5:15:2f:1c:a4:14:90:f9:cf:33:91:0d:20:b9:73:62:19:de:
1d:bf:4d:57:71:f6:19:b3:2d:2f:e6:a4:66:c7:84:3d:c6:95:
86:20:33:5b:90:b3:7e:35:b0:1f:d3:cb:0a:6e:15:e8:12:20:
df:59:30:59:f4:b4:6c:14:cf:48:22:ce:97:89:00:27:76:51:
8d:45:75:bf:a3:70:52:5e:48:f5:df:7e:86:76:e6:37:25:27:
55:cd:41:ee:57:f3:a2:76:7b:67:06:4e:5e:55:5a:cc:8e:a3:
b4:ab:e3:1a:0c:fb:a4:f1:0b:a9:b3:43:b2:4e:1d:4e:9d:63:
8a:4f:70:d6:c7:9e:dc:1a:eb:2c:0a:29:b6:8f:98:0d:70:55:
16:db:e5:d0:c8:20:09:46:05:82:f7:08:dc:4a:61:c4:b0:3b:
0d:21:aa:26:ed:07:a6:23:c8:cd:a9:15:64:7c:88:a9:5b:42:
e3:e0:f2:08:7e:ca:4a:30:9d:e5:e7:16:8d:a1:50:1c:83:5b:
6e:38:36:a7:51:4e:ca:04:80:d5:4c:dc:3c:a7:4e:00:ad:73:
42:48:d7:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/Al9gV6wMRNXr+vXtM8FtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYjM1OTU2YTQwMzhhMDkzOGNjZGE4NTU5MmFkNTMxZTRh
ODgzYWQwHhcNMjYxMDE1MTAwMTIyWhcNMjYxMDE2MTAwMTIyWjAzMTEwLwYDVQQD
EyhkYzRkNWE0YzllYmEyOTBiNjYyMTdhOTJjNWUxZWQwMjIwODY1YjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LtET1Q0MWIG6gXUnlQ9TqUbLrtI
rO/CvgNS4MJeVmGjk42h/2cY/nRQYaHuegOSFwCo1yNvk+ScidX/xzwatFAKVxml
/PQ6cUH8EnvQmXamBKoWxbnW0r2mGcJvGeU5JlepN0ac8GPkpThwqBCmX0so/UmX
AIgRMeOjZoV6lzPd2dBObGLUn77VVZS03e+kMQR8gFdi9A3toFcrpqp30maugVvI
t4PYnJGuLr8r7jn42M1Eka8BgMIbEGIRLdCmZo+Em8ZuGgJN1CR5ltaQIRfkh+PP
bGyQFwQHnHR53aszDF1RVEiYFNH7h+bgpBPl4wNmkXDwsO3jRBmK8X/uIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxNWkyeuikLZiF6ksXh7QIghluPMB8GA1UdIwQY
MBaAFOOzWVakA4oJOMzahVkq1THkqIOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmIt
MDdhZTY4MmMxMjYyLzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmItMDdhZTY4MmMxMjYy
LzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPpxRdHQ
y2YbL/j6K7Rcihn4YQ9QVqiSh2pGZqdp/gFPY163xRUvHKQUkPnPM5ENILlzYhne
Hb9NV3H2GbMtL+akZseEPcaVhiAzW5CzfjWwH9PLCm4V6BIg31kwWfS0bBTPSCLO
l4kAJ3ZRjUV1v6NwUl5I9d9+hnbmNyUnVc1B7lfzonZ7ZwZOXlVazI6jtKvjGgz7
pPELqbNDsk4dTp1jik9w1see3BrrLAopto+YDXBVFtvl0MggCUYFgvcI3EphxLA7
DSGqJu0HpiPIzakVZHyIqVtC4+DyCH7KSjCd5ecWjaFQHINbbjg2p1FOygSA1Uzc
PKdOAK1zQkjXUg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:54:46 2026 by rpki-client