Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier: PiR1J9PJnD3Yg6lAWjWUewDgzcTY4bDnYrYqMXIUUic=
Subject key identifier: 10:32:F0:38:7F:83:91:5F:45:68:17:4C:60:B5:56:13:65:C0:69:FA
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 019D37C0AB32D2BF2AA8CC97A81325ECD4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 04:01:06 +0000
Manifest this update: Sun 29 Mar 2026 04:01:06 +0000
Manifest next update: Mon 30 Mar 2026 04:01:06 +0000
Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: PpD42azZo4B3fv8eR+I24xKSRsZboa9E5669CWTZtcY=)
2: CshAZZODRLNLmNGlI2avtLyw1y8.roa (hash: Hf1RE2bw+HGP7b/6j+X1+6eXzCajo5UkBDMdWtNUDgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ab:32:d2:bf:2a:a8:cc:97:a8:13:25:ec:d4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Mar 29 04:01:06 2026 GMT
Not After : Mar 30 04:01:06 2026 GMT
Subject: CN=1032f0387f83915f4568174c60b5561365c069fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:12:93:0e:83:5d:7f:f2:67:3e:37:63:c8:
71:b5:a5:26:e8:bb:3d:fb:cd:39:4a:e1:2b:17:08:
bb:b7:ed:3a:42:69:44:8d:f7:1c:f6:d3:89:50:3f:
c1:35:95:41:e3:a3:b6:e8:8a:6a:66:87:91:6a:9e:
12:27:24:01:98:a2:69:6b:9d:5d:6b:c7:f2:3e:3b:
d8:a6:c7:b8:46:27:62:40:36:56:91:c8:48:1d:31:
4a:81:ba:15:7c:45:53:d2:b3:ef:37:16:31:6c:c7:
f6:92:8c:1a:52:6a:d4:b6:be:8b:8f:54:5b:3b:4d:
7e:23:00:d1:5c:e7:10:a0:33:8c:04:0c:d1:11:14:
77:7b:ce:6f:69:96:59:c2:a0:85:10:42:60:c6:aa:
d3:31:65:f5:8d:35:cb:cc:23:0e:1f:2a:2e:db:96:
6f:6e:20:9d:16:bf:e1:9c:21:1a:52:ca:7b:22:0d:
a4:bf:31:83:c8:92:3c:c9:27:32:d9:07:fd:9c:4d:
e4:13:e4:0b:d0:5d:06:bb:de:2b:2b:ea:26:4c:ea:
5e:d0:36:18:7c:fd:19:6c:32:8f:95:af:4f:63:9b:
04:de:34:3b:84:a7:a0:c5:4b:94:43:b7:74:33:c0:
40:e5:89:bd:27:4a:c7:f5:52:ed:2a:22:02:da:16:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:32:F0:38:7F:83:91:5F:45:68:17:4C:60:B5:56:13:65:C0:69:FA
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:5f:ac:f0:1f:7b:9d:36:ee:61:40:d4:a7:33:de:b9:6c:72:
89:a6:73:f8:d0:a0:de:15:b8:53:5c:b5:b4:77:d1:7a:a6:d2:
43:15:55:08:40:a2:01:82:f7:b8:ab:ba:58:29:07:4c:72:d9:
61:52:e5:49:58:cc:21:d7:1e:0a:b6:11:b2:27:bc:2f:bb:af:
54:ea:78:97:af:db:29:f2:27:92:d6:9e:7a:11:5b:66:4e:2d:
2d:92:63:f0:dc:14:49:6b:29:51:25:f6:fd:9b:e1:57:d6:94:
e5:36:87:70:e6:76:5e:6a:8c:7a:9c:d4:81:df:68:8c:67:fa:
55:7e:9c:96:b0:e3:d2:c1:89:7a:ab:ba:30:08:2c:42:b0:e9:
bf:7d:33:f1:58:2a:1b:ee:0f:19:2e:ba:8b:78:7f:0f:af:3b:
05:ae:bc:22:6f:bc:ae:8e:db:80:19:e9:b6:84:3d:cf:d3:01:
1e:ad:ce:87:e7:22:bf:6d:32:cf:c7:13:cd:5c:32:37:52:c6:
85:a0:49:9c:76:99:a9:b6:6f:f7:8f:cb:47:35:ea:36:56:2b:
6c:fc:9e:2b:b1:08:db:91:84:73:55:91:b4:66:e0:b6:6d:26:
8e:f4:97:57:13:44:40:0b:eb:51:04:5a:93:19:a0:9d:79:4c:
02:c0:db:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:24 2026 by rpki-client