Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
File: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft (raw, json)
Hash identifier: KjEwKeR+y0KcjZH5YuyWH06sWfaVLAAvVxC192iow6Q=
Subject key identifier: 2C:93:FB:13:44:A9:65:60:B5:9F:BA:AF:C8:8A:A9:1A:66:1B:83:2B
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Certificate issuer: /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial: 019CAD90A21D88587378BB38BAB4C7E5B695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
Manifest number: 12EB
Signing time: Mon 02 Mar 2026 08:01:02 +0000
Manifest this update: Mon 02 Mar 2026 08:01:02 +0000
Manifest next update: Tue 03 Mar 2026 08:01:02 +0000
Files and hashes: 1: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl (hash: 4a0ycG6N6t90QGUuzF2FxLM7SFKHQrPXo0/73SwDOwY=)
2: RWhg5dykMAyiD73Q4T3IDgPuoVY.roa (hash: btU2vDOWfazE6wfyTegJ86hgsn+iO0cAhM7Jywody24=)
3: RsFe9krKRUtkC3L7-MC9WR0bVdM.roa (hash: lbqH6pbmwmSHgVXzsms7NFLtSzq9IEJtOR+CsCDKF1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:a2:1d:88:58:73:78:bb:38:ba:b4:c7:e5:b6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Validity
Not Before: Mar 2 08:01:02 2026 GMT
Not After : Mar 3 08:01:02 2026 GMT
Subject: CN=2c93fb1344a96560b59fbaafc88aa91a661b832b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:97:fd:ce:ec:c8:7f:d5:46:4f:05:c5:fc:
22:55:6d:68:1c:f2:4e:a7:06:70:d4:e5:f5:f2:95:
b2:80:6b:c7:3c:59:de:43:97:7f:a9:18:5b:59:1e:
0a:73:40:bd:f4:b3:c5:cb:e8:d3:49:ec:62:3a:20:
4f:98:48:27:46:c1:f9:3f:6b:d7:42:15:a7:eb:42:
db:ac:3a:08:cf:35:ce:b7:f1:15:74:bc:60:21:5b:
85:28:e7:41:b3:2f:94:8a:3e:16:5e:39:55:5c:32:
13:7e:d8:e4:cf:d4:27:86:8c:74:8d:21:fb:2e:b7:
29:c6:58:8f:f5:c4:af:fb:92:51:79:3c:0f:5f:42:
c0:b2:1e:b8:81:98:1d:da:9a:2c:41:e6:82:af:24:
18:77:64:4a:03:d4:6f:af:69:24:f7:ff:3f:6c:ae:
99:d8:1d:db:2c:4f:35:a6:7a:53:8e:ed:c7:a9:b9:
86:42:fe:1c:81:ab:05:39:0e:0c:18:95:dd:ef:bd:
b7:93:6e:9e:83:dc:3b:99:18:07:9c:96:84:85:ad:
af:aa:0b:02:17:c6:88:82:76:b2:3f:f7:9e:75:0a:
d9:ba:d6:34:a0:fe:01:14:57:58:f7:46:46:7f:9b:
bc:16:09:1d:71:60:16:65:45:f9:84:cb:06:ad:89:
ba:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:93:FB:13:44:A9:65:60:B5:9F:BA:AF:C8:8A:A9:1A:66:1B:83:2B
X509v3 Authority Key Identifier:
keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0e:e1:b1:83:7b:ba:f3:97:02:a6:6b:06:69:84:2d:dc:5c:
71:c3:60:94:9c:a2:9d:a3:86:af:82:e5:d2:4d:f8:c7:1c:af:
82:1d:c5:02:07:c6:7a:f0:b1:c8:e4:6c:59:7a:35:7a:3a:f8:
14:a9:f2:ed:9a:55:7c:b0:1d:62:1d:89:3e:b0:4e:a7:c3:c9:
e6:89:a6:26:6a:ed:55:e2:51:bd:67:6d:fd:df:b7:ad:fd:a2:
2f:e7:fc:1b:d9:67:1c:bc:d5:33:51:36:2b:a8:db:b7:ec:7c:
6b:2f:90:b9:c2:03:0f:27:52:78:dc:37:19:78:30:0b:5e:cc:
a3:3b:42:22:38:43:70:9f:1b:a1:10:c1:d1:f1:ec:d8:93:39:
dd:a1:d5:a7:f5:49:f3:1d:57:44:cf:3b:1f:fe:bb:c1:ef:e6:
78:b2:a1:3d:5f:29:00:91:40:33:1b:64:68:b7:80:d3:a4:4f:
cf:d5:6b:0d:36:32:8a:2a:82:83:10:d6:96:6e:79:a5:6e:5b:
28:d8:3c:f2:94:2d:4e:5d:53:c8:3f:cc:f0:a3:58:be:63:dd:
7f:22:b4:ec:92:55:17:d2:a9:14:b9:f0:c0:af:9e:0b:ae:91:
1a:13:0a:8d:96:d7:a4:c7:c0:8f:6e:50:fd:38:e3:d2:67:dc:
f9:21:78:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:16:58 2026 by rpki-client