Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
File: rc47owvQQ0BmFuIx-DHAO8cN_sM.mft (raw, json)
Hash identifier: tpqDJ7tRzdu9pXa3sbDuzkh4WouwXWqMDeY61l1xjG0=
Subject key identifier: 4C:F5:77:90:B0:F0:67:BE:97:47:63:46:8A:D3:8F:CB:30:63:5B:B0
Authority key identifier: AD:CE:3B:A3:0B:D0:43:40:66:16:E2:31:F8:31:C0:3B:C7:0D:FE:C3
Certificate issuer: /CN=adce3ba30bd043406616e231f831c03bc70dfec3
Certificate serial: 01A0C66AF8E8000BAA3F4225E1462EFC6221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:34 +0000
Manifest this update: Tue 22 Sep 2026 00:01:34 +0000
Manifest next update: Wed 23 Sep 2026 00:01:34 +0000
Files and hashes: 1: hxtJjNM-jXAId3t9QxiU4RhKDn0.roa (hash: kCGRegaekycExv3Ea9rc9bDXuzaYL1+3mHe+GykP47o=)
2: rc47owvQQ0BmFuIx-DHAO8cN_sM.crl (hash: NaKKOd7TDd2GkiDxCyIbLd532Y4SN5b6UHWCrHA6HTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:f8:e8:00:0b:aa:3f:42:25:e1:46:2e:fc:62:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3ba30bd043406616e231f831c03bc70dfec3
Validity
Not Before: Sep 22 00:01:34 2026 GMT
Not After : Sep 23 00:01:34 2026 GMT
Subject: CN=4cf57790b0f067be974763468ad38fcb30635bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:c2:35:ae:ae:13:e0:6c:19:da:c8:a1:5d:
26:f7:43:e1:24:98:8c:5e:56:53:03:0e:3c:6c:0f:
a6:58:dc:08:bd:58:5f:49:ba:2e:f7:76:68:d5:36:
23:85:f0:4d:08:22:61:6c:85:76:7b:3d:44:cf:5f:
e5:ff:f9:ee:25:fb:a0:da:b6:b1:b3:f9:77:25:30:
64:a2:d5:da:44:d7:9f:04:fb:b3:bd:ee:a4:98:ca:
4f:6c:e1:d5:80:59:ab:71:64:12:2a:79:58:17:4f:
fa:4d:97:76:d8:20:f0:32:72:63:b4:00:ed:b0:dd:
f1:7f:f1:3a:2f:2b:4d:4d:68:81:98:a0:38:3e:74:
a4:7e:8b:2d:98:ad:3a:85:1b:c5:1b:ad:43:45:48:
ea:a3:fc:a9:16:44:ae:1a:e3:e2:bf:4d:14:92:d9:
c5:d5:86:43:7a:a9:1d:19:8a:eb:d7:69:ee:e0:3a:
d4:db:75:5d:08:76:1e:33:c5:06:7a:2f:99:d6:c7:
c6:6c:a4:fb:79:58:66:44:70:54:5a:84:04:6e:86:
83:f6:37:46:07:ec:bf:59:a1:9c:f5:03:ac:45:68:
65:07:cb:fd:02:19:a9:53:4d:11:15:93:34:ab:6e:
cc:3c:e0:24:6d:8c:71:e2:8b:63:cc:df:04:db:82:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F5:77:90:B0:F0:67:BE:97:47:63:46:8A:D3:8F:CB:30:63:5B:B0
X509v3 Authority Key Identifier:
keyid:AD:CE:3B:A3:0B:D0:43:40:66:16:E2:31:F8:31:C0:3B:C7:0D:FE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2f:f6:70:95:18:4c:6f:25:96:88:eb:fb:1e:8f:52:74:a1:
e4:e6:59:1b:50:ea:26:c4:94:ea:f1:c6:87:a0:50:2b:8d:48:
b4:65:db:9a:39:e0:38:ed:f9:4d:b3:b9:01:15:72:71:9b:a8:
c2:de:79:c4:4b:42:6a:a2:9e:32:45:20:da:22:6a:b3:6f:40:
80:c9:f7:52:1c:e5:39:19:d7:cc:f4:56:be:87:a3:12:5a:36:
cc:8b:5f:fa:56:88:ff:ae:04:ee:a1:e8:e1:0b:2d:ae:7a:28:
cc:c0:31:6c:66:3e:40:ae:c7:b2:c1:25:de:1e:f8:26:b0:76:
fb:ff:d4:5e:85:2d:09:67:56:67:4a:06:47:54:08:ee:59:92:
36:04:88:bb:5a:a4:ef:83:61:e8:1f:32:a8:33:97:88:05:20:
6b:b2:16:00:95:f0:dd:76:45:05:65:ae:2c:19:54:e3:74:bd:
a1:4c:6d:b2:92:a0:10:f9:dc:e5:62:14:fa:f8:18:89:08:65:
af:aa:fb:e2:bb:ef:41:9d:85:ec:30:2d:01:e8:49:43:9f:7a:
5f:65:85:df:f3:f6:d4:5a:c0:ab:e3:8b:dc:9a:82:6f:bb:11:
6a:b5:36:2a:ac:c5:5b:1b:0f:41:8e:5e:7f:23:3c:66:2f:05:
48:89:54:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:39:47 2026 by rpki-client