Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: HEkDCTfrWCP6Ht/N2AyLiFEHRI+fizLpIq7fE3QzyBA=
Subject key identifier: 75:2E:FC:0B:AE:75:24:67:A5:D3:A3:C1:4B:0A:A1:2A:F7:EA:08:78
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 019CA9B3677EBB6691F4B5029D7B065AC03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0E43
Signing time: Sun 01 Mar 2026 14:00:32 +0000
Manifest this update: Sun 01 Mar 2026 14:00:32 +0000
Manifest next update: Mon 02 Mar 2026 14:00:32 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: A5SxbmMRgOWc93S9pBWflqxn6XAqwe+O8tC8SAnyfMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:67:7e:bb:66:91:f4:b5:02:9d:7b:06:5a:c0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Mar 1 14:00:32 2026 GMT
Not After : Mar 2 14:00:32 2026 GMT
Subject: CN=752efc0bae752467a5d3a3c14b0aa12af7ea0878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:6b:e2:59:84:f8:c8:62:76:fd:f0:c0:0b:
46:4e:f0:0e:84:33:d8:09:8e:87:6e:45:f1:a3:70:
59:66:97:b1:c8:e7:1a:3a:69:ec:30:82:c2:c7:31:
96:aa:24:03:c0:9d:6b:1f:3f:2d:d7:bc:17:dc:68:
88:4b:4d:44:ea:13:ed:82:cd:5e:03:13:83:e7:fb:
65:69:b2:9b:a9:3f:f0:7a:c2:d9:c0:b6:61:b1:4b:
a3:12:87:2a:a3:ce:80:d1:7e:86:e7:50:7b:ce:ee:
32:c0:f3:1c:d3:2a:e9:c6:dc:04:ff:a7:dd:16:21:
8e:7c:7c:72:64:6c:24:1b:e2:0d:99:80:56:c6:e5:
96:b7:4d:be:d6:a6:88:30:2c:58:d5:13:49:c8:4a:
c2:61:7e:5d:44:c8:c3:34:49:42:e4:f6:79:0e:1a:
65:dc:e8:40:c6:4a:37:b0:35:60:45:13:c5:62:1b:
c9:70:e3:f5:f9:c0:96:fe:51:db:f0:ff:14:dd:7c:
f3:83:09:a8:26:e5:f8:7c:53:e1:37:e9:e3:15:bb:
6e:12:a4:ea:2f:e0:ed:4f:ec:e1:bb:06:ff:35:07:
8a:49:ba:a7:2f:26:3c:2d:91:24:9e:9c:b1:92:dc:
f2:b2:92:a5:ad:10:d3:21:d7:1a:47:87:16:9a:37:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2E:FC:0B:AE:75:24:67:A5:D3:A3:C1:4B:0A:A1:2A:F7:EA:08:78
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:42:4a:fa:42:8f:f5:ac:fb:35:4d:23:b4:d4:4d:8e:06:53:
49:60:d2:2e:dd:80:48:a3:b3:48:33:69:f5:a1:a6:92:32:39:
5a:fb:5f:ae:15:6d:de:08:7b:4b:59:6e:ab:dc:45:4e:26:a9:
46:c6:2d:16:8f:68:01:b3:21:ff:08:c7:a8:13:f3:8c:2a:bc:
88:40:94:74:6c:97:df:56:11:c6:a5:c8:5d:5d:11:18:89:e0:
e8:82:1a:55:7c:b4:da:8e:f4:10:90:de:06:1d:97:29:b5:ae:
96:fd:1d:f8:6a:d4:ab:b5:42:49:d2:4e:68:6b:3d:79:bb:46:
ac:c9:e1:c9:7d:71:55:ef:84:a8:2e:54:00:db:19:a9:c4:c8:
f2:49:43:d3:1d:1b:50:57:61:42:99:51:0f:df:51:3b:45:ef:
21:e4:fa:2f:50:d9:1c:7c:5c:d3:5f:cc:94:4b:aa:17:6a:2d:
e0:70:73:f2:81:bc:e9:04:59:f5:7f:1e:32:a6:07:31:7f:99:
57:59:95:0f:86:b9:7e:8b:ee:06:75:9f:15:ca:0c:61:cb:a0:
99:48:6c:19:10:f9:44:7a:18:0c:08:6b:b3:a7:cb:88:8b:9e:
59:a0:23:9c:c2:68:c4:00:41:b1:ea:06:34:ea:69:da:20:99:
9e:e6:d5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:09 2026 by rpki-client