Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: l2jKsyRY37lbGrr/sgBVGl50cejfs+vjMp3C5hmH5c0=
Subject key identifier: 22:A2:E5:E9:A1:56:AA:ED:86:D1:C5:F7:AD:77:95:99:3F:83:88:13
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 019D992B355D7EBDF8E7B6F54A4E000E5BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0EBF
Signing time: Fri 17 Apr 2026 02:00:38 +0000
Manifest this update: Fri 17 Apr 2026 02:00:38 +0000
Manifest next update: Sat 18 Apr 2026 02:00:38 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: yfIwcS5E7JETGPjJHM+gYLiCV3a0stCIXN8v4tgLVB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:35:5d:7e:bd:f8:e7:b6:f5:4a:4e:00:0e:5b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Apr 17 02:00:38 2026 GMT
Not After : Apr 18 02:00:38 2026 GMT
Subject: CN=22a2e5e9a156aaed86d1c5f7ad7795993f838813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:56:70:86:2c:e5:30:23:a8:61:97:67:56:
a3:a8:12:1c:df:64:f6:76:87:99:eb:46:8f:70:84:
5f:39:e9:8a:53:ad:96:9e:ab:e1:2e:78:4c:7d:ce:
ae:e5:7e:b5:bd:7f:2b:d3:4a:d7:c7:ad:c3:f3:e5:
04:ad:26:af:23:9c:66:35:74:cd:3d:f5:c3:19:7d:
de:fc:45:64:98:f4:bd:c7:bd:13:ec:37:91:59:3f:
c7:ab:96:7d:aa:c3:39:df:e5:eb:07:8c:1c:9b:b0:
89:a8:cb:88:15:92:de:20:44:11:88:1d:75:06:a4:
ee:62:46:dd:b5:5e:db:c9:91:ba:7f:51:c5:9f:ef:
58:87:e1:da:cd:25:c8:67:5f:1e:99:50:ac:50:9d:
37:8b:e2:cb:a6:c8:12:26:35:77:02:00:a9:7e:69:
5e:0a:74:18:ef:2b:7f:61:1a:a7:7f:59:0a:11:34:
93:08:18:b8:df:a4:54:dd:e4:c6:09:85:2d:30:d4:
b2:a2:9c:b8:d0:d2:6f:26:ab:11:39:35:49:e1:12:
25:88:91:ee:37:74:5a:0d:3f:36:6d:10:7a:25:c9:
4f:1e:4f:3f:50:16:f0:ba:cd:1e:5e:19:3c:2a:ae:
d8:e5:96:31:4e:0c:e7:7b:f0:bf:01:54:d4:46:bf:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A2:E5:E9:A1:56:AA:ED:86:D1:C5:F7:AD:77:95:99:3F:83:88:13
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4f:b6:71:77:21:5d:42:5d:10:53:de:0c:0a:e8:5f:68:41:
bf:e2:2f:0e:be:03:46:a1:df:7f:b3:3b:04:59:66:f7:22:d6:
a7:29:73:36:0c:0a:c7:7e:05:20:0c:03:43:c1:0e:14:61:83:
2d:bc:9f:fa:e8:66:f9:4c:fb:f6:29:38:7f:21:dc:22:34:de:
5c:18:21:5b:2c:4d:1c:c9:6a:6e:e4:ad:3f:51:54:4a:08:b4:
07:f6:20:81:59:5b:10:71:8d:ea:d8:a7:f5:9d:c2:83:8e:69:
8d:a2:b2:66:d3:bd:e2:6d:66:c2:4a:a4:fc:7b:5b:f9:b8:d9:
64:9a:f8:a0:b9:7f:c9:b4:79:18:83:0f:4c:d4:cc:96:b6:a4:
9d:3f:8f:b0:7d:a6:8f:44:d5:9a:1b:04:8b:e1:86:96:bc:2d:
22:52:f9:10:e1:62:8c:5b:33:e6:46:9c:47:6a:ed:cf:9e:a9:
a4:b8:db:5b:6e:8c:ca:9d:e2:a9:6e:bc:65:aa:cb:63:c7:01:
a2:eb:c0:e7:66:fb:84:83:71:66:d7:71:8e:2c:66:c1:c2:f5:
29:76:d4:cd:da:b3:cb:1a:03:7e:5f:6e:92:e2:e8:73:6b:2d:
d1:71:14:e0:bc:31:d4:1b:c5:13:21:39:de:56:0a:00:1a:49:
8d:ee:66:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:37 2026 by rpki-client