Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: nF2rl5sLGG5ONL5GEqQzOwppAncVeetR5Qfcgx1Gv/w=
Subject key identifier: 9B:C5:72:8A:7B:23:A9:A5:DF:BE:01:82:C1:2A:EE:66:C8:1E:2A:1C
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 01A0C444FA7302177B2817BE53D8F3120B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 1063
Signing time: Mon 21 Sep 2026 14:00:49 +0000
Manifest this update: Mon 21 Sep 2026 14:00:49 +0000
Manifest next update: Tue 22 Sep 2026 14:00:49 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: XF2nucfgOfAVRjKWKMQ1DGj9g/wrwGdYtwK8XAFjMQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:fa:73:02:17:7b:28:17:be:53:d8:f3:12:0b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Sep 21 14:00:49 2026 GMT
Not After : Sep 22 14:00:49 2026 GMT
Subject: CN=9bc5728a7b23a9a5dfbe0182c12aee66c81e2a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:60:73:df:e1:42:2a:f3:f7:cc:21:5e:68:
8b:66:29:e7:cb:ab:3e:04:56:c4:82:50:5e:c0:c3:
78:5f:5b:aa:39:38:d6:a3:69:ff:be:06:eb:77:10:
2e:c2:94:95:f2:77:e1:a0:6b:d2:ad:c9:39:de:f8:
e2:a9:d8:5b:1f:6a:3a:9f:a0:80:b4:6b:38:a0:eb:
03:19:6b:53:d5:11:35:e3:bf:4b:9b:ed:ed:d0:2e:
06:c0:af:4b:4c:c1:77:db:dc:75:de:ee:bb:74:79:
04:1e:f0:cd:cd:07:81:0a:73:50:19:0e:55:a7:6f:
3d:a1:24:1d:52:9d:50:72:96:5e:36:08:14:8d:60:
58:11:11:06:ff:df:e5:a1:7a:d4:b6:fa:36:19:dc:
8a:92:5c:e5:44:c0:cd:a9:ac:dc:ec:25:3c:d9:7a:
a1:b7:15:7f:c2:0d:06:a7:a4:4f:4a:e9:12:28:47:
70:26:b8:27:5e:6e:a1:3f:5e:3b:89:ad:7c:54:9b:
e8:2f:53:34:45:bd:78:b7:51:6a:15:8b:e2:d2:45:
26:0c:f8:c1:5b:88:47:36:3d:32:1c:41:f1:f2:86:
7d:0f:f1:1f:ed:0b:a1:b3:e5:71:ea:94:3c:5e:c6:
17:36:7d:3a:e7:b0:4e:97:f7:6b:39:e6:ec:3f:78:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C5:72:8A:7B:23:A9:A5:DF:BE:01:82:C1:2A:EE:66:C8:1E:2A:1C
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ce:8b:3d:f5:6c:ca:76:c6:91:40:68:0a:f1:7a:ed:a9:e9:
fe:26:75:49:0b:05:7a:70:d6:ce:31:51:ad:44:36:57:a3:3a:
2b:3e:7c:e2:30:1e:b0:9f:dd:11:77:18:82:99:ba:9e:c5:20:
cb:c0:61:b8:17:ee:d2:06:98:22:65:96:f1:0f:3a:b8:33:d6:
3d:ee:df:fd:d9:ae:f9:fd:f7:bd:63:16:ac:70:d0:01:c0:eb:
c3:c2:d8:d7:49:3f:33:0e:af:94:c6:4d:95:ff:91:e0:2f:a0:
2e:e7:e5:05:65:8d:0b:44:a6:50:6a:b9:b2:24:b2:4b:8f:48:
b0:86:2e:63:e7:61:6e:7c:40:6c:f5:77:84:d8:b8:01:4f:74:
11:9e:5e:d5:95:67:1c:8a:4d:c6:ad:9e:bd:69:e5:d8:7d:87:
d3:8f:38:64:cf:3c:57:8f:7a:49:36:a2:90:2c:84:cb:0e:3a:
dc:0c:20:b6:09:4b:25:b5:66:a8:83:2c:cd:e2:87:08:19:16:
94:06:3e:cb:c6:aa:b3:fc:1a:b2:60:b6:ea:f3:d2:3a:87:00:
82:d6:31:c9:e0:e2:24:64:27:9f:e4:c3:ea:e4:ec:2d:e1:e4:
40:c8:18:81:ad:80:1b:c2:6c:b7:49:ac:75:4c:cc:ec:38:c9:
f1:67:96:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:20:33 2026 by rpki-client