Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: lvpP6dMZ7IxkxqzkvmM6UDtMuXcxtr76I/eRS+9ASXs=
Subject key identifier: D5:D8:43:CA:02:97:74:B8:48:F1:47:CB:09:4F:A0:77:71:9B:91:4A
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 01A1C70CE45F2AC44F527498007800D85596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 10E9
Signing time: Tue 10 Nov 2026 20:01:13 +0000
Manifest this update: Tue 10 Nov 2026 20:01:13 +0000
Manifest next update: Wed 11 Nov 2026 20:01:13 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: 9ZoQcLJQS5c6L7BibyrmN5w9PQNCHc4hfeIXioNh1LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c7:0c:e4:5f:2a:c4:4f:52:74:98:00:78:00:d8:55:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Nov 10 20:01:13 2026 GMT
Not After : Nov 11 20:01:13 2026 GMT
Subject: CN=d5d843ca029774b848f147cb094fa077719b914a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:0b:fe:2f:2b:6e:b2:7a:4f:0e:6d:15:b5:
bb:2b:d5:33:ce:c6:36:e1:9f:63:4c:72:6d:41:29:
ae:b4:18:34:be:49:40:12:d1:3a:6b:db:34:7b:bd:
fe:a3:98:30:38:50:dc:ee:32:b5:50:28:07:61:84:
3c:c0:aa:82:aa:89:1a:de:0c:47:7f:a2:b0:a1:bb:
2e:02:96:dd:8e:cd:0c:31:ab:65:0e:77:26:d4:0a:
69:3d:0f:a9:be:c6:71:b0:68:3b:c1:1e:c8:6c:ae:
13:d2:4d:ea:32:7e:9a:02:e6:43:5d:75:d8:4b:99:
ed:ef:e0:56:39:4d:3c:fe:25:18:04:e9:aa:26:3f:
20:58:cb:85:49:40:5e:a3:f3:dd:88:f2:11:70:e8:
94:86:55:82:d5:65:84:39:27:6a:22:87:50:b6:5d:
c4:5f:61:f5:8d:46:89:f3:85:25:9b:d5:4a:78:e0:
df:c9:50:55:54:af:6f:3e:f4:ae:63:ae:3b:27:b7:
c5:77:a9:79:5d:65:fb:a7:6c:31:c0:67:6c:70:14:
7b:72:03:c0:0b:ff:22:50:27:4f:e2:63:71:59:b5:
6b:18:64:ab:da:6b:55:31:5e:74:b0:86:53:46:a6:
e4:bf:2f:2c:97:e9:0c:d9:a5:e3:93:4c:14:a6:fe:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D8:43:CA:02:97:74:B8:48:F1:47:CB:09:4F:A0:77:71:9B:91:4A
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:30:41:94:34:17:b7:06:e2:c4:3d:3d:f8:2e:31:9f:c5:e7:
35:54:d4:b0:8e:ee:cd:8a:1e:1c:be:b2:ed:b1:4f:57:0a:48:
4b:0d:50:f5:c9:a2:dd:a5:06:d8:12:56:c1:a4:4b:46:28:c4:
ac:e1:2d:ed:1b:b4:3a:bc:8b:3d:4e:8b:ad:f6:69:c4:9b:4d:
cf:e7:71:e8:38:be:a1:13:c4:b1:73:ae:0a:e0:39:26:4c:38:
ca:ad:43:2d:98:00:fc:8a:ad:3e:f5:7a:40:80:5c:1a:8e:69:
56:48:27:f3:f0:b5:03:c2:23:f0:f3:9d:86:8a:f6:c1:6a:c1:
7c:76:d9:c9:ca:a1:4e:ec:08:b7:6d:52:4b:55:fe:64:2c:85:
9d:96:91:d1:99:78:11:60:01:ea:93:33:63:33:e4:de:2c:2d:
2f:b7:be:42:d6:33:22:85:fa:b6:41:a8:ff:82:c8:bc:92:0d:
02:91:1e:0c:f0:b3:56:f9:ef:bb:6a:06:7c:68:83:9c:b2:bd:
62:f6:79:05:5f:40:e3:94:36:20:c0:5f:43:7a:0e:aa:d0:29:
15:24:7d:36:6b:39:17:aa:55:5d:6d:c9:a9:2f:24:f5:54:63:
80:0d:af:c5:73:01:c9:1e:d0:21:c5:6d:63:fc:53:bc:4f:e1:
67:a3:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 00:46:10 2026 by rpki-client