Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json)
Hash identifier: FwMTMOxinH+08/CuQViWDaY+RJSXmEIh4KcgKlTYNEY=
Subject key identifier: F8:B4:6C:CF:49:3B:0B:92:C3:59:CA:F0:3A:FB:56:F7:35:A8:F9:56
Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Certificate serial: 019D9A3E0351DEB5826A5C4BF36FF3328945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
Manifest number: 13DA
Signing time: Fri 17 Apr 2026 07:00:48 +0000
Manifest this update: Fri 17 Apr 2026 07:00:48 +0000
Manifest next update: Sat 18 Apr 2026 07:00:48 +0000
Files and hashes: 1: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: wUeTMnDjPHw3VMyMJbX0D7Z6X9LVzJA5yF+Wa/n+bm0=)
2: zJ9YO7uI6W1Gq5hqe_FdpaKHEOs.roa (hash: wHDNKsjqy6w/5WpMFtLcJHbUM6e7hIDnbt9VTy3GjT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:03:51:de:b5:82:6a:5c:4b:f3:6f:f3:32:89:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Validity
Not Before: Apr 17 07:00:48 2026 GMT
Not After : Apr 18 07:00:48 2026 GMT
Subject: CN=f8b46ccf493b0b92c359caf03afb56f735a8f956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:58:7e:12:60:d4:5f:72:b5:f7:19:b4:0e:e0:
fb:3f:d9:09:7b:72:56:e2:77:76:45:7e:29:66:76:
b7:29:a1:8c:55:ac:d0:ab:0b:9b:39:6a:16:51:31:
c0:6f:54:8b:e6:00:fc:0b:82:03:a3:31:d1:7f:2a:
49:68:8f:a0:b3:34:a2:87:53:16:f0:4f:9a:d4:5d:
d0:0c:d6:af:76:f4:8b:8a:ad:52:26:66:52:c3:57:
52:17:36:05:d8:9b:26:52:52:e8:3b:bc:93:f7:cf:
63:1b:13:9a:dd:e3:7a:74:4f:c8:75:28:48:02:38:
1e:1c:9c:10:12:81:12:cc:21:35:e8:b5:91:ae:97:
fd:7e:95:55:86:4b:39:7a:7c:0d:7c:55:d8:64:2e:
f4:3a:67:d9:4f:05:f2:1c:2f:da:ea:cf:7b:49:d8:
f7:a0:b8:ee:b6:1f:ff:ea:8d:b4:8c:b5:f7:35:d1:
22:06:96:b1:8d:64:31:ba:33:9a:a7:7a:b2:7f:92:
23:6b:8f:2f:f2:75:64:2d:b0:de:4c:aa:4d:0a:a2:
7f:ad:77:3b:33:89:f0:b1:88:17:89:da:12:3c:c9:
aa:de:c9:05:46:a7:63:d7:71:33:d2:7b:9c:e9:2a:
e5:5f:ab:fb:c1:d6:aa:31:f6:76:b6:b1:46:e9:eb:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B4:6C:CF:49:3B:0B:92:C3:59:CA:F0:3A:FB:56:F7:35:A8:F9:56
X509v3 Authority Key Identifier:
keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ed:01:6c:5f:27:73:40:8c:1b:d0:f7:4b:87:50:ad:b3:3f:
ba:d9:f6:b7:ff:25:f1:78:dc:c2:4c:99:68:34:f8:15:e6:19:
3c:e0:a2:02:6d:5c:fc:1b:0a:b0:b5:e1:23:d6:62:01:4f:59:
62:ee:09:16:97:cc:65:03:92:57:aa:22:a5:95:10:49:ef:47:
a1:ed:9c:ff:b0:2d:02:18:40:7d:4a:64:39:88:b3:3c:9f:6e:
a6:cd:48:1d:d0:ee:98:70:13:90:c0:03:33:40:97:47:47:cb:
72:35:ba:f5:55:ec:11:74:75:c5:c5:fa:05:08:ac:ee:53:1a:
ac:55:5e:41:fd:62:8a:0c:d2:eb:d0:c4:10:f9:39:8a:5d:b0:
23:f0:ea:0d:fa:d2:de:77:aa:5a:58:74:0b:2d:33:53:67:ee:
85:d5:4b:42:96:ad:94:5f:51:15:da:d3:df:0f:e7:08:10:20:
ce:df:8a:79:ed:2a:87:4b:1a:1f:d5:f1:fb:16:57:83:4e:62:
65:14:14:88:a4:ed:0c:0b:b4:5c:04:9c:9c:58:46:85:5c:6c:
db:c5:ff:23:59:ea:76:00:a8:75:8e:c4:1b:9c:6a:1c:61:52:
2c:dd:20:46:66:01:e4:a7:82:a1:cd:cf:d2:f8:d1:6a:6a:a1:
cc:fe:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:53 2026 by rpki-client