Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
File: R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft (raw, json)
Hash identifier: grYat7DwTPfDcK16Afms39lhmWffWfp97H8jvEQtMS0=
Subject key identifier: D1:88:D7:71:C2:8D:CB:DE:15:85:AA:15:24:DC:4D:38:D2:9D:F6:87
Authority key identifier: 47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
Certificate issuer: /CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Certificate serial: 019CAE6BF0245E891EB76BA5FC155F6B2596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
Manifest number: 2C
Signing time: Mon 02 Mar 2026 12:00:35 +0000
Manifest this update: Mon 02 Mar 2026 12:00:35 +0000
Manifest next update: Tue 03 Mar 2026 12:00:35 +0000
Files and hashes: 1: 1-TqiAazLK9RAar2iXroZHFof6YM.roa (hash: WVVq8CYPuWlLC3tvTr+h2SKeyS4SEjc0OCpY8ivnCV8=)
2: R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl (hash: ChgVM1HjMProXFksczivhiVODTRbHyXtekCPKxHJudo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:f0:24:5e:89:1e:b7:6b:a5:fc:15:5f:6b:25:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Validity
Not Before: Mar 2 12:00:35 2026 GMT
Not After : Mar 3 12:00:35 2026 GMT
Subject: CN=d188d771c28dcbde1585aa1524dc4d38d29df687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:09:13:73:68:4f:ed:56:03:fc:f3:d3:1b:
50:fa:56:61:89:54:e1:59:b3:d7:85:2c:6b:c9:89:
a8:9d:e1:f7:8e:66:e6:9a:32:27:41:26:09:e6:39:
fa:bc:38:76:64:ff:de:45:be:be:99:88:cd:73:af:
48:f1:28:b8:fa:45:64:cc:f6:6a:5a:46:46:cf:61:
b5:21:cf:41:c9:da:43:a4:d3:6d:f2:4d:68:bf:52:
ce:22:56:68:1c:29:5d:03:2e:02:8c:0e:ce:cc:87:
05:c8:cd:84:21:a4:17:cf:94:ff:da:fb:99:4a:33:
f8:ce:3b:d4:39:cf:8b:49:27:22:a4:ad:8b:52:e6:
cd:c6:00:b1:cd:8c:f3:9f:75:78:4a:ae:59:79:47:
05:9e:7f:cf:a6:da:05:46:75:4c:01:cb:98:c3:a9:
2c:b3:80:33:35:ff:99:27:86:fa:f9:dc:e6:17:f1:
9d:bf:21:71:d5:66:9c:b9:75:24:19:55:3a:bc:12:
4d:08:a1:c8:c2:e8:93:67:b5:16:c2:3b:f6:9c:cc:
14:fc:7b:a9:27:ee:74:37:73:50:8a:15:fe:31:f4:
1b:ca:83:4b:6f:37:20:58:79:90:5a:e4:29:d6:69:
41:a2:2a:ce:c7:7f:26:9a:d5:ac:fa:01:bb:c2:0e:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:88:D7:71:C2:8D:CB:DE:15:85:AA:15:24:DC:4D:38:D2:9D:F6:87
X509v3 Authority Key Identifier:
keyid:47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b0:48:71:a8:54:38:99:e8:9a:2d:9a:d9:44:e8:90:59:c8:
d1:57:cc:bf:35:21:d3:39:c8:7b:ef:a3:b1:bb:6c:20:34:fd:
50:58:a0:7f:53:9d:38:86:3c:e0:a3:bc:a5:9c:29:73:b7:67:
c2:c8:88:08:7f:54:fa:88:a4:14:83:ba:06:44:77:20:cf:ba:
58:40:42:e8:5f:7d:02:d5:26:55:61:cc:0b:a3:4f:fe:1d:e4:
c8:18:c7:16:76:51:64:45:a8:2b:12:39:e7:d2:f3:1e:54:09:
98:a0:bf:01:6d:56:3c:49:83:32:fa:fe:98:62:88:b8:51:96:
99:49:8e:55:6b:e1:b8:37:a1:82:fe:6b:da:e7:e9:96:7d:7f:
df:5e:43:5a:7f:86:0b:1b:30:12:6c:fb:fd:0d:3e:43:cf:bb:
1e:a7:fc:85:f5:38:95:54:21:e6:6b:f0:63:86:48:f4:1b:02:
e2:f6:21:df:33:fd:15:72:d3:2d:f6:b0:08:7d:5b:ae:0e:38:
24:59:0a:86:70:32:6e:e2:89:66:fe:8c:ad:68:c9:37:8a:15:
81:05:dd:8d:cb:94:50:5d:8a:1a:09:f2:8e:a9:1d:0d:5f:32:
73:63:98:eb:08:ff:0d:eb:1f:2a:5a:59:dd:53:06:29:d8:87:
ca:ac:dd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:14 2026 by rpki-client