Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
File: R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft (raw, json)
Hash identifier: +LOc96h8im76VNfBbzkTUpL98LJ7K1MGyJ5T1JOgYxs=
Subject key identifier: C3:F9:27:4A:1F:EE:18:F2:7D:84:F2:1D:8F:CE:EC:0F:84:00:A9:29
Authority key identifier: 47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
Certificate issuer: /CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Certificate serial: 019DA59D59FCBB01F9C8362BD8E4B37B8B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
Manifest number: AC
Signing time: Sun 19 Apr 2026 12:00:45 +0000
Manifest this update: Sun 19 Apr 2026 12:00:45 +0000
Manifest next update: Mon 20 Apr 2026 12:00:45 +0000
Files and hashes: 1: 1-TqiAazLK9RAar2iXroZHFof6YM.roa (hash: WVVq8CYPuWlLC3tvTr+h2SKeyS4SEjc0OCpY8ivnCV8=)
2: R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl (hash: 9VagkIlbUccKTTF1tL0kuWZtZMoSNdF8Fsd09/yk2lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:59:fc:bb:01:f9:c8:36:2b:d8:e4:b3:7b:8b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Validity
Not Before: Apr 19 12:00:45 2026 GMT
Not After : Apr 20 12:00:45 2026 GMT
Subject: CN=c3f9274a1fee18f27d84f21d8fceec0f8400a929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:03:55:f6:85:b9:53:4d:b5:ed:e6:f3:3c:
2d:f3:91:e4:3f:2e:89:84:86:81:b7:63:91:3f:c7:
0d:19:36:3c:e8:66:c6:9a:90:5d:a3:4e:ab:c7:db:
c7:74:11:c5:80:f3:ae:a5:d5:85:5e:6c:a0:ef:48:
18:af:9a:c6:20:1e:17:ac:96:59:5f:4f:e1:2e:58:
76:d1:d8:98:c5:66:bc:3c:29:3f:41:c6:5b:79:2b:
d5:b0:55:39:32:0d:65:ad:9d:a5:a1:78:7b:88:4a:
76:91:cd:b6:4d:ad:03:b2:1c:80:22:c4:56:ee:69:
1d:f6:fa:5a:a3:1d:98:72:47:38:38:cc:18:a0:2c:
fa:35:2a:bb:d7:2d:40:54:4d:c4:e9:3b:a2:25:b6:
13:a2:76:ac:c0:30:53:53:3d:db:a4:42:b4:23:52:
61:80:ff:f3:bb:1a:8c:e1:51:4c:31:85:81:93:ef:
fb:85:b1:7e:4c:71:42:1e:6b:7a:fa:4d:2d:ab:a1:
72:a8:51:ba:de:7d:e8:4b:d8:c4:ec:68:1f:a8:5a:
3b:dd:71:0c:7e:de:31:33:37:70:9b:54:90:03:22:
0c:7e:f1:34:a1:3d:25:f0:f4:47:a3:64:37:b0:85:
a8:cb:52:21:b4:8b:28:d6:89:c4:46:ef:bf:46:2e:
34:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F9:27:4A:1F:EE:18:F2:7D:84:F2:1D:8F:CE:EC:0F:84:00:A9:29
X509v3 Authority Key Identifier:
keyid:47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:21:a2:fd:1d:15:1a:79:54:1b:4d:0f:73:e1:c3:4c:30:f0:
7a:2c:62:59:21:8a:79:8e:20:fe:c7:ef:d1:38:71:bb:c7:d8:
8f:7c:a5:59:c5:fe:97:53:29:03:39:8a:cc:b9:f1:9a:b7:14:
a8:95:d0:e3:89:d4:c8:1b:36:22:ea:2f:d5:c8:86:fd:d6:10:
b3:44:52:5b:c1:30:df:9a:76:98:6c:fa:cd:af:f3:04:0c:5c:
75:fb:4c:bb:e2:36:3d:5e:52:0c:c1:6a:be:e2:54:b5:b8:a6:
43:62:54:00:4d:57:e5:13:05:c0:b2:42:5c:04:f5:32:c4:59:
0c:d0:f6:ec:81:84:5f:88:77:1f:91:86:e6:31:68:8a:65:17:
b7:54:bc:d9:d3:11:5f:6b:b0:a3:a0:56:0f:2c:34:05:69:be:
b2:ec:49:20:87:45:5f:f3:cd:dc:c4:2f:f7:a0:be:30:4f:b4:
31:1b:92:82:6b:49:63:0a:55:4f:a9:c0:c2:6b:c1:43:b7:bd:
2e:c5:89:07:c4:35:63:43:38:37:d8:8e:e2:e3:b0:3b:25:a4:
dd:36:f4:63:64:2f:c7:44:8f:43:c9:fd:b8:e2:c9:a8:00:5f:
02:79:ec:4b:a8:6c:1b:bf:e9:72:4c:56:1e:13:d0:80:b6:81:
62:41:b3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:04:59 2026 by rpki-client