Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
File: R8zghicbSUmlCfHjcYDpioCkVOU.mft (raw, json)
Hash identifier: rOrfx46Dac6izOHHmXdyOLaPZhd1XjVyi0qxcnLZydg=
Subject key identifier: 3F:C5:8E:61:9F:A0:68:09:B3:9A:D0:07:42:AB:5D:C2:A9:7E:50:2F
Authority key identifier: 47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
Certificate issuer: /CN=47cce086271b4949a509f1e37180e98a80a454e5
Certificate serial: 01A128E80B84FA8B631B8F4B24AFEBE15298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
Manifest number: 0113
Signing time: Sun 11 Oct 2026 03:00:58 +0000
Manifest this update: Sun 11 Oct 2026 03:00:58 +0000
Manifest next update: Mon 12 Oct 2026 03:00:58 +0000
Files and hashes: 1: 84nImxweqqr5ryKumI1pSxwnVkY.roa (hash: +HbQ4MWmkmjb64P4pJWJRCcWwhVgoZJ30TVPJhtlbcM=)
2: R8zghicbSUmlCfHjcYDpioCkVOU.crl (hash: PN+bs+4udpFeWl52icsh1U0VSD/ljCNZmTVsHovMFJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:0b:84:fa:8b:63:1b:8f:4b:24:af:eb:e1:52:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cce086271b4949a509f1e37180e98a80a454e5
Validity
Not Before: Oct 11 03:00:58 2026 GMT
Not After : Oct 12 03:00:58 2026 GMT
Subject: CN=3fc58e619fa06809b39ad00742ab5dc2a97e502f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:bc:3e:be:20:7b:61:fe:ce:c5:38:b1:05:
0f:af:73:e3:26:e4:7c:ce:99:9f:f7:97:aa:3e:ca:
78:98:38:fb:9e:8b:42:59:e4:cc:65:1c:52:b2:a6:
75:c7:ff:1f:83:c9:9c:95:70:d9:57:32:8a:fa:70:
bb:0c:2f:27:63:bc:6c:c4:8f:b1:a7:57:1a:39:d8:
98:97:b1:0d:d1:59:51:55:cb:35:5c:23:2d:ca:cf:
97:6b:9d:b9:ec:9c:16:ba:7f:04:79:f1:ad:d6:76:
bc:8d:99:8b:03:13:5d:c3:77:ef:5d:e6:49:db:7d:
b5:eb:b9:b3:8b:e3:5d:1e:7c:c1:7b:38:ce:3f:f4:
00:e1:26:89:c0:e1:03:e5:fb:9a:5b:e6:54:56:8e:
57:22:98:08:48:4f:6a:06:19:f0:16:e1:e6:c8:ec:
bd:19:32:c7:ac:71:0a:de:9f:29:45:f5:33:ec:83:
35:46:91:4a:bf:fc:08:c7:a5:60:ba:e1:01:10:05:
d0:94:8b:56:a6:21:7e:54:c7:a8:ba:ea:cc:2e:92:
62:b4:9b:9b:73:5b:b2:c6:36:07:18:c7:f1:19:6d:
8e:7d:a6:f0:39:86:75:0c:fb:fd:de:9a:9c:16:42:
b8:80:6d:3d:75:1c:83:3d:f3:d2:76:f5:08:fa:e1:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C5:8E:61:9F:A0:68:09:B3:9A:D0:07:42:AB:5D:C2:A9:7E:50:2F
X509v3 Authority Key Identifier:
keyid:47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7b:53:0c:21:19:92:55:8f:a0:aa:5c:e0:10:d2:b5:bd:83:
02:13:b3:16:d5:c9:93:0b:ca:17:6b:dc:70:36:55:40:ab:00:
33:31:5d:b6:70:68:d5:77:77:9e:ca:55:4d:f1:b1:6a:14:b8:
30:53:01:75:b7:79:1a:c2:97:ff:15:0c:4d:a5:ef:09:b6:31:
54:f2:b5:1f:11:41:d2:cb:f3:6c:f3:13:74:e7:1f:7c:eb:6e:
24:4b:a5:1e:04:c4:cb:31:1d:bc:ea:4d:f9:20:71:a4:56:d7:
a4:23:ab:f4:f3:1b:91:5b:4f:00:c8:de:a1:14:11:5b:75:b9:
6a:35:25:3c:f8:97:5e:50:d3:52:1a:21:44:ec:90:62:fe:fc:
cc:1a:96:bf:d2:cf:d1:4a:90:ee:ef:3b:f3:ae:ef:36:43:2b:
c6:18:34:7d:10:d4:c6:c6:26:8e:22:5a:ab:b4:e6:73:ba:f8:
56:aa:19:c7:e6:e1:1b:f7:d7:a8:15:7e:51:a1:87:2d:e9:7e:
34:cf:a1:fd:6f:d2:3d:91:8d:55:ea:e4:70:6b:dc:b1:ee:b2:
a0:05:b7:e1:a5:44:1b:91:de:7b:d0:8e:a9:7f:a3:17:2e:60:
92:f6:bc:c0:83:4a:8b:2e:65:cd:19:f5:10:44:e2:7d:09:03:
15:67:3c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:11:44 2026 by rpki-client