Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: nTfZt4N9r1PI1r23apFz9r8ZT6wdGSodVdxCWta0wbU=
Subject key identifier: EB:A6:F0:D9:0A:F3:23:97:32:D9:F2:AC:D0:91:2E:1A:AD:0D:28:A1
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 019EC1B73F048BFEE61B07D06A47F4A49CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 16:01:12 +0000
Manifest this update: Sat 13 Jun 2026 16:01:12 +0000
Manifest next update: Sun 14 Jun 2026 16:01:12 +0000
Files and hashes: 1: 5_doYFv7yc7pk0TQwTiDRsnYDyk.roa (hash: roZ57WpPuuxZ3dcx0tH7+LdHwoSOY302cY6k9E5x4os=)
2: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: I9WCA3LEAxLSqkBAc29i6iZlF9iDAifPcRJSU92B+sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:3f:04:8b:fe:e6:1b:07:d0:6a:47:f4:a4:9c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Jun 13 16:01:12 2026 GMT
Not After : Jun 14 16:01:12 2026 GMT
Subject: CN=eba6f0d90af3239732d9f2acd0912e1aad0d28a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:5e:22:92:9f:5e:86:54:0b:b9:59:e4:6a:
5d:ab:f4:54:d6:d0:b6:10:02:1f:de:94:0c:4f:9a:
05:b2:30:16:99:5b:a8:cc:7f:cc:88:05:08:a4:9b:
33:13:85:2b:78:d3:92:d0:96:6e:8b:cb:3b:17:dc:
40:f9:05:3c:aa:ff:f0:c4:a4:88:95:d7:65:9f:12:
e0:fe:e2:06:bc:67:b2:3d:31:8e:51:15:6c:16:5a:
68:22:32:b2:07:da:e1:3d:94:16:30:9d:84:9d:ba:
85:ac:1f:a8:38:2d:a4:8d:1a:69:6c:8c:11:b8:05:
99:75:5d:2f:7b:3a:1d:d2:39:7a:fa:93:d6:f4:5d:
d3:ea:6b:68:6d:76:a9:b8:99:49:26:ea:73:3a:66:
85:76:4b:e6:b3:93:b0:1e:a3:7f:f3:b1:93:e3:a9:
7e:ac:b8:68:08:51:b1:e0:d8:3e:7c:bf:ca:1e:33:
e7:1e:dd:a3:19:52:33:f2:91:0e:8d:f8:d7:65:ed:
b6:ff:f0:cc:f3:f9:48:35:0e:ed:24:d8:3a:78:c0:
11:47:ce:aa:38:f8:f8:0e:b1:b0:88:99:aa:c3:ce:
11:69:88:8d:01:41:f5:db:42:74:2a:b5:0e:33:70:
a2:70:ea:d6:2c:cb:88:93:f1:d5:0a:30:fa:76:ac:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A6:F0:D9:0A:F3:23:97:32:D9:F2:AC:D0:91:2E:1A:AD:0D:28:A1
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d4:c1:56:18:68:21:1a:0b:db:f3:67:c7:44:13:fc:47:16:
40:6b:fe:95:94:05:21:65:e9:dd:a4:da:ba:fe:6e:60:1e:e0:
08:da:97:dd:47:8e:9b:21:1f:76:37:c0:85:6b:1a:69:a1:9a:
91:4b:7f:23:1a:23:53:83:27:74:68:a3:92:03:8d:cd:1a:aa:
e1:f4:f0:a4:15:59:f8:38:3e:c9:f6:9e:ff:52:07:3e:75:b1:
35:16:22:8e:e6:30:0f:4d:b5:fb:5a:11:cc:7f:c2:87:53:84:
b5:c7:48:15:75:b1:4a:36:c5:3d:54:af:73:c9:8e:ca:8e:51:
a6:02:7c:54:ee:a9:ca:4b:55:4c:a2:fb:4a:8b:e4:ef:d4:bf:
7f:f6:f9:28:ac:9a:45:bb:10:30:bb:bf:e1:46:58:ec:88:e0:
cd:06:5b:f0:47:e7:f6:35:c7:d7:2c:30:98:37:81:04:ec:10:
27:48:18:5f:c2:70:4a:c4:ef:07:6b:46:55:5d:06:1a:ec:ba:
cd:d5:6c:69:c6:b6:f7:5e:44:07:80:54:c6:f1:ea:0d:1f:9c:
33:4c:2c:33:11:54:67:84:29:ed:44:46:f2:88:f5:93:a2:52:
4a:bc:9f:7d:de:1b:75:29:99:12:f2:74:b0:5e:2e:14:26:aa:
d9:28:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:09:59 2026 by rpki-client