Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: Z2lNjxI+x7FUMhnraJFnH8LtDRbBO6g9M537FUAaVPg=
Subject key identifier: 25:9E:FE:AF:42:DD:42:E9:47:46:E7:61:0C:82:CC:49:12:E4:7E:18
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 019D9A74C13B58715C6A2E39E96B760C9EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 0BF0
Signing time: Fri 17 Apr 2026 08:00:35 +0000
Manifest this update: Fri 17 Apr 2026 08:00:35 +0000
Manifest next update: Sat 18 Apr 2026 08:00:35 +0000
Files and hashes: 1: 1_qKx7XK-VslkQaQcY5wLcf-kY4.roa (hash: aIIfDPGVCndIRJ9cOc5IQ8o5NAq5xG4vSe+WEowhC+8=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: ZJkEe+utNbKL7OIS6cm4Hr7tolTOp7yFM2S5Sv4yxHQ=)
3: v1Q5deDRNaYN2rkW1eCtdP2QCKw.roa (hash: h5DLp92XQ3AvM1H/BlIZUWuG5teJsgAD0mDg6kM2v3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:c1:3b:58:71:5c:6a:2e:39:e9:6b:76:0c:9e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Apr 17 08:00:35 2026 GMT
Not After : Apr 18 08:00:35 2026 GMT
Subject: CN=259efeaf42dd42e94746e7610c82cc4912e47e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:5b:9b:29:21:32:41:e5:19:0b:d8:0c:ce:
93:5c:23:c6:63:06:7c:18:c6:c9:fe:6a:ae:5a:78:
ed:de:d6:4c:31:ce:03:a6:da:3e:9d:81:91:52:99:
21:8f:9a:30:b9:37:86:97:72:6b:e9:ac:d7:24:4f:
84:af:22:d9:61:83:e7:70:b9:79:87:e0:60:3a:60:
9a:ab:13:d1:d2:bd:36:7e:9e:e3:49:eb:37:f2:11:
80:63:74:80:80:2e:7d:cd:4e:46:f8:b6:6e:74:33:
51:2f:ac:2c:1b:59:5d:52:92:ee:0d:c7:d1:d7:a2:
d0:e8:aa:34:1b:d2:85:cf:08:6b:cd:13:fe:c2:b7:
1c:99:ac:f6:46:0f:d3:26:d0:e0:56:aa:85:cd:06:
4f:33:90:d8:8f:02:42:04:7a:14:c9:b6:20:25:b9:
16:39:26:4a:c4:9e:e4:41:49:1c:fa:0a:ba:f8:89:
f3:56:ba:fe:c0:d5:8d:42:b3:d6:b3:4f:a4:69:26:
7a:87:2b:a9:13:1b:2d:ba:e3:4a:38:46:71:8e:c4:
09:f7:87:17:db:2a:73:15:e7:24:7c:7b:cd:70:cc:
c6:42:be:72:56:7b:1e:c4:4a:aa:02:fd:90:0a:b1:
b3:c3:c8:c2:b1:25:59:33:56:ac:ce:af:62:27:67:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9E:FE:AF:42:DD:42:E9:47:46:E7:61:0C:82:CC:49:12:E4:7E:18
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:df:af:13:ba:76:98:1b:ef:3a:11:22:e2:d9:06:64:a3:5d:
32:b4:2b:22:89:f4:5b:51:66:b5:40:b3:99:09:3b:19:a2:4d:
37:46:1a:a1:71:a3:64:9b:a9:c1:0b:9a:07:86:4c:f3:42:c9:
7a:a0:13:89:25:2e:b3:89:17:f9:35:19:5e:19:b6:c6:8b:9e:
7f:6b:04:86:9a:f5:00:b5:5b:a2:48:bd:b2:fb:2f:e6:a3:78:
b3:0e:4e:f3:d8:bb:d8:5b:97:2a:98:31:d5:d7:e7:de:88:41:
08:29:d8:cf:98:7f:ee:06:e8:2d:7f:0a:9c:ae:91:1f:23:d7:
96:8d:27:11:09:bb:45:61:7f:8d:ec:a2:e4:18:bf:af:00:84:
72:57:b8:02:83:28:4d:f1:95:2d:f7:05:a8:51:ff:55:10:d4:
ec:eb:d5:31:06:92:90:3f:81:62:b8:6c:53:33:97:49:fa:6f:
19:3c:9f:8e:4c:0d:ea:b3:b0:f9:d5:63:d4:0e:62:d5:61:61:
dd:c7:6c:06:d4:cd:5c:e4:f8:20:e5:fe:3d:8d:78:41:b9:cf:
e7:74:06:fd:db:82:ba:b4:a3:0a:9d:4f:b0:81:fe:14:9b:70:
66:15:10:dc:d7:76:1a:cb:ce:c1:49:4f:af:cd:1f:2f:25:ac:
a5:04:28:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:40 2026 by rpki-client