Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: RVfzph+Pv333R5M8H8WD2Db6Fu1HJL70xj9pny/g9VI=
Subject key identifier: 01:61:02:BC:42:06:91:36:02:60:53:53:FE:B7:86:0A:08:9D:EE:CE
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 019FA9AB9DEC06850E27F7FBB0659D3F3053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 0D01
Signing time: Tue 28 Jul 2026 17:00:24 +0000
Manifest this update: Tue 28 Jul 2026 17:00:24 +0000
Manifest next update: Wed 29 Jul 2026 17:00:24 +0000
Files and hashes: 1: 1_qKx7XK-VslkQaQcY5wLcf-kY4.roa (hash: aIIfDPGVCndIRJ9cOc5IQ8o5NAq5xG4vSe+WEowhC+8=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: wbSwifnd+xWxgNtINcn5MASG4SgPAjerwk6Fcwh1S6g=)
3: v1Q5deDRNaYN2rkW1eCtdP2QCKw.roa (hash: h5DLp92XQ3AvM1H/BlIZUWuG5teJsgAD0mDg6kM2v3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:9d:ec:06:85:0e:27:f7:fb:b0:65:9d:3f:30:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Jul 28 17:00:24 2026 GMT
Not After : Jul 29 17:00:24 2026 GMT
Subject: CN=016102bc4206913602605353feb7860a089deece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:d2:bc:53:48:ea:eb:f5:98:4d:d5:c3:27:
0e:a9:64:8a:b6:31:91:4e:ff:b2:f6:f6:2a:a6:9a:
58:5d:49:e6:df:e1:40:a2:3b:b7:2f:36:2c:c3:89:
66:db:aa:a8:51:39:aa:aa:f4:28:ac:9f:df:d9:a1:
77:5b:74:13:8d:71:23:38:7b:94:b3:9b:95:58:2a:
76:a8:a0:aa:d7:cf:47:36:c9:9f:19:0a:94:e6:c9:
57:db:a9:da:f2:42:3d:1c:4b:5e:58:18:54:0b:c9:
e3:9f:6d:91:31:19:2d:2b:ac:fc:7b:1b:10:f3:42:
1a:64:93:3c:75:79:da:4f:34:87:6a:56:2d:07:0f:
66:61:5d:31:ed:48:5f:82:b7:8b:dd:e1:a5:b3:6b:
25:17:86:5d:4c:9b:28:40:95:e5:c0:1d:e0:a3:56:
10:79:d8:9f:3b:b7:21:bb:7e:27:bc:7b:69:ae:9a:
28:41:11:8b:6f:8c:06:be:c0:7a:22:6e:ed:52:61:
a1:c7:e4:f1:92:0f:86:da:c5:57:2a:64:c0:96:8b:
75:c8:b2:f2:60:bd:b5:1c:83:47:a7:00:6c:78:81:
dd:b1:36:6c:97:fb:4d:8f:72:c5:b7:5d:60:92:b4:
37:70:d6:58:1c:92:59:43:27:34:6d:af:e6:d2:95:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:02:BC:42:06:91:36:02:60:53:53:FE:B7:86:0A:08:9D:EE:CE
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:63:1a:25:d9:29:d6:d2:e1:fe:8f:8d:af:77:86:36:37:dd:
83:04:81:cc:6e:8f:d2:5c:d4:ae:3e:fb:41:02:29:a6:e2:90:
86:cb:d4:5e:b8:d8:2a:a1:96:9f:48:28:5f:df:c2:fb:ba:72:
78:04:15:38:18:82:2e:b0:96:c0:f0:c9:e8:d6:c2:e7:32:79:
14:e3:4b:9b:58:7b:cc:25:0c:95:88:93:b4:34:55:7e:1d:f9:
e3:37:8e:52:70:e2:2b:62:d1:d7:84:58:e5:20:b7:34:aa:93:
54:9f:59:38:5a:58:42:c1:0b:e4:04:db:23:2b:75:f9:de:88:
83:fe:38:e2:84:71:b3:3e:b5:09:fa:6e:0c:37:32:3a:94:48:
0f:73:a9:11:d4:3c:91:62:2c:21:73:ae:88:d4:ac:8e:d3:b2:
ef:09:32:fd:05:64:53:15:5e:f9:6a:e9:f2:b5:96:15:9c:4b:
db:96:48:18:b5:27:db:12:1b:2b:c8:cd:bd:a0:02:c8:5d:8d:
7b:76:0c:96:3b:00:51:35:7c:9a:3b:8f:17:dd:63:c7:b8:51:
3b:a8:21:f7:bd:ee:2f:02:45:9e:1d:39:2c:3f:28:e1:1d:a1:
7f:c8:13:d2:83:a7:0d:31:12:65:df:c3:88:71:cc:68:44:0b:
30:40:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:12 2026 by rpki-client