Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: C/hGDQJzaZXq1FoCGyrdMGcjs5uyj5tt+xwZtUOXO4A=
Subject key identifier: D3:31:9B:FB:72:EA:E2:F0:90:12:2D:65:00:95:1F:F4:1F:7F:9B:84
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 019EBFFF2D500277905F5D5B140C30D645F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 0C88
Signing time: Sat 13 Jun 2026 08:00:31 +0000
Manifest this update: Sat 13 Jun 2026 08:00:31 +0000
Manifest next update: Sun 14 Jun 2026 08:00:31 +0000
Files and hashes: 1: 1_qKx7XK-VslkQaQcY5wLcf-kY4.roa (hash: aIIfDPGVCndIRJ9cOc5IQ8o5NAq5xG4vSe+WEowhC+8=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: tQZhhL0QNGb3/dnt00mrNn8PEZmtVSyMx0PpZQ78z4k=)
3: v1Q5deDRNaYN2rkW1eCtdP2QCKw.roa (hash: h5DLp92XQ3AvM1H/BlIZUWuG5teJsgAD0mDg6kM2v3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:2d:50:02:77:90:5f:5d:5b:14:0c:30:d6:45:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Jun 13 08:00:31 2026 GMT
Not After : Jun 14 08:00:31 2026 GMT
Subject: CN=d3319bfb72eae2f090122d6500951ff41f7f9b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:bf:84:07:8f:20:d0:aa:30:10:68:68:64:
72:56:e2:23:f3:1e:93:ea:43:63:5a:6c:41:98:61:
83:34:2a:b3:aa:e8:88:7d:38:2b:05:cf:ee:06:80:
06:37:27:3b:1b:69:57:bc:80:a0:5c:f8:0a:59:ce:
9b:ee:2d:d9:28:01:11:aa:8f:4d:ce:2f:0b:0f:24:
ba:d4:13:d6:83:9c:0b:e3:62:f0:df:f4:d4:90:8e:
21:89:da:d5:6b:46:4d:ac:d3:be:02:e8:ef:34:1f:
24:c0:03:cd:c3:93:f2:11:bd:39:b2:84:86:71:e4:
81:29:ee:09:5e:6e:39:9f:74:62:34:90:15:08:54:
ad:d8:f3:91:b0:b8:27:9c:08:35:ea:50:ee:44:16:
5c:71:f9:6e:ac:11:ed:64:a9:ec:b5:54:30:88:23:
39:c4:83:3c:f6:b7:fc:e8:b9:0c:f5:71:c8:52:64:
20:5f:89:7e:05:b5:14:9c:30:d8:ad:94:fa:88:63:
22:98:de:1f:c6:c2:c0:a1:ca:ba:ce:db:fe:27:e8:
55:f5:0d:79:6c:01:97:cd:17:a7:89:a8:82:24:cd:
37:48:ae:62:26:10:ed:88:16:f3:60:23:8a:d1:a3:
e4:91:ac:3b:ec:cb:3f:82:ba:13:55:ba:28:4b:11:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:31:9B:FB:72:EA:E2:F0:90:12:2D:65:00:95:1F:F4:1F:7F:9B:84
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a7:54:7f:fa:6a:f5:38:a1:9c:f1:8d:92:54:7e:d1:61:c7:
10:94:29:6c:2a:e1:62:91:93:e2:44:31:b6:53:bc:de:e7:ad:
df:94:8f:a5:b6:d9:10:40:8a:90:9f:8d:a1:bc:ba:8a:6d:72:
8f:96:d8:0c:93:85:04:9a:4e:d0:df:45:6c:d2:09:d2:c7:7c:
47:4b:7f:29:e8:f8:bf:88:88:e3:8f:50:9a:2e:b9:f3:e3:20:
0a:5a:c1:4e:81:91:f1:6e:dc:5a:81:84:60:af:23:77:e2:b3:
86:f2:0c:94:78:f9:65:6f:9c:db:03:58:3c:e0:b5:1a:43:85:
84:16:8d:76:e7:7f:de:ad:77:ec:f9:29:da:2f:84:bc:3f:7a:
65:34:e2:53:82:92:3d:ba:05:99:1d:77:b6:65:f5:fe:53:25:
b4:8b:d9:90:dc:56:53:cd:02:9e:57:7e:21:c4:7b:8c:91:cc:
d4:04:ff:bf:e7:e4:c9:38:7c:50:ee:34:e2:e5:4b:5e:30:28:
1a:1e:ac:cd:85:0c:50:67:fd:b0:2a:bc:1a:c9:34:ac:9e:07:
e3:e2:40:ec:83:7e:6e:de:9e:bb:11:4d:7a:cd:99:69:20:3a:
70:1f:f5:6c:9a:00:9b:58:0a:b3:ad:13:ad:66:c2:df:e9:25:
6d:53:6c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:55 2026 by rpki-client