Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: 8/ej5gAgoMcem2BVqxGhSd5v4/LOLmcTqZzG3WloBr8=
Subject key identifier: 93:59:CC:27:1D:35:8F:27:A9:74:FA:E1:29:2D:7F:FA:0A:7E:60:D5
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 019CAAFD5F4B64F2E1E1E20DE8E85BF7EFB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 0B74
Signing time: Sun 01 Mar 2026 20:00:57 +0000
Manifest this update: Sun 01 Mar 2026 20:00:57 +0000
Manifest next update: Mon 02 Mar 2026 20:00:57 +0000
Files and hashes: 1: 1_qKx7XK-VslkQaQcY5wLcf-kY4.roa (hash: aIIfDPGVCndIRJ9cOc5IQ8o5NAq5xG4vSe+WEowhC+8=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: Bxrq62orDHGQqjFZopRNlY28yopq1DupMq8hoLQ/5Gs=)
3: v1Q5deDRNaYN2rkW1eCtdP2QCKw.roa (hash: h5DLp92XQ3AvM1H/BlIZUWuG5teJsgAD0mDg6kM2v3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5f:4b:64:f2:e1:e1:e2:0d:e8:e8:5b:f7:ef:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Mar 1 20:00:57 2026 GMT
Not After : Mar 2 20:00:57 2026 GMT
Subject: CN=9359cc271d358f27a974fae1292d7ffa0a7e60d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:df:05:cc:d4:9f:5b:27:e4:98:f1:9a:02:
e9:f4:c2:81:fa:64:63:fc:70:f2:b9:53:f9:1a:02:
6d:61:60:f5:6d:3c:72:96:6c:7c:7c:c6:a8:87:94:
ab:b4:c8:b9:0e:2a:ea:d2:83:ea:d6:bb:e4:f0:20:
af:1b:de:87:8d:b9:0e:39:55:af:23:c2:c4:fa:57:
c9:23:91:ab:3b:0a:89:51:a9:b4:b1:f0:28:d2:0a:
48:e1:1e:07:d0:87:81:5a:72:65:3d:eb:ea:eb:c6:
c2:a1:8f:e6:84:f2:8d:ba:23:18:90:d3:8a:7d:ff:
c3:1c:2d:7c:bd:cb:35:fb:a7:9f:27:42:8e:90:4e:
c0:dd:d2:2b:d4:72:a1:72:38:92:60:ba:5e:22:c7:
2b:35:6c:81:96:13:8e:b4:ac:b7:96:5d:e1:4a:71:
e0:2c:12:2e:ef:c1:a7:49:aa:17:f8:f2:4f:06:3c:
8d:c5:8e:55:72:23:8c:6e:7a:83:40:bf:5b:8e:8d:
64:f4:46:0a:01:51:f1:a6:98:3a:cb:85:ea:20:9c:
ac:31:84:b3:06:b7:e7:a2:59:31:b0:27:6c:64:ad:
6c:2c:ea:1b:88:57:e8:ef:e3:b8:79:20:d4:55:14:
74:7b:db:22:02:cc:b3:ad:e4:c6:d8:db:95:7c:9f:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:59:CC:27:1D:35:8F:27:A9:74:FA:E1:29:2D:7F:FA:0A:7E:60:D5
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:85:ba:54:44:e3:ca:4d:5c:65:69:ec:c1:41:16:53:92:28:
41:90:ad:67:e1:23:4b:84:09:1f:a7:4e:72:8f:cb:c9:e0:37:
da:d1:26:f0:21:00:1b:27:31:a3:d5:11:53:69:1e:1b:fb:0b:
7c:b6:05:56:15:36:48:fb:cf:71:d8:20:96:8d:0f:6d:c3:2f:
af:98:71:78:df:d6:f9:ec:64:57:97:48:0c:59:29:0a:62:dc:
43:1d:5c:4f:f2:4d:3c:4b:22:92:64:da:00:fa:c1:7d:52:ca:
08:cb:79:03:fa:14:a8:b2:35:b6:3b:54:f1:d6:c1:a7:f1:5a:
d1:af:ab:67:ae:35:a1:4f:c8:f8:38:6a:c5:5d:09:7f:f2:cf:
32:58:a8:b1:b7:c2:4e:98:9c:b6:23:3e:26:52:6b:fb:48:e6:
84:c6:a1:4b:b6:9a:df:fc:fc:2d:1f:70:b8:ae:32:bf:d5:7f:
82:54:98:a7:31:2c:59:ca:b6:9e:72:ed:2b:7f:11:d9:f6:fa:
62:bb:e8:cb:9f:37:72:67:4e:c2:94:bb:16:c4:d4:97:fb:84:
66:29:a0:dc:ca:5c:b4:53:f2:0a:e3:f0:3d:a0:f0:b7:95:9e:
a0:cd:97:82:51:00:62:2a:bf:1d:8c:02:c2:0d:cc:7b:5b:a5:
ff:2f:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:33 2026 by rpki-client