Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: ypzIjG69hZx78mrJSacBO4E01gWKTRhT8F7qKllXuwg=
Subject key identifier: 15:7A:0E:A1:8E:E4:4B:9A:5F:84:D1:33:67:B2:81:AE:49:7D:F9:9E
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 019FAA879BEEF6669D9E9CEDF546A684FEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 08D3
Signing time: Tue 28 Jul 2026 21:00:41 +0000
Manifest this update: Tue 28 Jul 2026 21:00:41 +0000
Manifest next update: Wed 29 Jul 2026 21:00:41 +0000
Files and hashes: 1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: cag5XqptN8bH01NJeM/274iIrvMsMyTxNXvblDitVC0=)
3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:9b:ee:f6:66:9d:9e:9c:ed:f5:46:a6:84:fe:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Jul 28 21:00:41 2026 GMT
Not After : Jul 29 21:00:41 2026 GMT
Subject: CN=157a0ea18ee44b9a5f84d13367b281ae497df99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:99:eb:36:c9:5b:13:e2:78:b2:c9:f7:20:
00:ba:06:77:5f:48:3a:f5:44:ea:77:b6:d3:d6:2a:
23:95:21:49:b4:bf:76:8c:cb:ad:6e:bc:ae:15:2d:
e2:0d:c1:25:06:f1:4f:dd:ed:e7:74:2b:3b:05:17:
fd:e1:a0:87:1e:40:11:9f:2f:99:a0:9b:48:14:4e:
b6:a1:ac:b9:b7:08:cd:34:03:bd:f8:00:28:6f:15:
58:5d:f6:b9:c4:13:ff:b8:5e:2f:d1:4f:a3:03:a1:
19:8e:14:76:9f:ff:29:df:1f:78:26:5e:50:d4:77:
c7:aa:bf:2b:b4:8f:cf:35:84:93:75:53:57:d4:1b:
22:8c:81:e4:b8:a2:0c:6a:3f:4b:d2:8e:30:ea:93:
4e:b2:f2:ba:3c:48:73:cf:9a:d8:e9:09:d3:d9:0c:
f4:b1:dd:37:22:03:bc:57:a6:74:43:5f:72:09:fa:
eb:77:e2:69:80:d5:5c:8a:00:92:48:1d:a4:f0:23:
9f:aa:d4:da:76:9b:17:d1:d7:38:04:49:66:78:48:
fa:80:8f:d5:0f:31:77:64:e9:2f:b1:8a:7b:3b:d8:
8d:4e:77:d8:34:e4:d3:a2:3d:66:00:bb:15:a5:1e:
f9:ea:08:38:dc:fb:42:40:cf:a9:cd:1d:86:ef:ee:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:0E:A1:8E:E4:4B:9A:5F:84:D1:33:67:B2:81:AE:49:7D:F9:9E
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9c:16:3e:b2:c8:49:62:18:c6:ef:21:5a:25:ee:37:bf:46:
5a:47:0a:88:19:43:d7:64:db:d9:3c:59:8a:e1:61:d2:52:4f:
f4:e8:c2:36:1d:36:58:ea:e3:91:ee:67:11:4b:63:60:b2:44:
a3:fc:61:b8:50:6a:ed:83:19:0b:1c:3a:16:b7:04:ca:36:98:
02:f8:6c:2b:9c:29:f3:f5:e3:d4:22:75:b1:ff:21:02:df:79:
4d:ed:2a:9e:5a:a1:f9:8c:66:6c:55:2d:91:83:2a:37:25:da:
82:89:4b:16:a6:1a:97:05:47:a6:c7:c4:1a:dd:e0:37:22:50:
43:e0:8d:cb:cc:74:c6:94:80:d5:54:15:54:d6:9f:59:0c:bd:
d8:cd:13:83:c1:4c:88:03:59:a5:5c:c0:46:ba:1d:9d:c3:8a:
b5:f2:53:16:0a:ea:68:66:65:5b:a7:d5:08:43:6b:fb:ab:42:
79:e2:bd:20:e6:71:a9:8b:ec:68:4b:1e:a8:e4:65:b8:79:63:
cc:1d:53:9d:95:8f:94:c5:64:e5:12:ee:fd:1d:ee:fb:ef:55:
9c:16:ab:ec:3b:8d:ca:3b:9d:3c:61:9f:9b:df:ad:49:26:e6:
e8:83:de:39:39:63:b7:bb:0c:35:c7:23:2e:26:54:72:78:49:
27:47:ce:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:15:52 2026 by rpki-client