Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier: kqNCAM+9HW/lrNsfv+RfkMX8ZoV0CiUXyEqranCS2Q8=
Subject key identifier: BA:83:52:3D:DF:30:EB:23:E9:95:7F:F9:55:2B:09:1B:7A:6B:24:02
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 019CACB4CEC00585A20D40BFD2565C8CE46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 04:00:56 +0000
Manifest this update: Mon 02 Mar 2026 04:00:56 +0000
Manifest next update: Tue 03 Mar 2026 04:00:56 +0000
Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: XrllPYSz7GUc5tUmWihJNKAhNVxTV03ejIrVgI2zNS0=)
2: CshAZZODRLNLmNGlI2avtLyw1y8.roa (hash: Hf1RE2bw+HGP7b/6j+X1+6eXzCajo5UkBDMdWtNUDgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ce:c0:05:85:a2:0d:40:bf:d2:56:5c:8c:e4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Mar 2 04:00:56 2026 GMT
Not After : Mar 3 04:00:56 2026 GMT
Subject: CN=ba83523ddf30eb23e9957ff9552b091b7a6b2402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:59:3d:7d:0f:fd:02:1d:0b:51:33:0e:3c:
da:73:42:46:76:21:d3:5f:61:09:11:05:fa:3e:59:
bd:8c:c8:23:df:d8:7e:16:54:a5:d3:42:15:fc:3f:
a7:9d:1b:b1:9a:c0:ec:64:cc:57:26:61:3e:5c:c6:
c1:f0:b1:15:d4:b0:23:14:95:17:b6:b7:ac:6b:d3:
59:9e:d6:e4:27:18:a1:7d:27:a0:23:38:38:bf:1e:
66:21:e6:ca:79:8a:18:5c:fe:22:e3:cf:d4:2a:ee:
99:7b:8e:9e:2f:ec:79:7f:af:8d:22:6f:12:72:59:
8d:e8:ac:f7:16:f5:8f:bf:49:97:38:20:ea:f8:f6:
aa:39:9d:a7:5b:7b:33:a1:de:66:66:e6:8e:12:a5:
14:d6:a7:2c:e6:7a:63:3a:f6:d5:42:63:31:f2:56:
e4:02:66:7c:6d:a0:4e:af:a1:51:3e:3f:8e:86:23:
9e:98:69:f3:65:ee:a5:14:0b:8a:35:f1:d0:b8:48:
4d:ec:b8:95:81:28:58:28:b6:d0:a8:5f:88:7d:3d:
05:7a:bd:f4:f9:b8:65:e5:a2:ce:48:67:d0:6b:15:
65:2a:b6:bd:a1:40:ac:84:88:23:37:20:74:77:a3:
c8:1f:e1:b5:45:61:af:37:bb:47:d2:7c:80:e8:b8:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:83:52:3D:DF:30:EB:23:E9:95:7F:F9:55:2B:09:1B:7A:6B:24:02
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cf:19:a7:34:be:c7:d6:5c:08:7a:f2:37:a3:75:1d:e4:70:
36:48:7b:a6:7b:91:85:bd:0d:fb:98:97:60:65:07:91:78:57:
df:c9:e3:ec:41:41:60:f6:b7:18:be:d1:31:58:93:e9:7e:fa:
5f:54:55:83:7f:64:27:a9:61:ef:3f:36:f2:8f:dd:5e:4c:09:
a7:09:0c:f0:05:fc:b9:0c:11:75:74:36:68:76:d3:79:b7:f7:
94:d3:23:fb:10:65:4f:36:5a:5d:65:ae:10:2c:e5:f5:1c:9b:
9c:97:c5:5a:1c:34:b0:e1:80:40:86:dd:8f:6f:28:b8:80:96:
22:b2:01:ff:58:e0:8b:ad:4d:1a:50:2f:13:00:c8:e1:8b:ec:
6a:77:48:5a:0a:ec:b5:27:bf:24:2d:ed:64:8a:e7:d4:d7:dd:
77:92:20:cc:8b:59:a6:1d:5b:bc:4e:c7:3f:cd:80:2c:1b:17:
bb:17:79:c1:7d:97:a9:7d:f2:5e:35:62:ff:d2:12:5e:a3:e3:
59:ab:4c:57:5a:05:49:df:da:1f:c0:fc:37:7a:5b:1d:ad:e6:
2a:a9:57:32:3d:e3:52:c4:02:a5:33:01:6c:ac:7b:f7:62:53:
5b:50:c2:05:31:57:53:2d:91:36:6f:94:23:87:17:e2:cd:ba:
c8:4c:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:42 2026 by rpki-client