Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier: Yu1t2o2ocBj9mK3zz6Eq8t9oZYYeMDSV4V7Jwqpwe+k=
Subject key identifier: 67:A3:A7:0B:02:9A:38:08:E2:9E:C3:4A:C4:3C:BC:DD:5F:78:7A:02
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 019CAAC6F92C4E9509F0218E7C2833D3768D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 19:01:32 +0000
Manifest this update: Sun 01 Mar 2026 19:01:32 +0000
Manifest next update: Mon 02 Mar 2026 19:01:32 +0000
Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: 3+m91DENANkYPRTQZ7cbbuIYWUoxnIzHWew0l848PV0=)
2: CshAZZODRLNLmNGlI2avtLyw1y8.roa (hash: Hf1RE2bw+HGP7b/6j+X1+6eXzCajo5UkBDMdWtNUDgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f9:2c:4e:95:09:f0:21:8e:7c:28:33:d3:76:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Mar 1 19:01:32 2026 GMT
Not After : Mar 2 19:01:32 2026 GMT
Subject: CN=67a3a70b029a3808e29ec34ac43cbcdd5f787a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:50:09:b2:17:72:dd:cc:71:7f:bc:ba:94:56:
b5:23:7a:b6:ba:82:6e:35:62:e9:83:70:3c:2f:f0:
7d:80:da:5b:89:97:06:5f:cf:10:28:3b:72:f7:44:
79:0f:68:c9:7f:17:db:fd:83:71:3c:47:81:3c:ef:
0d:61:75:ba:56:c9:7b:34:7e:01:17:eb:78:b8:44:
d6:3f:3e:bf:3e:42:ab:da:fa:42:0d:bf:11:a0:39:
35:c1:41:c7:83:23:b4:9c:ef:d5:6d:dc:7c:b6:2b:
ec:99:cf:6a:7d:28:cf:b8:b8:8d:22:c1:3d:80:a9:
32:ec:90:be:4a:83:0e:34:95:aa:eb:c8:73:c0:09:
81:fe:75:69:d4:59:51:c8:91:af:32:27:37:90:a4:
46:37:75:0b:99:e3:0e:ea:8a:72:d6:78:f9:8a:6b:
be:6a:17:93:c0:c5:7d:30:c7:d8:f9:fb:4b:98:c5:
ba:80:53:73:5d:a0:48:13:85:cd:5e:02:3e:17:55:
7b:49:7d:72:46:f6:31:cd:b2:22:20:92:2d:e2:b8:
2d:61:e1:09:f3:5a:df:b4:a0:ff:b7:74:87:14:62:
bc:45:4c:32:a4:d2:0a:aa:88:84:bc:22:f6:c4:da:
dc:fc:55:9e:7e:8e:57:d7:a6:db:a7:5e:6f:02:d2:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A3:A7:0B:02:9A:38:08:E2:9E:C3:4A:C4:3C:BC:DD:5F:78:7A:02
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7e:dd:2e:97:f9:cb:52:e6:85:da:89:bc:b2:1b:0c:4e:21:
71:f2:d9:a9:ce:1d:2f:18:a4:0e:5a:27:99:a5:77:74:fd:94:
9d:b2:f3:f3:2b:01:cf:ec:67:4c:0e:28:77:96:1f:34:18:b6:
74:ab:a8:c2:2f:d4:55:8b:c7:5b:0a:ce:cf:78:1d:3f:3f:e7:
c3:3b:27:a5:74:67:70:6a:70:03:f0:57:50:7b:57:9e:ca:cb:
5a:a8:c0:6c:00:69:21:3b:ec:43:f5:0c:15:f9:4c:fc:a2:c3:
85:72:9c:dd:3f:e6:1a:12:53:45:97:eb:e2:62:7f:3c:b4:cd:
4f:b7:40:c9:da:51:17:a4:fb:8d:99:9d:fa:86:5b:5d:42:c3:
12:68:97:d6:06:42:ab:13:47:08:55:11:aa:1c:86:89:de:9a:
9f:74:9a:d9:1b:24:c2:8d:9e:be:68:c7:74:75:f3:ff:7e:92:
01:d6:32:81:c6:fb:f8:06:51:7e:8d:c0:89:fb:60:56:6b:da:
7e:36:66:2c:ea:66:c4:a0:e1:91:a3:62:72:b9:a3:58:f3:62:
e1:96:dd:0c:fa:33:c4:ee:44:52:a8:cb:36:e9:18:eb:e1:77:
2a:68:d3:72:07:24:15:36:8c:ef:6d:0e:eb:9a:c2:be:3f:26:
1f:55:fb:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxvksTpUJ8CGOfCgz03aNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYjM1OTU2YTQwMzhhMDkzOGNjZGE4NTU5MmFkNTMxZTRh
ODgzYWQwHhcNMjYwMzAxMTkwMTMyWhcNMjYwMzAyMTkwMTMyWjAzMTEwLwYDVQQD
Eyg2N2EzYTcwYjAyOWEzODA4ZTI5ZWMzNGFjNDNjYmNkZDVmNzg3YTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VAJshdy3cxxf7y6lFa1I3q2uoJu
NWLpg3A8L/B9gNpbiZcGX88QKDty90R5D2jJfxfb/YNxPEeBPO8NYXW6Vsl7NH4B
F+t4uETWPz6/PkKr2vpCDb8RoDk1wUHHgyO0nO/Vbdx8tivsmc9qfSjPuLiNIsE9
gKky7JC+SoMONJWq68hzwAmB/nVp1FlRyJGvMic3kKRGN3ULmeMO6opy1nj5imu+
aheTwMV9MMfY+ftLmMW6gFNzXaBIE4XNXgI+F1V7SX1yRvYxzbIiIJIt4rgtYeEJ
81rftKD/t3SHFGK8RUwypNIKqoiEvCL2xNrc/FWefo5X16bbp15vAtIAhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGejpwsCmjgI4p7DSsQ8vN1feHoCMB8GA1UdIwQY
MBaAFOOzWVakA4oJOMzahVkq1THkqIOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmIt
MDdhZTY4MmMxMjYyLzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmItMDdhZTY4MmMxMjYy
LzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg37dLpf5
y1LmhdqJvLIbDE4hcfLZqc4dLxikDlonmaV3dP2UnbLz8ysBz+xnTA4od5YfNBi2
dKuowi/UVYvHWwrOz3gdPz/nwzsnpXRncGpwA/BXUHtXnsrLWqjAbABpITvsQ/UM
FflM/KLDhXKc3T/mGhJTRZfr4mJ/PLTNT7dAydpRF6T7jZmd+oZbXULDEmiX1gZC
qxNHCFURqhyGid6an3Sa2Rskwo2evmjHdHXz/36SAdYygcb7+AZRfo3AiftgVmva
fjZmLOpmxKDhkaNicrmjWPNi4ZbdDPozxO5EUqjLNukY6+F3KmjTcgckFTaM720O
65rCvj8mH1X71g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:31 2026 by rpki-client