Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File: 47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier: qIexeNToLwDDVL+QMvIbZwTonuO+nyvXvlW6+h4SoTY=
Subject key identifier: D2:74:10:8C:40:F1:23:EF:B9:56:FB:39:C7:4E:10:E7:DC:D4:1B:18
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 01A0C17B06E1BCD7E1D2800B2603D3226B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 01:01:00 +0000
Manifest this update: Mon 21 Sep 2026 01:01:00 +0000
Manifest next update: Tue 22 Sep 2026 01:01:00 +0000
Files and hashes: 1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: 3OhzUPDg0Vz5tb4FoxnHowgrjhOf8jjDCre+Zhb9sqo=)
2: CshAZZODRLNLmNGlI2avtLyw1y8.roa (hash: Hf1RE2bw+HGP7b/6j+X1+6eXzCajo5UkBDMdWtNUDgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:06:e1:bc:d7:e1:d2:80:0b:26:03:d3:22:6b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Sep 21 01:01:00 2026 GMT
Not After : Sep 22 01:01:00 2026 GMT
Subject: CN=d274108c40f123efb956fb39c74e10e7dcd41b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:38:ab:9d:9a:da:6f:e5:2d:6b:81:3b:dd:
95:6e:48:b5:69:43:17:26:11:84:6f:2c:3a:5c:a4:
ab:e3:32:05:f5:76:d2:84:6d:1f:5d:6a:40:06:0e:
21:47:85:fd:7b:e1:d6:c1:61:76:37:cc:9f:c7:3b:
19:c5:f0:2e:47:15:73:eb:2b:ad:f9:44:4e:da:65:
ba:bf:9e:9f:d8:ce:01:d7:15:83:75:57:41:92:56:
3e:2a:97:c6:c2:4e:c2:94:7b:4f:3f:57:97:7c:32:
25:c6:47:60:8d:56:ce:e9:26:c8:c8:57:8a:1a:7f:
78:68:ce:f5:b0:c4:8c:4d:bc:42:7f:19:e2:67:5b:
a9:d2:99:3b:55:85:8c:7c:ff:bb:cc:b9:0e:eb:0c:
b6:54:cc:ad:c5:87:1b:e1:a7:8f:ac:81:a6:be:ce:
ef:4a:97:c9:e8:e5:c8:d6:25:84:8b:c6:5c:b5:f7:
fb:e2:3e:22:59:15:05:34:8b:c0:13:e8:19:7e:e6:
15:23:b4:f7:7c:84:32:83:37:01:ba:5b:5d:37:c0:
11:ca:58:af:9b:ec:a6:47:d3:c7:8f:8d:de:5e:71:
05:24:e9:82:63:90:a6:b6:e1:ee:5c:ae:09:72:a4:
76:05:05:04:6e:08:dd:36:c5:f9:17:f3:ca:34:86:
bb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:74:10:8C:40:F1:23:EF:B9:56:FB:39:C7:4E:10:E7:DC:D4:1B:18
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:36:d6:ed:4f:2f:e0:e6:fc:9b:41:73:74:15:f8:04:83:ee:
16:1b:7a:fd:29:b4:90:90:d9:1f:1d:ca:a6:54:a6:10:e0:eb:
45:60:96:cf:08:a6:45:21:a1:8d:aa:ef:7c:c6:dc:d3:26:8e:
31:a6:dd:2c:fb:fb:07:5a:5a:a5:e6:fd:91:c6:02:74:48:d3:
ca:72:5b:51:d7:44:c8:c1:0b:88:65:15:ca:ba:75:13:ac:02:
d3:2f:3a:6d:8d:a8:9d:75:cc:0b:47:b2:b6:49:d0:e5:fe:aa:
1f:a2:01:be:4e:bd:00:ab:33:e6:7d:11:39:f2:4e:2f:7a:77:
2a:6a:91:93:aa:b9:cf:56:6d:11:c1:a0:a4:5d:3b:d7:70:0f:
78:4d:43:cc:e6:cc:2f:fc:65:aa:8d:05:78:23:f1:86:fe:f8:
83:53:bf:7b:70:37:c3:e5:4d:14:16:1a:0a:1c:a9:14:d6:f0:
13:14:b3:3a:26:67:a3:67:d8:88:3a:f3:f4:73:32:72:d3:ba:
7a:e4:02:41:b9:97:d7:18:05:c1:12:8f:b0:6f:d7:44:c7:fd:
78:c6:0f:7d:b4:13:df:cb:17:b8:51:c9:b3:93:cc:aa:9d:1e:
33:a9:a2:a1:36:f0:2d:63:be:4e:15:1d:85:9b:3b:9b:8a:a9:
fa:4a:30:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:47:28 2026 by rpki-client