Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
File: O47zaZ48ewDP9VFOVME2EqO8CBA.mft (raw, json)
Hash identifier: CLQvOcqVtEV6cNCjgRETUYCr21dxE5g2pkAIo1XTJqE=
Subject key identifier: 47:7C:D0:CE:9D:71:80:54:A8:DA:CB:CE:CE:AB:0D:2C:A9:1B:BC:AD
Authority key identifier: 3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
Certificate issuer: /CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Certificate serial: 019D2B4E3EDA86B1479E167F9FE29F5C38E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
Manifest number: 50
Signing time: Thu 26 Mar 2026 18:00:41 +0000
Manifest this update: Thu 26 Mar 2026 18:00:41 +0000
Manifest next update: Fri 27 Mar 2026 18:00:41 +0000
Files and hashes: 1: O47zaZ48ewDP9VFOVME2EqO8CBA.crl (hash: DjIEqkhZWbGv9QBMtfIkd0N8Ot5/mC0onf4ypTYI6nc=)
2: sLLadZHcLuLxJyRCEcg6ugP5rdc.roa (hash: z14c08hX3kPcGJfG3drJX75MFVvqokGJtQr08nJp+rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:3e:da:86:b1:47:9e:16:7f:9f:e2:9f:5c:38:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Validity
Not Before: Mar 26 18:00:41 2026 GMT
Not After : Mar 27 18:00:41 2026 GMT
Subject: CN=477cd0ce9d718054a8dacbceceab0d2ca91bbcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:74:0e:01:bd:d9:18:63:14:a7:2d:57:66:
8e:1e:85:c1:96:b4:b3:3b:73:a2:ef:06:d7:37:c0:
16:9e:1c:84:6f:1d:03:f1:cb:c4:d8:8e:ad:e3:c7:
ab:94:93:22:a0:d1:22:f1:2f:44:ee:6f:b2:91:eb:
4a:db:a7:04:a9:0e:6f:8d:8b:68:bc:1a:ab:4e:47:
8e:a7:bb:e4:6c:c0:a4:6e:d2:c9:a0:38:50:42:6e:
99:a6:aa:ac:9c:cc:ad:43:e3:e3:d5:95:17:e0:04:
ac:17:b4:dd:4d:4f:b6:35:ec:40:84:b9:7b:86:2d:
83:a5:d5:54:2a:b5:5a:c7:3b:74:ba:3c:ef:82:28:
9b:7e:71:db:3b:55:51:a3:c4:68:d8:23:b7:82:d7:
f3:c2:1f:0e:3c:c2:fc:26:9a:08:49:30:2d:6c:c4:
94:e6:79:fe:3a:cd:c6:71:23:8b:48:70:87:99:b4:
2b:1f:ee:26:1e:01:31:29:93:0d:6f:cc:c8:32:55:
4c:4e:33:e3:37:31:a8:76:20:9b:40:97:63:1a:71:
23:3e:20:52:75:16:f3:db:a4:65:66:eb:b9:b3:f9:
a8:61:91:7d:63:21:0e:97:a3:ca:51:b0:01:c3:9d:
51:d7:e0:4a:6c:09:53:a1:8a:0f:a1:80:1a:f2:05:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7C:D0:CE:9D:71:80:54:A8:DA:CB:CE:CE:AB:0D:2C:A9:1B:BC:AD
X509v3 Authority Key Identifier:
keyid:3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9a:ce:76:4d:ca:13:bc:31:59:d0:76:6b:fe:9e:a3:37:0d:
3d:19:09:1b:f4:87:ea:12:af:75:ae:94:aa:28:aa:96:d6:26:
43:fd:06:5a:06:b1:c7:f8:a5:8c:a9:8c:e6:0b:1d:80:63:a4:
9d:9d:d8:a0:76:0d:c4:b1:05:bf:3e:91:98:10:c4:bd:bb:73:
7c:4a:31:8a:e3:05:d3:b8:8b:b8:a6:67:c8:2d:ea:3a:4d:20:
a8:54:ed:67:2c:cf:78:21:d8:75:15:00:3f:27:42:c6:09:35:
5a:e3:8d:bd:bf:ab:c9:e1:36:00:d5:76:f7:de:a2:40:04:d4:
93:9a:de:e1:97:5c:d3:b3:75:9a:b1:f7:8d:f8:07:c5:04:f3:
fc:ed:1a:f1:f2:5f:ca:04:db:3c:d5:5f:11:0d:6b:62:e7:48:
b6:02:6a:81:52:af:a9:c0:a9:c2:c4:de:5f:cb:1e:99:8c:4f:
1f:c7:c5:4f:93:65:9c:96:83:b2:c9:bc:a2:06:47:ed:14:81:
01:70:ed:4d:77:fd:1f:f5:60:a1:58:dd:af:24:ed:aa:c5:a0:
45:78:ab:18:db:7a:42:d4:23:1b:bc:cf:82:5f:36:fe:7d:e8:
a9:46:de:51:c8:e7:da:5e:c3:33:d3:bb:ac:a7:bb:6d:c7:0f:
02:59:c6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:14:25 2026 by rpki-client