
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
File: rc47owvQQ0BmFuIx-DHAO8cN_sM.mft (raw, json)
Hash identifier: lNoirwMQ4MfKsPAHXiNZIYgzl51QHjSfiikSevJVS9Y=
Subject key identifier: EC:49:A0:E3:B1:1E:3B:FE:AA:C2:7B:2D:F8:85:D6:58:B0:87:E8:CF
Authority key identifier: AD:CE:3B:A3:0B:D0:43:40:66:16:E2:31:F8:31:C0:3B:C7:0D:FE:C3
Certificate issuer: /CN=adce3ba30bd043406616e231f831c03bc70dfec3
Certificate serial: 019F916D8939F3012A9F13FF5A3F5B551973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:42 +0000
Manifest this update: Fri 24 Jul 2026 00:01:42 +0000
Manifest next update: Sat 25 Jul 2026 00:01:42 +0000
Files and hashes: 1: hxtJjNM-jXAId3t9QxiU4RhKDn0.roa (hash: kCGRegaekycExv3Ea9rc9bDXuzaYL1+3mHe+GykP47o=)
2: rc47owvQQ0BmFuIx-DHAO8cN_sM.crl (hash: 7gsD0Ew3KJ16T8UEwH5bbGP39Q1MbynZdbKOs4htAEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:89:39:f3:01:2a:9f:13:ff:5a:3f:5b:55:19:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3ba30bd043406616e231f831c03bc70dfec3
Validity
Not Before: Jul 24 00:01:42 2026 GMT
Not After : Jul 25 00:01:42 2026 GMT
Subject: CN=ec49a0e3b11e3bfeaac27b2df885d658b087e8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2b:e4:0c:9e:fc:fa:4d:66:4c:0d:77:2c:9b:
0d:2f:a1:41:98:a6:9f:d5:b5:fd:23:a0:ff:d4:05:
d4:37:28:37:a9:74:ca:10:d8:a0:99:26:98:73:1b:
d0:a1:eb:7c:a7:48:6d:f6:7b:1f:f4:5a:10:f0:9c:
bd:ba:ad:04:21:82:dd:e0:6c:a2:09:ff:4b:05:ed:
b8:a2:5f:56:0a:6e:18:63:29:7c:04:e1:2e:90:7e:
ea:63:a6:d6:22:8e:5e:50:ed:42:cf:21:a5:61:8b:
56:fc:6a:60:2a:e5:5c:44:33:f2:82:fe:b5:cd:71:
50:de:75:7d:a8:8d:5b:9f:12:be:a2:d3:c1:bd:31:
5b:23:f3:61:e7:b9:38:7a:d3:6c:7b:b1:4e:d8:78:
2b:3c:1b:6d:18:49:13:de:6c:cb:26:ea:2f:48:12:
11:e7:41:a2:ba:c1:3f:fd:44:fb:42:11:52:34:fc:
1d:28:7a:35:81:60:fb:f6:f4:a9:65:fb:70:12:b0:
24:d4:50:95:a2:92:6a:1b:e3:db:7d:71:46:75:1f:
65:76:fa:96:c6:00:da:b3:92:13:ea:1a:92:b6:2a:
63:07:68:e0:78:ef:1d:22:58:d0:8f:eb:26:7d:e0:
e4:f0:29:61:03:fe:4f:00:0e:d4:6a:4c:b7:33:96:
aa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:49:A0:E3:B1:1E:3B:FE:AA:C2:7B:2D:F8:85:D6:58:B0:87:E8:CF
X509v3 Authority Key Identifier:
keyid:AD:CE:3B:A3:0B:D0:43:40:66:16:E2:31:F8:31:C0:3B:C7:0D:FE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b4:65:c4:2c:f3:34:76:a7:45:07:b9:80:b4:8f:ad:23:ba:
e4:4a:7b:be:c9:dc:12:32:40:3a:46:14:18:45:a2:e9:54:d7:
25:72:cf:34:c3:82:ee:fa:55:f4:ad:88:27:09:64:27:43:84:
03:14:87:c1:e1:55:44:29:cc:0a:02:76:58:70:58:68:27:b3:
3a:da:76:d1:5e:06:62:b2:f8:c9:5e:be:6a:7f:8e:c3:c3:2f:
de:39:6c:23:c8:ac:54:b3:1e:8e:67:86:b8:47:c7:65:0b:19:
f3:8f:9f:d5:f5:af:3a:27:46:90:4b:1a:9f:a0:2f:f6:0d:20:
4d:ac:31:ac:02:9d:59:23:fd:85:7d:45:d6:eb:a3:04:1a:43:
43:50:58:57:15:2e:24:c2:41:6d:6e:e4:14:25:12:d0:ea:7e:
da:8a:b9:a8:b4:2a:a3:f6:8f:9f:a2:a8:91:a3:73:ec:e0:f5:
fe:5c:c7:3b:17:99:97:94:03:26:ee:73:35:d7:be:06:a1:c3:
8c:d0:c7:e0:ea:52:ca:a2:4d:84:bc:d7:6b:7c:ec:10:b8:46:
78:62:cb:63:71:73:33:1c:b5:6f:fb:32:e8:e5:57:00:66:9e:
94:c2:7e:d0:4a:e5:a3:79:7f:0c:ec:92:36:c4:55:9c:02:b0:
77:09:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:49:03 2026 by rpki-client