Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
File: 470BQW0GPp8si7MOunJUmJ1oyl4.mft (raw, json)
Hash identifier: //+qT7hL1JsQ0rPxLsvviNk6pBUgM7shfC2Fkd5xHM4=
Subject key identifier: DF:9D:A4:8D:55:E9:7A:47:1E:D8:89:9F:FA:F8:D3:52:8D:5E:3B:6E
Authority key identifier: E3:BD:01:41:6D:06:3E:9F:2C:8B:B3:0E:BA:72:54:98:9D:68:CA:5E
Certificate issuer: /CN=e3bd01416d063e9f2c8bb30eba7254989d68ca5e
Certificate serial: 01A0D4CB371C0036702B4281F30231CB26E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
Manifest number: 015B
Signing time: Thu 24 Sep 2026 19:01:22 +0000
Manifest this update: Thu 24 Sep 2026 19:01:22 +0000
Manifest next update: Fri 25 Sep 2026 19:01:22 +0000
Files and hashes: 1: 470BQW0GPp8si7MOunJUmJ1oyl4.crl (hash: /MMRkE+X8ilJg0bpWrY+lmmNPcMQN8pW+DA3hJzI1Mw=)
2: pqm9KQxmnlmsEcZ1a4GqPZpyF0M.roa (hash: KCyynhPI7ik936knmtF7PX4p6nVsyuU0oUPtdUxG/Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:37:1c:00:36:70:2b:42:81:f3:02:31:cb:26:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3bd01416d063e9f2c8bb30eba7254989d68ca5e
Validity
Not Before: Sep 24 19:01:22 2026 GMT
Not After : Sep 25 19:01:22 2026 GMT
Subject: CN=df9da48d55e97a471ed8899ffaf8d3528d5e3b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:61:22:35:ae:1f:b9:ea:94:7b:cb:a0:1a:
ae:35:78:d3:63:c8:97:d2:5c:cf:8d:16:8d:fe:39:
25:a7:0e:06:79:15:bd:97:15:de:1f:04:52:4e:65:
b8:f1:21:9d:f4:a3:49:bd:e4:3b:35:c6:e6:d5:69:
cc:3e:39:ad:89:52:2d:f2:e4:ca:b5:23:65:9e:29:
4c:ca:f2:de:39:e5:ba:4b:2c:fe:45:2a:20:28:b8:
94:12:58:6a:f6:bd:7c:30:a5:af:a0:35:cf:fd:c1:
8b:4e:bf:c0:46:ea:71:64:16:98:12:14:fb:6d:3e:
3c:29:1f:5f:b2:14:e4:f4:04:36:5d:ac:3c:c8:4b:
ef:61:40:e3:c8:40:84:86:3f:ba:1b:4a:99:1c:97:
dc:3a:5e:fc:61:61:f1:81:af:20:81:4e:56:1f:4e:
30:b8:93:42:ed:93:0a:e6:41:f0:10:b2:25:14:bc:
47:94:fb:c2:33:d7:d8:f4:e4:59:99:a0:26:21:5d:
dc:1e:cd:25:ae:41:c6:dc:8e:87:ba:95:84:92:c2:
d8:f0:6f:56:ef:d7:27:8b:53:0d:63:69:22:c1:5e:
21:9c:c9:76:01:84:dd:56:aa:97:cb:aa:1f:13:69:
d3:37:5a:b3:b6:ff:f9:ef:4d:6d:7c:d0:5b:76:1c:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9D:A4:8D:55:E9:7A:47:1E:D8:89:9F:FA:F8:D3:52:8D:5E:3B:6E
X509v3 Authority Key Identifier:
keyid:E3:BD:01:41:6D:06:3E:9F:2C:8B:B3:0E:BA:72:54:98:9D:68:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:59:c8:56:f7:ca:13:cf:c6:02:0c:a7:aa:c8:7e:b3:34:cf:
92:58:02:6d:c5:32:8a:10:e9:e0:bf:df:59:7f:49:c3:8b:ed:
e7:22:e3:d3:75:16:a4:cf:73:98:c4:5a:b3:5e:67:42:83:0c:
0a:01:5c:43:12:9f:a9:80:66:ae:44:49:50:51:4e:00:ca:01:
34:e5:74:14:73:a9:ab:c3:47:61:4b:3a:da:77:21:34:28:05:
dd:61:92:5c:76:90:66:29:92:7c:bc:6d:80:da:69:1c:1b:e5:
e6:5e:20:73:d3:38:33:df:6d:fe:24:42:03:91:8a:c2:ea:d3:
46:c6:96:c6:21:43:ab:d3:af:99:1e:bd:f2:99:8d:7b:83:52:
2f:09:39:ef:2f:83:89:15:69:45:e1:10:cb:4f:58:a0:33:57:
bf:c0:4d:00:b9:a4:99:a4:4a:75:bf:1f:b1:bd:e4:00:5b:9f:
fb:fa:09:94:a9:57:c4:0e:60:59:8a:c8:65:30:91:39:f1:2c:
b8:11:a2:99:42:e9:c5:0a:a1:26:c1:f2:3e:05:91:71:8f:98:
f4:a5:e0:3d:80:02:d2:74:d3:26:a6:4c:0f:a2:c1:da:42:53:
86:af:9e:29:51:e8:a5:50:51:1f:c7:d2:a5:2c:e9:0c:cf:18:
74:65:09:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:14:11 2026 by rpki-client