Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: XxUqs3rPTts91hMrBjL0u/Zw3KTJYtLfByDUVHNjSic=
Subject key identifier: D4:4D:2C:6A:CC:BD:C0:D9:2B:2C:F5:E9:36:3D:07:A4:97:99:B1:37
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 019D2928F4756C58C650ACA516DEEC265D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0E85
Signing time: Thu 26 Mar 2026 08:00:42 +0000
Manifest this update: Thu 26 Mar 2026 08:00:42 +0000
Manifest next update: Fri 27 Mar 2026 08:00:42 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: QrZoiziuQRjsH0jHuZmK949MBf0rsNpLSfesoYIkLdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:f4:75:6c:58:c6:50:ac:a5:16:de:ec:26:5d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Mar 26 08:00:42 2026 GMT
Not After : Mar 27 08:00:42 2026 GMT
Subject: CN=d44d2c6accbdc0d92b2cf5e9363d07a49799b137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:26:a4:2a:20:33:3e:cd:3a:a6:38:cc:97:
bb:8f:d2:aa:73:0a:df:1c:c5:2e:a1:a1:ef:08:11:
f2:de:d2:15:12:25:80:20:9c:8f:c1:3d:df:be:13:
c6:47:58:ec:75:dd:a7:c3:49:6a:b1:39:b6:15:ab:
db:e9:a6:cb:73:fa:00:38:4c:a4:10:d8:ca:51:78:
a9:75:c5:db:71:8e:d2:12:bc:89:9c:59:6c:12:8d:
4a:5f:5b:ba:d8:50:1d:ad:cc:27:cc:c2:90:13:89:
19:ec:cf:a2:85:c7:48:c3:f3:df:98:ba:c7:ba:3f:
27:1c:c1:f9:18:64:4c:9f:c0:c3:d8:e6:21:f4:f0:
e9:95:cd:a4:df:a3:a4:e0:1d:9b:f4:57:00:c8:26:
80:0b:8c:d0:98:2d:94:39:a2:f6:fc:36:07:a1:81:
00:3b:29:26:11:e5:91:6d:58:5c:64:e8:a3:84:b4:
54:ce:92:ea:d8:17:7f:a0:79:23:4e:7e:52:d4:89:
a0:57:e6:1f:01:09:80:a3:b3:47:04:f7:6b:41:95:
a4:7e:78:19:62:28:52:51:07:26:98:c0:b8:fd:b1:
1f:5e:b8:39:3e:f3:33:ff:6e:d4:37:2b:c2:a9:f9:
21:be:a9:fa:be:f6:67:0b:3f:92:2f:66:45:cd:60:
bc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4D:2C:6A:CC:BD:C0:D9:2B:2C:F5:E9:36:3D:07:A4:97:99:B1:37
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:eb:80:a0:eb:7d:b8:40:f4:06:cb:e6:d6:9d:be:3b:b8:f4:
0a:68:64:96:ad:14:72:e3:16:28:32:b8:70:98:d0:db:fb:8c:
a0:62:5d:2c:f2:fb:99:af:21:e5:fa:b7:09:48:bc:b7:fc:5c:
95:dd:d1:a3:7d:fb:75:f9:71:ae:33:a8:3d:9a:d7:33:02:07:
eb:f8:3a:57:60:7a:53:a3:07:12:00:20:82:4d:42:4b:8f:0d:
bd:20:4c:bc:35:97:c9:5a:5a:16:4c:56:34:94:22:48:f2:7e:
e9:9f:ce:7b:95:c9:ed:58:c1:17:b8:4e:fe:9d:0b:7c:52:46:
a6:b9:6e:9c:cc:e9:5b:01:99:cf:69:86:aa:1d:25:61:fa:1a:
6b:7d:d4:e1:ad:24:38:3c:15:5e:69:dc:ed:b8:2f:af:3e:34:
1a:dd:c1:01:68:17:6b:31:f7:fb:23:cc:cf:69:ff:6f:da:33:
96:94:99:92:eb:ae:8e:5a:23:9f:fe:cd:ce:31:f8:6f:30:f3:
4b:f7:c3:ba:d4:a4:09:a0:ba:1c:cd:35:06:ba:9d:c8:e8:44:
1d:2e:a2:c2:0d:9d:4c:e4:ac:62:80:87:02:f5:c3:3d:16:15:
a0:75:4a:29:4d:3d:ce:a5:b3:c0:fb:92:a6:be:b6:a4:d2:dd:
a3:69:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:41 2026 by rpki-client