Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: t71R5ZuiYbCLIBJ6Ylasayx1lNbx8Kxd1Y6omLNVHEE=
Subject key identifier: A6:BF:1F:73:1F:B6:02:3D:2B:9A:4A:DB:93:2B:8C:D0:89:6D:CF:D6
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 019F91355153AC3D9C29B6F07463F0A8C48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0FC4
Signing time: Thu 23 Jul 2026 23:00:18 +0000
Manifest this update: Thu 23 Jul 2026 23:00:18 +0000
Manifest next update: Fri 24 Jul 2026 23:00:18 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: hWgtH7kMC3PEBlMRV16o6q2yTO8032W9F2SU2a9v0Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:51:53:ac:3d:9c:29:b6:f0:74:63:f0:a8:c4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Jul 23 23:00:18 2026 GMT
Not After : Jul 24 23:00:18 2026 GMT
Subject: CN=a6bf1f731fb6023d2b9a4adb932b8cd0896dcfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:c2:d2:ec:8f:8d:37:ae:52:61:55:f8:3d:
86:12:73:d2:a5:0f:57:b2:86:d4:4c:f9:6e:1a:ed:
da:c7:c4:ce:9a:80:87:ee:af:59:5b:54:33:d2:3b:
e8:7d:8d:32:ca:11:fd:86:05:95:83:8e:3f:5e:90:
27:b3:b9:09:0d:32:b7:63:04:68:9b:1e:1c:93:d7:
24:cf:fe:b7:50:09:f9:e3:6b:0d:99:ee:2f:59:44:
35:2a:8e:d6:c1:8c:f2:a3:3e:95:e6:ad:1c:c6:36:
c6:18:2e:4b:6d:44:e8:f7:09:80:be:f4:10:46:2a:
e1:6f:89:d4:cd:be:f7:3f:61:52:fb:c4:1d:6b:e9:
ef:ad:28:e0:ba:10:4e:b1:a5:af:8a:ac:aa:ed:0b:
ee:df:b9:c9:53:0c:26:3e:46:8d:f2:f0:8c:77:d3:
7b:34:04:f2:98:84:ae:8f:42:1d:70:10:18:d8:96:
2a:8b:bf:a0:0d:0c:aa:e0:6d:1f:a9:82:4f:d9:92:
2c:7e:ff:71:e2:ce:75:28:15:06:bf:1c:d3:e7:96:
52:b2:aa:af:fc:f0:36:e1:bc:c2:ef:70:a7:64:36:
9a:38:08:a7:af:64:70:20:c7:8d:8e:7e:8c:1f:41:
dd:75:5e:6d:cc:4f:22:9f:7a:86:a2:10:2a:db:b9:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BF:1F:73:1F:B6:02:3D:2B:9A:4A:DB:93:2B:8C:D0:89:6D:CF:D6
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:14:ad:bb:83:78:11:e0:eb:9b:f6:c4:3d:4b:2b:73:ac:82:
e3:e2:be:db:3f:5f:80:ec:cd:50:b1:dd:ca:b3:eb:77:c3:cc:
1a:9d:c2:c5:e8:77:7d:1f:df:49:eb:36:bf:61:8d:11:55:12:
b2:70:c8:86:f9:36:0d:20:98:10:8e:74:5c:70:87:05:60:88:
de:d8:1c:d6:c9:c3:1c:c0:76:29:f9:f7:85:0f:ed:c2:35:fc:
ea:a4:ae:40:b2:96:b0:2b:51:69:76:2e:9c:b8:7c:14:94:4e:
4f:f7:09:2f:f6:fe:98:5d:d7:b4:60:b9:3d:ca:36:5c:fb:c0:
e1:dc:ca:85:9e:c0:94:e6:47:cf:e0:64:5d:a7:7b:5c:f4:84:
2a:83:3f:ff:87:94:b0:69:60:d3:69:f6:d5:7d:00:f1:ab:d2:
a8:5a:7f:e7:48:8c:94:19:17:9d:1f:60:bf:cb:9f:0b:e0:dc:
8f:f1:b6:5e:d1:89:4b:08:37:2f:48:80:8f:74:79:37:cf:46:
67:09:b9:24:3c:a2:ba:40:df:02:57:4c:d8:b2:e3:a2:1d:3d:
8b:db:2c:b8:69:5e:6b:fe:5f:b5:d0:26:cf:06:22:13:38:0b:
b5:f7:bf:3a:41:54:bb:f8:73:6a:f0:35:95:94:00:ac:07:f1:
bc:1d:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:57 2026 by rpki-client