
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: 8XgfvFJ8M38Z5lWTK8YkXJls5N6OZ/YMusvbSrAOioo=
Subject key identifier: A9:4A:78:65:C8:20:65:79:E0:DA:3A:14:8D:3D:D1:44:74:4B:C5:E1
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 01A0D3B8349E6B64206A22F07F7E6B0F89ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 106B
Signing time: Thu 24 Sep 2026 14:00:59 +0000
Manifest this update: Thu 24 Sep 2026 14:00:59 +0000
Manifest next update: Fri 25 Sep 2026 14:00:59 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: g37h8oj+XkrcYyH7IPHl6zQSQWiduM7ug91ySkT9IHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:34:9e:6b:64:20:6a:22:f0:7f:7e:6b:0f:89:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Sep 24 14:00:59 2026 GMT
Not After : Sep 25 14:00:59 2026 GMT
Subject: CN=a94a7865c8206579e0da3a148d3dd144744bc5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:af:14:17:a7:ff:f7:30:51:20:21:f1:bc:
4c:1c:e7:5b:96:53:86:bd:f4:b3:cf:db:5c:e0:d4:
e7:28:0f:23:94:b6:19:8f:59:36:b0:63:cd:47:7f:
27:23:e6:84:d8:b8:1d:39:73:1b:f4:19:cf:e0:b6:
64:5a:bd:92:70:12:8d:35:38:05:7f:b9:2e:35:dd:
bf:cd:8a:e2:41:c6:38:02:d1:06:a8:16:53:5b:fe:
04:d2:80:fa:4e:41:98:40:80:d2:12:19:45:c1:5f:
53:ce:55:68:8a:9a:7d:ff:ee:c1:fe:6e:aa:10:86:
be:4d:06:e2:55:78:75:41:5a:bb:92:11:1c:d7:4d:
87:c6:ef:2b:dd:c2:d2:c3:17:42:1e:9a:05:f5:ce:
f7:16:7a:cd:ea:41:c8:56:e1:d3:4e:42:a0:20:1e:
e5:0d:97:ae:e6:79:6d:f6:ec:5e:4d:1b:30:30:8e:
5f:61:96:9f:c4:84:8e:20:fe:7d:98:73:41:e3:d0:
6f:63:10:55:58:ba:fb:fc:75:e6:10:5b:65:a4:05:
e9:a7:81:08:ba:d6:08:d5:1e:5c:a1:c2:1f:99:80:
58:67:b7:49:b8:7f:a9:89:61:1d:a9:33:46:84:16:
ca:d1:da:3e:ce:99:38:e1:88:91:86:41:82:3a:f4:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4A:78:65:C8:20:65:79:E0:DA:3A:14:8D:3D:D1:44:74:4B:C5:E1
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6c:d4:dd:5c:b9:69:10:a5:e8:93:bc:67:ea:be:13:8b:2c:
eb:1b:84:ca:0b:cf:05:a9:73:56:7a:a0:9a:53:f8:44:a0:24:
9f:77:12:62:22:fb:33:90:42:10:90:45:8f:4c:20:82:28:a0:
97:e0:3b:21:a1:00:ed:92:4b:cb:71:6f:19:66:0d:25:c1:76:
5e:b5:d2:7d:19:b4:43:ce:ce:ee:5d:ea:f4:26:4a:c2:95:d2:
82:2b:22:b3:0e:5e:84:33:4b:49:98:07:48:9f:84:88:c6:88:
66:fc:cc:19:90:41:cd:b1:4e:1e:31:80:9a:18:73:51:26:0d:
ee:42:41:b8:4c:78:c7:df:e4:2c:ff:d7:8a:86:45:bb:e6:49:
f4:ed:c7:45:12:dd:82:f8:4c:a8:59:d4:a6:cf:3a:71:df:3f:
d9:cd:d8:8a:94:4b:25:af:f3:09:3c:da:67:b0:ff:7e:c3:85:
1d:b2:52:54:d6:17:81:fb:55:f2:48:b8:6a:39:65:6e:9f:b1:
4d:6f:dd:a8:89:3a:da:ca:ad:b4:aa:83:d0:0f:17:73:05:e6:
c8:db:74:a4:fd:05:f8:28:7f:e5:bd:89:e2:36:02:18:8b:52:
82:e1:04:20:ed:09:64:dd:1e:90:e6:62:2c:cc:90:78:8d:ae:
9f:2c:fc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:27:26 2026 by rpki-client