Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
File: R8zghicbSUmlCfHjcYDpioCkVOU.mft (raw, json)
Hash identifier: ehOHmzSnkoYDW6kIfPEsSqhotz7VJeoVq/eWN/XAScY=
Subject key identifier: 73:29:61:C5:42:06:6C:18:C3:23:D4:DA:DE:77:A1:07:47:F7:F7:22
Authority key identifier: 47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
Certificate issuer: /CN=47cce086271b4949a509f1e37180e98a80a454e5
Certificate serial: 019F935AAA9BCE64EC8E32ED31EE8371B537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:20 +0000
Manifest this update: Fri 24 Jul 2026 09:00:20 +0000
Manifest next update: Sat 25 Jul 2026 09:00:20 +0000
Files and hashes: 1: 84nImxweqqr5ryKumI1pSxwnVkY.roa (hash: +HbQ4MWmkmjb64P4pJWJRCcWwhVgoZJ30TVPJhtlbcM=)
2: R8zghicbSUmlCfHjcYDpioCkVOU.crl (hash: YYf7iMhtvGMLl+wVtnjJ3g87h1tBv7Y1lhCb6KYNYtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:aa:9b:ce:64:ec:8e:32:ed:31:ee:83:71:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cce086271b4949a509f1e37180e98a80a454e5
Validity
Not Before: Jul 24 09:00:20 2026 GMT
Not After : Jul 25 09:00:20 2026 GMT
Subject: CN=732961c542066c18c323d4dade77a10747f7f722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ab:41:5e:23:c8:40:cf:a8:90:00:79:38:1b:
36:90:06:31:0b:20:48:a1:3c:c1:48:30:5e:fe:30:
ab:88:76:45:0f:78:6c:01:85:49:97:47:be:ad:72:
43:5f:68:b0:71:57:68:f7:7b:58:da:6b:8b:ef:96:
c5:f7:02:fb:56:be:52:71:58:10:35:3c:29:05:69:
d4:dc:e5:3c:9d:eb:63:41:30:91:28:49:c9:4d:ce:
76:b5:47:54:c9:ac:a0:0f:8b:71:16:09:6d:89:b2:
6a:71:8b:4f:85:d9:45:bd:bd:cb:e9:f6:a1:4f:93:
c2:1d:b4:ff:9e:b8:f5:78:17:e9:d6:b1:c6:a2:24:
60:20:52:f3:fb:bb:4c:0c:8f:28:bd:d7:fb:8a:c0:
fb:58:b2:75:bd:b4:23:c1:8d:17:a2:0f:2b:b0:de:
89:4d:92:89:25:37:41:7a:d1:ef:5f:41:d0:ad:64:
12:34:93:05:75:12:85:aa:71:39:e6:9d:19:12:65:
58:69:84:8a:96:ea:ae:8c:42:af:43:d7:4c:24:6a:
f4:06:55:24:1c:04:84:e7:c0:bf:f0:75:97:2f:01:
c9:c5:d8:8f:07:72:ea:3a:f5:36:0d:ee:16:f8:64:
75:6b:d5:15:d8:58:d9:dc:6a:27:d0:4a:ea:fc:a8:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:29:61:C5:42:06:6C:18:C3:23:D4:DA:DE:77:A1:07:47:F7:F7:22
X509v3 Authority Key Identifier:
keyid:47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c6:7c:6b:5d:de:af:8a:1a:8b:39:aa:f4:2c:47:cd:30:77:
a5:b9:d1:1f:7b:75:01:d3:26:d7:56:57:96:6b:70:a7:f7:63:
6e:6f:f4:58:a2:43:73:ce:85:8f:fc:47:96:0b:69:7f:5d:3d:
47:4e:2e:ef:a0:b6:fd:3c:55:28:fe:c3:35:9e:30:f1:c7:ce:
92:bf:52:dc:21:93:64:4f:4e:c2:9c:2a:3f:a0:dd:d8:3b:9b:
cd:d6:fa:1f:a2:81:df:8b:a5:36:45:00:8d:5f:6a:5a:29:11:
5f:26:82:96:cd:d4:8b:b4:d4:22:10:2b:a9:01:8e:21:b0:d0:
37:a4:dc:f9:a7:34:3e:89:94:ff:18:5a:0a:58:a0:a9:d8:c5:
ae:8b:39:46:06:d2:8d:5a:fb:c4:0b:38:cc:52:7d:af:ee:52:
94:ce:a4:c9:71:47:04:56:22:f0:90:92:33:56:c5:31:65:9e:
dc:7c:f1:8a:b3:42:21:66:42:91:f2:f3:2b:a3:56:f0:4f:68:
94:f9:e7:d7:9a:03:a4:4a:8f:02:b3:7a:47:e4:cc:fc:bf:c7:
51:ad:d0:a1:16:f0:38:98:9e:ab:7c:cf:d8:30:04:9d:97:9f:
ef:e1:08:0b:3d:ec:71:d1:6b:3c:cd:5f:74:be:a9:c1:1a:e1:
76:65:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:18 2026 by rpki-client