Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
File: R8zghicbSUmlCfHjcYDpioCkVOU.mft (raw, json)
Hash identifier: E5sbYGWGA2soODzIo9tvW6TN+PpAvS62neMzF+pYcEY=
Subject key identifier: B6:AA:0B:9C:66:BF:69:D9:CF:01:A9:1A:24:3F:62:31:24:56:55:BA
Authority key identifier: 47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
Certificate issuer: /CN=47cce086271b4949a509f1e37180e98a80a454e5
Certificate serial: 01A113AACD09219B5105A6FBF5E1A867ACC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
Manifest number: 0108
Signing time: Wed 07 Oct 2026 00:02:02 +0000
Manifest this update: Wed 07 Oct 2026 00:02:02 +0000
Manifest next update: Thu 08 Oct 2026 00:02:02 +0000
Files and hashes: 1: 84nImxweqqr5ryKumI1pSxwnVkY.roa (hash: +HbQ4MWmkmjb64P4pJWJRCcWwhVgoZJ30TVPJhtlbcM=)
2: R8zghicbSUmlCfHjcYDpioCkVOU.crl (hash: 5B7ylSddkZlMrOcjRNz2ayjwMZvl/f+/lxz/M90V23Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:cd:09:21:9b:51:05:a6:fb:f5:e1:a8:67:ac:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cce086271b4949a509f1e37180e98a80a454e5
Validity
Not Before: Oct 7 00:02:02 2026 GMT
Not After : Oct 8 00:02:02 2026 GMT
Subject: CN=b6aa0b9c66bf69d9cf01a91a243f6231245655ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:d0:48:ef:e1:20:b4:06:b5:b6:44:c2:c1:
31:09:03:56:68:74:bc:6f:e1:67:a5:e8:d6:85:ef:
de:80:e6:1a:ae:a6:f9:3e:f1:76:81:6d:6e:50:e2:
1d:79:ee:ca:e5:b5:3b:1d:bd:3a:80:a8:85:68:ef:
dc:87:f3:e3:95:86:18:91:97:8f:f8:3e:d8:6b:38:
ae:75:5c:a3:91:d3:94:ea:d7:b4:59:99:a1:3f:76:
45:5d:99:6c:cb:3e:16:99:b7:a7:2c:cd:b0:d9:f8:
51:b5:a7:a6:13:10:6b:71:cb:a2:c0:a4:52:d4:78:
d6:bd:4e:6f:ca:70:b0:0e:5e:a0:6d:9d:c6:04:45:
19:28:4e:74:83:00:c9:57:c1:d8:2d:9a:27:58:a1:
80:a5:f0:16:aa:e2:40:97:b6:f2:27:28:b9:88:15:
35:25:14:04:c5:55:24:0f:52:8c:2d:f2:60:d8:8e:
b2:69:1c:d1:c3:c5:95:78:43:c2:5c:fa:46:68:2b:
85:d1:62:25:94:97:9f:06:54:db:64:c4:7b:e1:bd:
c3:0f:03:d0:d3:61:15:fc:de:49:5f:72:83:9e:56:
e8:f5:bf:ce:c2:f3:34:3b:de:ae:ee:41:87:aa:25:
1f:45:ff:79:31:1c:58:fb:ed:e5:a1:f2:8f:75:a1:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AA:0B:9C:66:BF:69:D9:CF:01:A9:1A:24:3F:62:31:24:56:55:BA
X509v3 Authority Key Identifier:
keyid:47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:be:40:a5:5f:fb:f8:33:94:fd:b4:a6:36:42:39:ef:e3:ab:
e1:b9:43:8c:b4:f8:d8:b8:a1:9e:8e:b7:11:ac:5f:5e:2b:95:
42:12:a9:68:b6:d5:f2:fc:42:ff:77:f8:68:4a:fe:4d:00:54:
61:cc:d7:6f:ba:59:9f:2d:e6:13:5c:91:91:34:ff:dc:7e:bd:
5e:1a:1c:98:91:ba:8a:ef:00:e1:8e:b3:95:25:b0:cc:01:ea:
a7:e9:a4:4e:8c:d6:4f:52:44:38:65:d7:db:30:d7:59:8e:a0:
90:4a:c2:ca:4e:3e:cf:85:b0:de:d8:d8:5e:7e:85:ae:17:3a:
7b:9e:d0:23:51:ed:c8:63:a9:f5:12:b5:77:05:8f:51:82:e5:
74:2f:27:e8:03:9c:4e:fb:19:e2:a9:43:34:2d:f9:1a:05:73:
45:bd:e4:99:1e:1d:83:71:98:12:4f:36:37:a1:4d:48:fa:a0:
03:ae:83:5b:65:58:02:b2:e9:1f:2d:47:b7:fc:94:a7:ba:b6:
ca:ad:7c:b8:ff:bb:9e:c8:cf:81:6b:5b:3c:d2:1c:d7:1f:ad:
ef:2b:9d:e7:34:1d:b9:28:7d:59:0e:fc:34:5c:72:12:97:ee:
a7:e7:ea:5d:bb:33:7d:3b:f2:65:24:1a:f5:9b:b3:82:87:94:
d0:82:fc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:08:07 2026 by rpki-client