Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
File: R0kcIjvm4aqla_7G2g2pDEqFKq8.mft (raw, json)
Hash identifier: IjSrs+/NlVV23IvH1siGv2+HXjcug9mJ9ByDLdXP5yA=
Subject key identifier: E9:C6:35:EC:8D:31:97:E6:B6:65:AD:2E:1B:2C:FA:A8:58:A1:C5:2C
Authority key identifier: 47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
Certificate issuer: /CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Certificate serial: 019D2996C8B8F24302C3917CDE0883CAC68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
Manifest number: 05EF
Signing time: Thu 26 Mar 2026 10:00:40 +0000
Manifest this update: Thu 26 Mar 2026 10:00:40 +0000
Manifest next update: Fri 27 Mar 2026 10:00:40 +0000
Files and hashes: 1: R0kcIjvm4aqla_7G2g2pDEqFKq8.crl (hash: pqT2fr+iw2jk2D7gfgqlHHHmRE8VygXnsi+xkZlnjsY=)
2: V4COJnXwmFmnVBuYsVBT_JNYPKo.roa (hash: BFMhNSaSoYAFpwahbx23UPRsDuVgHkjYqG78fOuGOzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:c8:b8:f2:43:02:c3:91:7c:de:08:83:ca:c6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Validity
Not Before: Mar 26 10:00:40 2026 GMT
Not After : Mar 27 10:00:40 2026 GMT
Subject: CN=e9c635ec8d3197e6b665ad2e1b2cfaa858a1c52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:0d:45:1b:22:2b:b2:a5:e8:bf:da:d4:34:
96:a9:16:a9:f0:ee:2f:43:9c:33:f1:41:2d:f7:56:
dd:a1:43:09:94:d0:c7:f5:b3:a1:e5:4c:35:a2:14:
95:08:21:21:94:3a:fa:20:87:ff:de:b4:e9:e2:b5:
03:0e:d2:77:fd:e3:28:59:f2:12:03:9b:83:7e:ce:
18:11:63:62:fd:9e:9f:75:13:76:d4:a6:37:9c:35:
10:7c:ea:bc:0a:d8:2a:eb:8e:b2:29:32:52:76:a8:
33:00:e9:81:de:53:4f:cc:e8:e5:fb:c4:06:40:c9:
d7:04:f8:68:62:e0:b2:58:7f:d4:46:d8:32:0c:81:
62:55:b6:1e:a3:cc:a7:60:f0:2a:68:85:83:27:4b:
ac:25:10:7d:63:e0:fa:08:40:19:62:6a:7c:b4:5d:
f8:23:84:ce:e1:ca:48:de:51:51:ba:dc:38:84:a9:
0d:eb:ad:2f:c6:b7:a9:b1:99:e6:a5:44:45:03:5e:
69:3d:8c:09:47:e4:ee:a2:4a:69:12:b7:0d:94:07:
3f:21:f8:b1:a1:5d:82:52:12:0e:23:8a:51:d7:98:
e5:70:bd:0f:45:fe:ba:f5:9c:ad:24:fc:3e:32:5c:
5c:3d:e0:43:f5:77:d2:d4:3e:ea:9e:ff:71:c0:0b:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C6:35:EC:8D:31:97:E6:B6:65:AD:2E:1B:2C:FA:A8:58:A1:C5:2C
X509v3 Authority Key Identifier:
keyid:47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bf:21:e0:96:4b:47:0a:53:4b:16:51:16:17:71:4d:15:95:
ef:13:fd:b8:c9:b3:0d:9a:17:97:2a:ba:58:35:71:af:12:c7:
12:13:09:09:0b:d6:f5:79:f8:2e:e0:7f:64:2b:cc:06:13:5e:
10:8a:3d:33:5b:b2:e4:04:42:2c:af:56:be:02:f9:68:54:f2:
0b:de:54:65:8f:97:ee:24:ac:dd:03:1f:f9:b6:9e:d3:9f:e9:
03:80:92:bd:43:dd:41:2b:5b:9d:51:d0:bf:51:b8:66:d6:1f:
0b:80:4e:f4:58:ac:f8:b2:7b:93:c3:00:44:a3:a1:13:52:1d:
bb:24:b3:f9:74:f5:14:58:22:82:b6:08:8d:c3:06:85:f8:0c:
78:e8:31:8f:b5:f1:6e:1d:43:c1:5e:0c:18:fb:35:e2:e8:21:
5b:b9:ac:55:62:db:40:f2:4d:be:96:ca:3c:66:bc:ef:7d:7d:
c6:e2:59:9f:d4:55:1d:ec:bd:08:13:22:22:1d:f2:17:88:44:
52:3c:d3:2f:c7:06:27:fa:1b:ff:3f:5e:36:f5:91:c5:6f:8f:
8b:97:9e:19:5e:0b:32:34:b7:eb:9d:91:8c:7d:15:07:42:4a:
5c:79:64:fd:ee:36:16:04:46:e6:46:49:b2:46:af:e0:af:b6:
f3:52:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:50 2026 by rpki-client