Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: 6Jbm20NHDyR2eD0A4xbokfSDK1kW2pYPSL4R8mjmo8o=
Subject key identifier: FE:47:C2:3C:47:32:53:FE:E1:E6:04:86:D3:E9:EB:DB:06:EE:38:48
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 01A0D5028DFE9A95F86E430CAD303433724B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 0D9C
Signing time: Thu 24 Sep 2026 20:01:49 +0000
Manifest this update: Thu 24 Sep 2026 20:01:49 +0000
Manifest next update: Fri 25 Sep 2026 20:01:49 +0000
Files and hashes: 1: 1_qKx7XK-VslkQaQcY5wLcf-kY4.roa (hash: aIIfDPGVCndIRJ9cOc5IQ8o5NAq5xG4vSe+WEowhC+8=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: S2LKUifQ0gv7UO+zGCtRdTcXVz4j8jlTs+nt3gF8Fq0=)
3: v1Q5deDRNaYN2rkW1eCtdP2QCKw.roa (hash: h5DLp92XQ3AvM1H/BlIZUWuG5teJsgAD0mDg6kM2v3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:8d:fe:9a:95:f8:6e:43:0c:ad:30:34:33:72:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Sep 24 20:01:49 2026 GMT
Not After : Sep 25 20:01:49 2026 GMT
Subject: CN=fe47c23c473253fee1e60486d3e9ebdb06ee3848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:34:29:43:06:13:36:54:79:79:c0:d5:f9:
94:f2:05:0e:e7:6a:05:77:37:1e:17:31:ab:8d:7c:
ee:f4:b8:a4:75:c0:80:b4:6d:aa:74:10:ce:7b:17:
33:8d:1f:de:19:04:a0:48:dd:e8:cd:3d:c1:46:6f:
1e:7c:8c:51:c2:83:44:9d:79:c6:f8:54:b4:41:c4:
d2:ec:a3:27:85:4f:56:22:af:69:e4:51:5d:54:a4:
84:cf:4b:fc:d1:be:a6:ca:18:84:de:13:ce:d3:b2:
89:bc:e2:19:8f:9d:4d:e6:6a:95:d1:cc:80:9b:75:
5b:a6:8f:21:56:3f:68:85:fd:6a:74:19:50:06:6e:
89:5d:23:cb:c9:15:a0:72:77:0a:91:a3:a7:47:6f:
22:69:fd:bb:91:7c:9e:57:28:a0:13:c2:13:20:a4:
af:e2:b6:e3:7e:52:f4:32:f2:62:87:70:47:e6:3e:
d6:e3:4a:d1:35:ff:0c:ef:9d:d8:ca:a6:69:33:9a:
97:97:23:7c:8b:8f:3a:e6:76:7f:77:b8:b3:e4:80:
b0:30:48:a6:bf:fd:3d:75:5b:42:08:06:c4:20:f0:
fe:aa:cb:af:64:1b:40:d5:e3:11:cc:66:4c:a3:c7:
d4:fa:b9:13:6e:04:ec:88:5e:92:ef:4c:d2:5d:0b:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:47:C2:3C:47:32:53:FE:E1:E6:04:86:D3:E9:EB:DB:06:EE:38:48
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4f:76:f6:4c:cc:ac:12:69:93:af:d1:ab:9f:26:07:dd:1f:
da:b3:42:c3:14:cd:0a:a6:b0:74:6a:70:94:67:eb:b4:76:18:
a3:e1:9b:21:8c:f7:91:f3:3b:0c:b1:15:41:25:83:32:0b:0c:
47:c1:3d:1a:06:05:a7:17:93:5a:a0:9a:9a:66:58:fa:7f:8f:
dd:50:63:50:a0:bf:83:2c:59:86:45:46:40:32:35:7d:a5:9a:
79:07:e2:23:62:27:b5:dc:34:3b:b2:6b:f5:8c:4b:65:81:a8:
a2:93:c5:36:8d:85:a4:b0:f2:e5:fe:9d:34:ee:78:b9:49:82:
fd:99:7f:fb:c3:4f:16:96:f0:13:63:81:9e:31:31:04:a3:76:
0f:8e:26:33:2a:81:17:86:b0:9c:98:8a:43:8d:d8:19:8f:9e:
a4:c4:4c:87:25:32:4e:14:bd:ae:d4:86:28:27:64:e9:32:30:
64:e2:03:3f:92:62:fb:45:13:17:1e:6b:c6:15:ee:de:4f:cc:
b0:18:d8:f7:8c:41:af:84:a4:a9:f5:68:0c:f0:86:ac:6d:f4:
64:2a:18:4b:23:c8:01:01:29:74:3a:d2:a7:30:b2:1c:a7:00:
28:34:af:5c:a7:fc:82:90:be:9d:09:07:b4:11:24:51:a8:42:
c4:46:ad:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:29:53 2026 by rpki-client