Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: SXbChHoIyRHNqFSKYAWz5Owdz9P8EaQtXE0y2/WzBxs=
Subject key identifier: B7:F0:47:8B:CE:ED:EC:62:7B:14:DD:93:9E:E9:40:F1:D5:04:CF:F6
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 019F954A00329CDC3C5E7AEFA526EE1EF933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 08C8
Signing time: Fri 24 Jul 2026 18:01:22 +0000
Manifest this update: Fri 24 Jul 2026 18:01:22 +0000
Manifest next update: Sat 25 Jul 2026 18:01:22 +0000
Files and hashes: 1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: b4IQPS0jdbjJFj3P7L4dU/nm3tjGq3t5WN53TOZe5Bw=)
3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:00:32:9c:dc:3c:5e:7a:ef:a5:26:ee:1e:f9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Jul 24 18:01:22 2026 GMT
Not After : Jul 25 18:01:22 2026 GMT
Subject: CN=b7f0478bceedec627b14dd939ee940f1d504cff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:cc:70:ed:d5:d7:7b:ea:c9:eb:3b:c6:e5:
8b:2f:58:2a:22:99:99:1c:fd:f4:1b:06:e4:42:e4:
5f:d6:8f:74:ec:5c:98:56:e0:32:dd:7b:6a:4c:2f:
67:55:ae:bc:16:7c:00:fa:cc:2e:f3:2a:65:1b:03:
80:78:97:a2:e5:f1:b9:08:70:98:1e:13:7b:67:2b:
e7:0f:91:08:90:3f:2d:ee:ff:81:a8:ca:d5:d2:37:
66:b1:00:2e:9c:33:e8:c2:95:82:03:2e:1e:14:29:
76:0f:b7:a7:cb:c2:e1:9f:12:e3:f2:e1:e0:7f:4d:
78:fc:1f:d1:ee:57:4e:7a:be:b4:da:e1:e7:dc:12:
65:68:7e:c9:0d:8e:35:a1:9d:57:d7:72:25:ac:aa:
95:5a:1e:ac:6e:3f:db:fe:f3:d0:9c:d8:75:23:a9:
f6:9c:c0:12:1e:ac:c4:17:29:47:bc:2b:20:3f:5c:
04:15:30:b4:68:06:5a:56:20:52:a0:9f:57:32:5a:
6d:08:37:6b:55:54:b5:bb:6d:df:2a:a1:26:61:d0:
27:55:d1:ea:0a:71:7b:92:22:63:0f:30:ba:a9:9e:
18:fd:73:5e:86:af:df:48:6d:d8:1f:89:7b:bf:e3:
f0:44:29:80:14:64:82:60:0b:44:35:3a:99:85:fd:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F0:47:8B:CE:ED:EC:62:7B:14:DD:93:9E:E9:40:F1:D5:04:CF:F6
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:09:78:0a:5b:67:16:3e:9e:c2:d4:16:96:a2:92:41:71:66:
da:38:0d:c0:b6:28:63:a3:59:ba:a6:74:f4:fa:bd:71:b0:1d:
9d:22:f2:f5:dd:03:33:42:1c:14:3d:a5:0f:56:c1:05:b3:cf:
4f:be:c2:84:fc:da:da:39:16:07:0b:6c:09:16:07:8e:80:00:
42:22:91:b6:08:6a:64:78:d3:2d:ea:9f:23:ae:e7:ee:00:04:
cb:a5:df:bb:e3:2e:d9:90:de:f7:fa:8a:d6:a2:b0:59:7c:13:
63:26:cf:c9:0f:3c:e9:b5:0e:28:58:7a:01:9e:25:b3:81:5f:
10:af:ac:8b:48:fb:63:01:eb:ac:d4:b5:dd:fc:45:bf:45:b7:
22:37:3c:2c:cc:5f:80:04:67:5a:65:7e:a2:69:95:05:c4:66:
93:f6:ca:5c:45:e4:bd:4f:f9:27:4b:ad:45:a9:b1:67:cf:5b:
3e:b5:9f:17:bc:62:38:7f:7d:0a:f3:e1:e2:38:d4:60:0c:54:
d9:74:66:9b:ef:59:b9:bb:83:d4:ee:41:10:df:ed:bb:10:5f:
8c:9f:6c:63:8c:66:8e:20:a3:72:dc:b4:59:61:6b:df:96:d4:
f6:65:d7:de:a5:48:37:ce:3f:11:08:8b:c9:2c:6a:c7:8f:03:
6d:c0:91:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSgAynNw8XnrvpSbuHvkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZGRiY2NlMjYyOGJmMDlmYWU2YmYwNDQyMThjNjU3ZThi
ZDNjNmUwHhcNMjYwNzI0MTgwMTIyWhcNMjYwNzI1MTgwMTIyWjAzMTEwLwYDVQQD
EyhiN2YwNDc4YmNlZWRlYzYyN2IxNGRkOTM5ZWU5NDBmMWQ1MDRjZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplrMcO3V13vqyes7xuWLL1gqIpmZ
HP30GwbkQuRf1o907FyYVuAy3XtqTC9nVa68FnwA+swu8yplGwOAeJei5fG5CHCY
HhN7ZyvnD5EIkD8t7v+BqMrV0jdmsQAunDPowpWCAy4eFCl2D7eny8LhnxLj8uHg
f014/B/R7ldOer602uHn3BJlaH7JDY41oZ1X13IlrKqVWh6sbj/b/vPQnNh1I6n2
nMASHqzEFylHvCsgP1wEFTC0aAZaViBSoJ9XMlptCDdrVVS1u23fKqEmYdAnVdHq
CnF7kiJjDzC6qZ4Y/XNehq/fSG3YH4l7v+PwRCmAFGSCYAtENTqZhf3q0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfwR4vO7exiexTdk57pQPHVBM/2MB8GA1UdIwQY
MBaAFEfdvM4mKL8J+ua/BEIYxlfovTxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgt
NTBkNzA5YmZmZWI1LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgtNTBkNzA5YmZmZWI1
LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQl4Cltn
Fj6ewtQWlqKSQXFm2jgNwLYoY6NZuqZ09Pq9cbAdnSLy9d0DM0IcFD2lD1bBBbPP
T77ChPza2jkWBwtsCRYHjoAAQiKRtghqZHjTLeqfI67n7gAEy6Xfu+Mu2ZDe9/qK
1qKwWXwTYybPyQ886bUOKFh6AZ4ls4FfEK+si0j7YwHrrNS13fxFv0W3Ijc8LMxf
gARnWmV+ommVBcRmk/bKXEXkvU/5J0utRamxZ89bPrWfF7xiOH99CvPh4jjUYAxU
2XRmm+9ZubuD1O5BEN/tuxBfjJ9sY4xmjiCjcty0WWFr35bU9mXX3qVIN84/EQiL
ySxqx48DbcCRkg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:16 2026 by rpki-client