Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: BfpGPkDzcixUgoqsPdC8NLVDSkCNkGZNRucGYb8vB/c=
Subject key identifier: EE:36:0C:52:29:C2:D4:10:4A:6C:FD:23:19:58:98:D7:DB:FC:4F:AB
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 019E1EA32D557AD1BE8014135EFF4BD90FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 0806
Signing time: Wed 13 May 2026 00:01:10 +0000
Manifest this update: Wed 13 May 2026 00:01:10 +0000
Manifest next update: Thu 14 May 2026 00:01:10 +0000
Files and hashes: 1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: hHstHKdtcoTf22v4jeyXgVsVd6EGv6wrw3bXdSzFRCo=)
3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:2d:55:7a:d1:be:80:14:13:5e:ff:4b:d9:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: May 13 00:01:10 2026 GMT
Not After : May 14 00:01:10 2026 GMT
Subject: CN=ee360c5229c2d4104a6cfd23195898d7dbfc4fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:d5:75:e4:64:6a:17:5f:4a:dc:15:37:43:
a1:4d:43:9d:5d:14:a1:a1:b8:59:77:49:b3:81:3c:
91:33:f7:92:cf:fc:7a:79:4c:b0:1d:29:72:8d:4e:
91:e2:45:1e:9f:33:1e:dd:a8:f0:8d:4d:3f:dc:c0:
9f:ee:4e:0c:5c:08:55:10:3a:89:e5:dd:1e:ef:bf:
46:2b:9c:ea:cd:6f:7f:f1:5c:68:96:35:ae:0a:cd:
37:ec:fc:62:f4:1d:6b:00:32:53:8a:a3:55:6a:fc:
c5:86:5f:d6:b4:0f:23:76:ca:f2:b9:89:e8:30:dc:
a0:cb:c1:c8:c6:34:e8:69:82:7d:85:45:c0:eb:25:
5d:0f:54:4c:b5:99:b0:b8:49:60:0f:30:c1:c6:db:
e0:43:82:27:b6:f7:7f:74:83:55:53:6f:43:6d:17:
55:52:11:03:dc:d9:53:d2:8a:8b:2d:0e:fd:93:32:
76:3f:33:98:f5:8f:4a:ff:0d:51:37:f7:e9:e1:a6:
d7:68:61:da:52:f6:55:7e:e8:64:4d:3a:35:e9:22:
af:a3:84:2c:9a:6a:bc:13:ce:ea:c3:86:e1:31:9a:
f2:a7:98:ab:a4:d1:8e:78:6a:a2:ed:7c:26:f2:47:
f3:d6:37:51:21:90:55:e9:66:ef:60:db:0e:f7:b0:
94:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:36:0C:52:29:C2:D4:10:4A:6C:FD:23:19:58:98:D7:DB:FC:4F:AB
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:7b:8b:06:87:7d:0a:01:27:15:b7:48:8b:b3:09:4b:2a:86:
c7:f8:70:2a:b0:99:da:95:a5:69:25:e9:db:a6:bb:49:60:eb:
5b:61:df:20:05:66:7c:f9:a9:bb:d3:35:10:71:19:cb:63:73:
17:13:8e:b6:5e:af:87:b6:e1:e4:67:0c:6e:44:8b:18:7b:2b:
25:d4:38:6a:d9:8a:e0:9b:96:31:d3:3e:7d:84:05:c0:57:49:
aa:76:3e:ab:46:b0:f1:db:d8:70:ac:8d:20:89:14:98:af:97:
08:50:3d:cb:94:6d:bf:59:d8:6e:d7:75:91:e7:65:00:f2:30:
04:12:de:19:d7:19:2a:51:1b:5c:4c:6a:f9:62:3e:4d:95:69:
1f:10:88:35:94:16:99:57:19:89:c1:b3:26:cf:31:16:16:7c:
21:a3:1a:7c:85:8a:42:99:d9:26:da:14:2b:f6:2d:20:aa:1c:
ce:fb:02:62:c7:03:42:a0:fb:62:52:36:93:7e:c5:61:eb:c0:
c2:50:5d:a0:86:9c:62:c0:30:99:53:85:4a:ee:2d:2f:f0:80:
6a:14:e4:0b:52:a6:60:34:26:a1:40:54:98:d3:3c:19:f0:b0:
7c:53:51:ea:44:76:39:20:94:99:20:0b:7e:42:a6:b4:18:3c:
9a:9e:e5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:06:21 2026 by rpki-client