Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: tHjKAwQ3MyBGhYiVxloYJGLv25gd6z8/ppgfsesApjg=
Subject key identifier: B2:07:54:4C:27:F5:03:A0:52:61:75:8D:C0:FB:0F:45:60:DC:F8:F0
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 01A10626543EB79CF1429DCFEC3C70F7E26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 0987
Signing time: Sun 04 Oct 2026 09:02:17 +0000
Manifest this update: Sun 04 Oct 2026 09:02:17 +0000
Manifest next update: Mon 05 Oct 2026 09:02:17 +0000
Files and hashes: 1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: GqkDko2f0bOeD5KnA5bQa4S5W8GvFeBX5y3YyLX8u00=)
3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:26:54:3e:b7:9c:f1:42:9d:cf:ec:3c:70:f7:e2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Oct 4 09:02:17 2026 GMT
Not After : Oct 5 09:02:17 2026 GMT
Subject: CN=b207544c27f503a05261758dc0fb0f4560dcf8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:be:b4:93:5e:58:80:ed:62:84:37:98:36:
66:b5:f5:d2:c3:f6:15:df:b2:77:90:df:ed:8e:8c:
dd:50:f6:b0:10:53:13:e8:bb:27:a7:68:f4:77:de:
59:57:fb:02:5e:58:87:68:f9:06:6f:ae:8f:c7:cb:
80:a5:fc:4e:5c:45:e4:f7:9a:6c:3a:2c:6e:6d:33:
56:af:ce:5b:ed:20:1d:f6:cf:62:98:9b:93:d5:ce:
84:6c:b6:11:13:b6:15:f2:e4:45:84:b2:2c:02:c8:
dc:87:88:00:83:e6:e4:8e:42:b3:1f:f1:df:a4:bd:
ee:99:80:27:d7:ca:71:ae:9f:d9:35:4f:34:6a:fc:
53:4f:b6:8d:02:e2:2e:ee:a4:61:1b:36:5a:72:27:
39:61:97:d7:d6:7b:17:4a:a6:98:3b:f8:bf:9f:97:
7e:02:4b:5d:2a:b3:26:d1:16:89:be:75:e1:3f:ed:
2d:3c:96:72:67:99:63:f8:a7:f8:33:34:cb:97:c1:
7d:00:12:aa:40:2b:bc:30:0d:60:39:53:8e:82:80:
78:2a:8a:5a:c4:3b:74:e3:3a:e1:08:1a:d4:0f:f4:
e5:93:3e:c6:c0:8e:c7:6f:7f:90:5b:86:77:55:bd:
d9:7f:51:69:34:7d:80:33:b3:0b:90:03:3f:48:a8:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:07:54:4C:27:F5:03:A0:52:61:75:8D:C0:FB:0F:45:60:DC:F8:F0
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ae:c5:62:8b:1a:08:51:aa:56:c2:a9:50:02:81:d8:9e:f7:
64:0f:19:1a:1f:8d:42:b4:66:b9:3d:08:97:12:6a:e6:f6:f0:
97:63:65:78:5c:94:1c:da:1d:72:ba:97:97:b9:7c:4e:72:d1:
93:9f:68:08:f5:15:ad:50:64:d6:63:37:7f:81:23:d9:5c:56:
f5:a8:ce:11:9c:0c:54:32:12:5e:25:6b:ee:9c:d9:97:53:2f:
c1:51:97:a6:11:98:5e:a2:4d:f3:e9:d5:04:d3:15:76:cc:99:
04:c7:65:18:51:dd:94:70:a5:39:0a:56:39:be:d5:68:0e:e8:
ac:9b:b1:06:4c:05:cb:5f:27:29:b0:7c:92:27:20:ac:e5:72:
d3:cd:dd:9a:6e:65:d3:e6:07:81:7e:7a:5c:07:62:d8:ee:c0:
08:57:fb:3b:ab:7d:03:1c:13:26:9d:18:cb:11:36:f8:1e:bf:
ae:41:9b:ff:7f:47:d1:ae:3c:8d:87:0b:58:27:00:5a:4e:bd:
07:10:84:b5:54:51:e5:46:36:69:75:08:1a:a1:eb:1a:0d:ec:
e5:25:05:de:15:67:74:4b:26:a8:c4:ae:b7:33:10:d1:c7:f1:
cb:5d:5a:87:24:52:c8:fa:5a:8e:e4:e4:7d:05:95:57:b5:ba:
42:42:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:40:49 2026 by rpki-client