Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier: 3eObbwt+NyCBgfxoTXgFwyZLpk/v2yOF5LZO9dB6ReY=
Subject key identifier: 19:BB:28:AD:9D:47:FB:2E:DA:B4:BE:DA:AF:2A:AC:16:EE:94:53:C5
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial: 019D27A8DCCE34C0BC5E39307877A487F41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number: 0833
Signing time: Thu 26 Mar 2026 01:01:11 +0000
Manifest this update: Thu 26 Mar 2026 01:01:11 +0000
Manifest next update: Fri 27 Mar 2026 01:01:11 +0000
Files and hashes: 1: EK0F93TMdb3mWGdibqrR_m6Xz-I.roa (hash: mx33ExzlOw54fpOREl279Ht7q+DRDKueDOMyUR0ZqEk=)
2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: 3YkBMDOv+Ki3B/4a3kDKxwas+DIL/J+VIEpIExMsToM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:dc:ce:34:c0:bc:5e:39:30:78:77:a4:87:f4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
Validity
Not Before: Mar 26 01:01:11 2026 GMT
Not After : Mar 27 01:01:11 2026 GMT
Subject: CN=19bb28ad9d47fb2edab4bedaaf2aac16ee9453c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:00:02:a0:88:44:42:57:04:fa:53:1e:a0:
bd:46:20:bc:9b:5b:37:8b:6d:ee:dd:5f:fe:e8:81:
cb:fc:9b:a9:c0:87:8d:b5:19:49:d1:db:a0:be:e2:
eb:04:e4:1b:7e:2e:b4:61:69:ac:80:bc:25:81:33:
56:75:0d:fd:54:0b:62:1c:87:5f:f5:52:a2:14:80:
17:6c:16:26:71:1a:a2:a2:10:91:c1:66:c5:f5:ff:
74:19:04:83:98:c2:7d:1d:41:bf:75:86:41:e5:e0:
bc:d5:fc:cc:15:e6:e3:d9:dc:c2:a7:a7:1f:0a:7b:
b5:f9:72:2a:29:a4:a9:f1:36:7a:e5:d7:ae:0d:6c:
95:38:37:03:c8:6e:d2:90:f4:32:41:1f:7a:a1:34:
7c:8e:87:ad:da:21:e4:3a:11:64:24:21:bc:11:9f:
da:7b:cb:90:94:10:28:c0:27:ad:d8:ce:89:45:e9:
c0:43:bc:ce:d1:26:3a:1f:b3:05:c6:df:73:3c:cf:
c5:83:f5:bd:25:ee:3a:1b:2f:6f:e4:f8:dc:6d:41:
a4:7a:a3:cd:3b:65:7c:79:75:4b:04:00:81:c4:bd:
47:78:3f:d2:2f:f4:23:e3:28:ba:0b:ef:81:77:3b:
45:28:56:f7:83:2d:5d:79:e7:00:30:28:2c:44:78:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:28:AD:9D:47:FB:2E:DA:B4:BE:DA:AF:2A:AC:16:EE:94:53:C5
X509v3 Authority Key Identifier:
keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:17:ee:9b:6e:48:57:08:00:90:7a:b3:16:46:35:a4:73:6b:
ec:cc:e1:2f:3b:96:04:33:11:b8:4c:48:e4:82:76:4f:e0:93:
03:fe:d7:dc:ce:f8:62:b3:81:9a:34:d9:9c:01:85:5c:64:4d:
7b:2a:b6:ce:a2:4a:67:3f:32:fe:60:2e:94:b2:61:ab:32:aa:
6b:59:c3:54:4b:9a:10:b8:df:14:3c:7c:f4:2f:dd:ec:91:8c:
da:d3:1c:8a:fa:f4:a5:01:fe:1c:67:8e:f4:85:eb:91:2a:1a:
ad:5e:d6:10:92:4c:6f:df:e5:3e:d6:f1:6c:20:6a:72:dd:00:
42:7a:84:b7:29:9e:9e:5d:1f:8a:4d:4c:ff:e5:c8:68:95:09:
cd:d6:5b:7d:f2:f1:5b:4b:14:60:55:f5:b2:f9:4d:22:79:cf:
c3:03:d2:01:12:b1:96:cd:c8:68:ef:5c:bb:ec:ed:78:b3:73:
5c:0a:0b:3b:1d:45:25:b1:17:db:fa:d1:bd:fd:07:2e:7e:2a:
04:7e:db:b6:21:2a:64:c6:60:01:ac:6b:95:e0:15:4d:58:d1:
99:20:66:fe:a2:e9:9a:b9:e1:23:1e:78:17:6d:86:87:df:4e:
8d:ff:79:0d:1d:8d:29:6c:92:3a:ed:0b:e6:5c:6d:b8:37:87:
16:a7:cf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:18 2026 by rpki-client