Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier: 1iXwiyPCgnBQfY8r4DXve3s6/Hfgi0yyXetsOxuqCiQ=
Subject key identifier: CD:23:C8:8A:F0:9A:97:60:2E:62:63:3C:32:74:3F:A9:7C:35:0D:6B
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial: 019F93919D61D7BC5CBB63F0B256C1F81EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number: 0974
Signing time: Fri 24 Jul 2026 10:00:21 +0000
Manifest this update: Fri 24 Jul 2026 10:00:21 +0000
Manifest next update: Sat 25 Jul 2026 10:00:21 +0000
Files and hashes: 1: EK0F93TMdb3mWGdibqrR_m6Xz-I.roa (hash: mx33ExzlOw54fpOREl279Ht7q+DRDKueDOMyUR0ZqEk=)
2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: 5oAdFE3ASBmze0cqCe3smDHsZ3Pk9erDajSewpI0JfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:9d:61:d7:bc:5c:bb:63:f0:b2:56:c1:f8:1e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
Validity
Not Before: Jul 24 10:00:21 2026 GMT
Not After : Jul 25 10:00:21 2026 GMT
Subject: CN=cd23c88af09a97602e62633c32743fa97c350d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:5d:b4:ec:37:06:2e:7d:d3:25:d3:e2:c5:
64:b9:f5:0e:91:35:b5:31:bc:0c:c1:0d:9d:f2:a9:
20:4f:49:47:93:b2:e8:6d:e4:21:41:b9:cf:61:59:
bc:c8:59:95:3c:f4:0f:ae:f5:91:9d:fb:e7:fd:7e:
0f:76:51:ea:07:21:dc:ba:28:90:2c:26:1e:fb:c1:
03:72:46:8f:e6:05:68:37:f4:be:5c:71:1d:44:81:
25:85:6a:45:41:3a:df:5b:a5:f5:49:cb:21:1c:87:
d9:0e:c6:f8:27:ab:aa:43:76:1f:fc:3b:05:fa:51:
6d:6e:d2:3b:e7:70:ab:3a:67:dc:1d:55:5c:3d:2b:
e5:41:ad:e8:bc:77:a3:2d:a0:56:b0:d5:89:a1:6a:
75:51:f4:3a:dc:95:d3:a3:74:c4:b1:71:4e:fd:6c:
29:0c:3e:f4:dd:e9:09:f5:8f:06:54:37:08:eb:16:
ea:a5:ab:a7:36:37:57:94:27:8a:86:11:9e:e2:3b:
94:f6:a2:2e:2f:13:33:e4:91:e8:93:47:74:3f:a7:
c8:ba:17:c6:76:51:3e:88:fe:9f:79:db:46:e1:54:
c0:9e:2a:a3:8e:fb:bb:eb:45:78:ac:7b:89:a4:c2:
ef:10:26:25:2d:99:7a:79:47:0a:9b:d9:b8:d3:e1:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:23:C8:8A:F0:9A:97:60:2E:62:63:3C:32:74:3F:A9:7C:35:0D:6B
X509v3 Authority Key Identifier:
keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7b:db:63:91:cd:f9:4d:38:2e:d3:54:b1:38:ff:b1:42:aa:
bf:82:af:c3:b7:7f:d5:2d:d4:23:c3:a8:ec:06:8f:cd:35:32:
92:a0:3f:cd:af:2e:30:7d:73:fd:3c:31:54:e5:2f:b2:fb:a7:
74:ca:89:7b:b8:54:06:d5:0f:a1:24:76:5c:4b:38:5f:e5:7b:
1c:38:c9:05:81:5a:50:ff:93:f2:f8:89:60:73:e7:c4:e5:ff:
bf:2a:54:56:06:a1:44:a9:06:b9:c3:18:75:00:9d:75:8b:07:
ff:59:42:8b:7f:b8:01:61:2f:9b:4e:9c:d1:96:dc:f3:d2:47:
d3:e1:37:14:74:a4:82:5e:8b:1d:c5:ed:bb:42:83:a1:d5:bd:
b1:1d:e8:7d:f3:0c:d3:15:13:72:18:a9:69:fb:df:68:a0:4d:
5e:bb:16:77:ba:6e:85:4a:e6:fb:08:f2:78:8d:65:b6:7b:20:
6c:01:51:a4:ff:1c:a7:17:35:ed:de:20:de:13:fe:1d:36:23:
3d:e9:4b:3e:dc:51:64:dd:96:91:bf:09:82:40:10:12:bd:c1:
f4:03:91:12:59:bf:f6:02:b8:15:e7:04:4e:f6:31:ff:3c:d8:
4d:77:c7:dd:04:19:c3:4f:6f:f7:3e:9b:ec:96:fa:94:38:c6:
93:fd:82:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:32 2026 by rpki-client