Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json)
Hash identifier: 3hjHGWrc/YRS+am/lJWwR9K4kDBWlLeRujveHmMzbYw=
Subject key identifier: E3:9A:80:B6:03:DC:85:71:F9:98:B1:5B:37:D8:0A:AA:BA:17:78:0C
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 019D28167BBD6AA8F54B12EB3CFE14721DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
Manifest number: 1848
Signing time: Thu 26 Mar 2026 03:00:55 +0000
Manifest this update: Thu 26 Mar 2026 03:00:55 +0000
Manifest next update: Fri 27 Mar 2026 03:00:55 +0000
Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: 2ypyyPxqZHkcmcGobIu2CpNT5wPaPfM9D6LcH90v5VU=)
2: nAtKKEo6Mzv-candAEifxL69_bo.roa (hash: R8Il+SRs/b8Guq3ex4Y5aLHHglnfMg1tmovCHKBdtmE=)
3: xgLWD5Den1Vtir_enPdc8NWaykY.roa (hash: 4jXsKVFiJh5GbUk/Fg7oyDg5JPS53CqBKNMj2FoIAHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7b:bd:6a:a8:f5:4b:12:eb:3c:fe:14:72:1d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Mar 26 03:00:55 2026 GMT
Not After : Mar 27 03:00:55 2026 GMT
Subject: CN=e39a80b603dc8571f998b15b37d80aaaba17780c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:d1:ae:ec:0b:08:3d:23:fa:5d:91:d1:5f:
82:30:d8:2f:eb:8a:98:b2:d0:3f:f7:ee:8d:ed:d4:
4c:b4:18:b1:10:9c:76:ec:3b:4f:ba:3a:8f:c4:9a:
df:22:88:3e:cb:f3:3d:6c:db:f1:c0:a2:18:c0:ac:
48:a4:2d:04:74:05:d3:5b:f5:78:85:71:78:c6:b6:
6d:19:c9:6d:bf:6f:c7:43:5a:37:ed:32:9f:78:2f:
1e:7b:e7:61:10:40:e2:12:30:66:d9:d3:74:e7:c7:
89:2b:57:a0:c1:e4:35:51:91:71:75:0a:7d:a3:61:
90:76:01:12:b6:40:7c:a6:04:42:01:df:38:a0:b9:
20:5c:80:9b:a3:5c:16:14:05:ed:0f:e9:15:e8:2b:
1d:2e:2a:11:4a:eb:ed:b3:a3:f0:b1:6b:b0:e7:36:
db:39:35:38:d2:97:2d:5e:b6:4d:51:2a:fc:90:d9:
44:d7:bb:96:02:8e:02:89:e9:85:c9:9b:ec:1f:79:
ce:fd:44:91:c1:9c:0e:bc:08:d3:03:a0:e9:de:56:
e7:00:ad:6a:32:bf:53:ab:c6:98:d6:7d:22:d5:25:
7e:12:9f:df:0c:22:64:02:a7:da:98:e4:db:04:6d:
ae:76:6a:91:88:2d:ee:59:2f:d2:a1:1b:60:6d:25:
60:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9A:80:B6:03:DC:85:71:F9:98:B1:5B:37:D8:0A:AA:BA:17:78:0C
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c2:49:f7:44:23:8a:bf:51:c6:e4:71:81:75:78:b2:fb:fd:
75:38:45:9b:8c:e3:93:ec:47:37:72:69:43:56:93:f5:3c:59:
ab:06:00:0e:f2:fb:90:6a:da:58:4e:1b:a1:17:4b:6c:71:d3:
a4:b8:21:da:ef:a1:8c:eb:6f:83:7f:11:9d:b2:91:ae:5e:53:
5c:a6:73:47:22:b3:cc:e0:59:63:22:5d:9f:1a:d6:f4:cf:68:
bd:da:47:24:60:8b:4b:13:ce:4c:1d:e9:46:80:46:68:42:b0:
f9:a2:63:05:41:fb:a1:61:ed:6b:b1:b6:33:3c:bd:2d:4b:78:
8f:c4:fe:b4:23:e8:59:15:d3:56:ec:36:e5:d5:4a:4c:b3:1e:
c7:23:b8:ce:23:b2:2b:1b:4f:23:cb:42:8b:5d:37:3d:0d:1a:
f0:26:da:92:ea:43:26:c0:60:27:f1:81:88:4a:4a:05:62:72:
f7:bf:5e:d0:ba:0d:a5:51:f0:6e:b7:88:1e:f9:15:88:31:e6:
8d:37:9a:60:4a:bc:6b:fe:1f:7a:0a:0b:93:ad:84:5b:1f:90:
03:dc:96:3c:7c:ef:47:4f:01:5b:26:f9:94:e4:65:46:b5:c6:
77:07:b2:f5:5f:cd:5c:6f:2d:cf:98:5a:ed:37:99:98:63:41:
11:34:0f:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFnu9aqj1SxLrPP4Uch3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Y2YyNzE0ZjI5ZGI4MDM1MmU5ZjMwOWVhMmU4YzUyOGM5
NDZiZDkwHhcNMjYwMzI2MDMwMDU1WhcNMjYwMzI3MDMwMDU1WjAzMTEwLwYDVQQD
EyhlMzlhODBiNjAzZGM4NTcxZjk5OGIxNWIzN2Q4MGFhYWJhMTc3ODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOPRruwLCD0j+l2R0V+CMNgv64qY
stA/9+6N7dRMtBixEJx27DtPujqPxJrfIog+y/M9bNvxwKIYwKxIpC0EdAXTW/V4
hXF4xrZtGcltv2/HQ1o37TKfeC8ee+dhEEDiEjBm2dN058eJK1egweQ1UZFxdQp9
o2GQdgEStkB8pgRCAd84oLkgXICbo1wWFAXtD+kV6CsdLioRSuvts6PwsWuw5zbb
OTU40pctXrZNUSr8kNlE17uWAo4CiemFyZvsH3nO/USRwZwOvAjTA6Dp3lbnAK1q
Mr9Tq8aY1n0i1SV+Ep/fDCJkAqfamOTbBG2udmqRiC3uWS/SoRtgbSVgkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOagLYD3IVx+ZixWzfYCqq6F3gMMB8GA1UdIwQY
MBaAFEfPJxTynbgDUunzCeoujFKMlGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUt
NThhZGY3OGQ4Mjc4LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUtNThhZGY3OGQ4Mjc4
LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsJJ90Qj
ir9RxuRxgXV4svv9dThFm4zjk+xHN3JpQ1aT9TxZqwYADvL7kGraWE4boRdLbHHT
pLgh2u+hjOtvg38RnbKRrl5TXKZzRyKzzOBZYyJdnxrW9M9ovdpHJGCLSxPOTB3p
RoBGaEKw+aJjBUH7oWHta7G2Mzy9LUt4j8T+tCPoWRXTVuw25dVKTLMexyO4ziOy
KxtPI8tCi103PQ0a8CbakupDJsBgJ/GBiEpKBWJy979e0LoNpVHwbreIHvkViDHm
jTeaYEq8a/4fegoLk62EWx+QA9yWPHzvR08BWyb5lORlRrXGdwey9V/NXG8tz5ha
7TeZmGNBETQPXA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:40 2026 by rpki-client