Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
File: s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json)
Hash identifier: eFaHgAhcZP4Hn3ftrvYMgIeCobLknUt02HosjqB7pFs=
Subject key identifier: 6A:1D:7E:65:8B:4E:E8:48:E8:EA:A4:F2:98:2F:B8:EA:1F:D5:C7:4D
Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
Certificate issuer: /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Certificate serial: 019D27A8C20812B1C110D23ACC488677290F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
Manifest number: 0CD3
Signing time: Thu 26 Mar 2026 01:01:04 +0000
Manifest this update: Thu 26 Mar 2026 01:01:04 +0000
Manifest next update: Fri 27 Mar 2026 01:01:04 +0000
Files and hashes: 1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: ksWW/nGLB/qSMy5P7ZkexdpSTvoeJP98EJbX43PAICY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c2:08:12:b1:c1:10:d2:3a:cc:48:86:77:29:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Validity
Not Before: Mar 26 01:01:04 2026 GMT
Not After : Mar 27 01:01:04 2026 GMT
Subject: CN=6a1d7e658b4ee848e8eaa4f2982fb8ea1fd5c74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:84:e9:3e:a1:18:55:28:e1:8f:ee:c7:35:
d7:87:32:b2:db:9e:50:a3:89:65:3d:3d:38:2e:ca:
3e:8b:5a:6e:d6:27:a6:a9:cc:08:1b:a1:87:d4:3e:
01:7e:67:22:96:95:d2:91:16:ba:89:78:d8:a5:81:
50:61:fe:2d:77:ae:42:ae:19:e9:64:ce:a3:31:f1:
b2:d1:f6:af:7d:d2:dd:8b:14:d2:09:45:15:52:13:
e8:df:0a:d9:2d:e6:3e:80:96:29:3c:87:d7:52:a1:
24:5c:4c:5c:2f:6c:12:96:04:a9:d0:86:0d:9b:19:
90:30:0b:13:b2:51:b8:53:16:4d:28:ce:85:43:a5:
94:fc:da:f1:0d:61:8e:76:32:5a:95:ca:b0:bf:53:
cb:9d:55:12:2b:f0:4e:c5:7d:2f:13:4e:04:d9:d1:
d9:c7:5d:05:9a:be:87:d6:86:9b:6c:62:ed:2b:f6:
5e:35:01:c2:f2:5a:7b:a1:ab:8a:3c:12:06:e3:cd:
dc:d7:92:2b:83:a4:a3:3e:87:29:41:60:d0:cb:84:
c9:9f:e1:a6:27:fd:aa:e5:15:35:96:4b:37:5e:34:
fe:52:28:85:36:f4:6d:b0:c9:57:b1:64:37:3e:6e:
e5:a0:13:a6:39:82:fc:fc:99:77:63:12:07:53:93:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1D:7E:65:8B:4E:E8:48:E8:EA:A4:F2:98:2F:B8:EA:1F:D5:C7:4D
X509v3 Authority Key Identifier:
keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:32:43:c9:41:b2:d2:d4:18:46:8f:ad:34:4f:0f:ac:da:bc:
8d:bb:ec:9a:d7:be:b0:33:5e:69:b7:cd:5a:dc:6f:9d:3c:72:
54:1e:e3:ba:0a:8d:ca:f2:e4:b2:4c:ec:ed:d9:2a:39:d7:d3:
25:a3:3b:31:37:59:bb:24:08:a0:2d:5b:4b:00:2f:f6:23:18:
ee:f4:8d:41:31:50:fa:b9:81:2f:4c:8d:0a:04:73:ff:11:e4:
a7:90:3b:52:17:15:ac:74:ab:e1:58:18:a6:f5:86:5c:d4:20:
62:25:9d:53:92:7c:3f:e0:4d:7e:de:6c:86:de:d2:7c:ea:fc:
8f:24:f8:3f:b1:b4:d3:e8:35:9a:8f:32:99:53:ce:cb:6d:a8:
6c:24:6b:3f:f6:20:c7:ee:7f:02:16:ad:57:6b:2a:d4:ea:72:
51:7b:5f:20:4b:6c:cc:83:db:54:20:11:b9:66:2e:8c:4c:16:
91:08:49:cd:b1:66:71:8a:86:5b:c1:64:4d:19:6b:05:2b:b3:
92:ca:ae:4d:b2:af:43:1a:cc:ff:67:69:73:1e:58:26:27:b4:
8c:cd:ed:e0:25:e3:bb:84:5e:c8:da:c6:db:c1:6b:d3:fd:8c:
63:2e:74:57:b5:0b:55:e6:95:b2:80:ac:46:99:18:b9:d3:7f:
bc:83:da:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqMIIErHBENI6zEiGdykPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOGYzMzUwOGQ5MjUzMTM0OWRmM2QwYmU5YjU0NWZjOGUx
ZjVlNmIwHhcNMjYwMzI2MDEwMTA0WhcNMjYwMzI3MDEwMTA0WjAzMTEwLwYDVQQD
Eyg2YTFkN2U2NThiNGVlODQ4ZThlYWE0ZjI5ODJmYjhlYTFmZDVjNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9qE6T6hGFUo4Y/uxzXXhzKy255Q
o4llPT04Lso+i1pu1iemqcwIG6GH1D4BfmcilpXSkRa6iXjYpYFQYf4td65Crhnp
ZM6jMfGy0favfdLdixTSCUUVUhPo3wrZLeY+gJYpPIfXUqEkXExcL2wSlgSp0IYN
mxmQMAsTslG4UxZNKM6FQ6WU/NrxDWGOdjJalcqwv1PLnVUSK/BOxX0vE04E2dHZ
x10Fmr6H1oabbGLtK/ZeNQHC8lp7oauKPBIG483c15Irg6SjPocpQWDQy4TJn+Gm
J/2q5RU1lks3XjT+UiiFNvRtsMlXsWQ3Pm7loBOmOYL8/Jl3YxIHU5PU5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGodfmWLTuhI6Oqk8pgvuOof1cdNMB8GA1UdIwQY
MBaAFLOPM1CNklMTSd89C+m1RfyOH15rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczQ4elVJMlNVeE5KM3owTDZiVkZfSTRmWG1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMjYyYjAtNDI2YS00MGQxLTlmYzYt
OWRkYmI5N2RlNjFiLzEvczQ4elVJMlNVeE5KM3owTDZiVkZfSTRmWG1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kMjYyYjAtNDI2YS00MGQxLTlmYzYtOWRkYmI5N2RlNjFi
LzEvczQ4elVJMlNVeE5KM3owTDZiVkZfSTRmWG1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizJDyUGy
0tQYRo+tNE8PrNq8jbvsmte+sDNeabfNWtxvnTxyVB7jugqNyvLkskzs7dkqOdfT
JaM7MTdZuyQIoC1bSwAv9iMY7vSNQTFQ+rmBL0yNCgRz/xHkp5A7UhcVrHSr4VgY
pvWGXNQgYiWdU5J8P+BNft5sht7SfOr8jyT4P7G00+g1mo8ymVPOy22obCRrP/Yg
x+5/AhatV2sq1OpyUXtfIEtszIPbVCARuWYujEwWkQhJzbFmcYqGW8FkTRlrBSuz
ksquTbKvQxrM/2dpcx5YJie0jM3t4CXju4ReyNrG28Fr0/2MYy50V7ULVeaVsoCs
RpkYudN/vIPaZA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:27 2026 by rpki-client