Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File: 48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier: GTEEGDGFRIMHkPyB90K4FNKNf1KsrTqaiM6FWb7Eg/U=
Subject key identifier: DB:20:36:FC:FE:87:13:B3:F3:74:FB:C4:DD:1F:1D:85:FA:0F:47:ED
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 019D25838C516C6A76CEFE0A0298C896A6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:11 +0000
Manifest this update: Wed 25 Mar 2026 15:01:11 +0000
Manifest next update: Thu 26 Mar 2026 15:01:11 +0000
Files and hashes: 1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: 37yl21o20nNQJvl3dgF+abTPp2h1rxVmhNSXywRA4G4=)
2: gH5BFPvLjCqzOcPYqVQ6Q-d0ay8.roa (hash: b6VMFnv1cWNK34raB+2k08c62RJCIrNzmgwZP9swjd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:8c:51:6c:6a:76:ce:fe:0a:02:98:c8:96:a6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: Mar 25 15:01:11 2026 GMT
Not After : Mar 26 15:01:11 2026 GMT
Subject: CN=db2036fcfe8713b3f374fbc4dd1f1d85fa0f47ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:92:60:aa:51:d2:d5:61:b8:85:8d:aa:5f:
73:54:08:1a:88:05:12:c3:16:7b:ea:3d:ed:01:74:
df:b4:65:61:3b:2f:a0:44:66:d4:a4:be:48:89:4e:
01:ce:44:57:ac:4f:81:fa:c2:c6:c4:b5:ea:49:26:
45:af:88:0b:67:6e:44:bf:41:4a:9b:7e:06:67:0c:
53:22:5c:81:b5:58:b1:f6:38:68:ae:ab:08:bc:e2:
73:ff:11:18:fe:80:06:95:f1:3c:e9:1a:0d:bb:60:
e2:57:84:33:43:a9:a8:0c:83:4f:71:96:13:d4:9b:
d4:e1:3d:fb:dd:b6:bb:64:88:b5:a2:4d:3f:c4:1a:
18:82:ea:76:8a:5c:77:e7:11:e2:32:a5:2f:c1:01:
52:d3:84:2b:74:49:ec:49:6d:13:8d:24:12:51:2f:
ab:dd:5a:b6:c6:ba:5c:42:b1:12:b4:e3:de:7d:76:
b6:03:1d:10:44:01:7a:72:81:a7:56:00:d9:f6:2b:
8b:69:ec:6c:2b:53:6a:59:60:b0:10:72:a8:00:ea:
10:90:00:4d:7b:d3:39:f5:1d:a8:d9:cf:46:1a:a6:
9d:a3:b4:51:3b:f0:d5:7b:5a:96:33:44:4e:65:8a:
af:62:f4:f4:06:7e:0a:a8:18:26:88:2f:c0:e5:0f:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:20:36:FC:FE:87:13:B3:F3:74:FB:C4:DD:1F:1D:85:FA:0F:47:ED
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:74:1c:53:07:14:16:3a:4a:7d:3c:77:e4:9e:5a:3a:6b:a2:
38:41:da:41:df:52:02:74:39:85:06:98:44:e8:9b:ad:0b:0f:
81:99:ab:60:83:70:1c:17:fe:e2:77:c0:41:a4:2a:76:ec:fc:
53:7c:80:c6:d3:bb:81:71:ec:dc:3e:36:db:5f:7f:25:74:af:
ba:78:4e:eb:2b:59:29:30:79:05:53:c9:b3:8b:16:5d:b0:ad:
ea:92:84:97:25:07:31:2c:d8:a3:6e:d5:e5:58:ea:f8:cf:4a:
68:54:55:13:7c:f2:56:8d:68:8c:aa:59:43:2f:bc:5e:6b:8b:
bc:6e:54:ad:26:b3:ae:7b:d1:5c:a9:3f:21:f5:fe:b1:26:b1:
e2:c1:bc:e5:9b:60:cb:9b:13:7f:ea:ef:00:ed:ac:5e:13:74:
93:fb:4f:8b:4e:33:f6:af:a4:12:87:c5:54:bb:df:46:49:58:
f4:2d:bc:96:15:62:95:b5:1a:4f:16:bf:f5:a5:6c:4c:28:53:
e1:bc:bc:55:b8:29:d2:dd:79:3e:7b:c8:d8:98:0a:19:0e:59:
f8:ae:18:64:cf:7d:1e:af:9b:52:4f:bd:46:4a:35:ed:b9:a5:
fa:42:07:c2:fc:c4:f2:74:0d:0a:83:a5:35:40:cc:ce:15:4e:
f9:c8:b2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:58 2026 by rpki-client