Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File: 48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier: QHGj5+x6WfGumCz6GoJoBIk9qTPr1/26Csdlq5eWiSM=
Subject key identifier: E4:F1:E0:C4:C2:45:01:B9:4C:5F:1A:EA:C1:E4:6B:7C:84:0C:0C:4D
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 01A1E05ED84B66137B1B03AC3F4F76244EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 18:01:14 +0000
Manifest this update: Sun 15 Nov 2026 18:01:14 +0000
Manifest next update: Mon 16 Nov 2026 18:01:14 +0000
Files and hashes: 1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: K91UezciU0ByPJ6Kj69xNSR6yGlFiyZfrXOeMacnaIo=)
2: gH5BFPvLjCqzOcPYqVQ6Q-d0ay8.roa (hash: b6VMFnv1cWNK34raB+2k08c62RJCIrNzmgwZP9swjd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5e:d8:4b:66:13:7b:1b:03:ac:3f:4f:76:24:4e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: Nov 15 18:01:14 2026 GMT
Not After : Nov 16 18:01:14 2026 GMT
Subject: CN=e4f1e0c4c24501b94c5f1aeac1e46b7c840c0c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:f9:80:df:c1:b0:7b:40:cb:a4:6c:ef:38:
09:c0:29:34:4f:f8:aa:65:cd:76:79:f6:58:c5:a5:
3c:cb:44:6d:8c:2d:03:e9:9b:eb:1a:56:b8:6d:e5:
ec:61:84:1e:25:e2:f8:f1:3e:74:6d:fc:87:a0:1b:
85:76:02:af:0a:ca:2b:17:40:ab:76:5d:dc:2f:4a:
72:64:07:76:e3:93:73:c0:0f:b1:07:b5:88:62:95:
43:c6:05:c7:4f:d1:7c:ce:34:9f:1c:ce:29:42:80:
4b:79:19:97:69:c7:ab:32:c2:e3:4a:67:95:8d:32:
e5:63:30:87:26:cc:8c:a3:fa:58:1f:f0:b6:4a:bf:
2b:ea:3f:bc:61:25:50:dd:82:8a:58:fb:8c:3a:e0:
44:63:12:04:2b:85:33:12:f3:17:59:38:11:aa:47:
a3:e3:34:cd:e8:8e:c5:33:69:87:91:28:23:5f:8a:
b7:38:9f:6d:17:f3:c2:54:54:fa:c4:58:2e:c1:35:
2a:fa:74:c2:34:24:1c:48:45:ad:c5:f8:55:56:9d:
dd:cd:04:f5:4f:64:ea:a7:a8:da:3d:22:a7:b5:4c:
ba:c9:6f:55:f8:2e:93:51:01:49:d1:7a:30:63:34:
1a:83:e8:68:cf:59:b9:a8:7a:ba:4a:ae:b0:dc:cb:
f7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F1:E0:C4:C2:45:01:B9:4C:5F:1A:EA:C1:E4:6B:7C:84:0C:0C:4D
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6a:0e:ab:33:a2:62:6e:d0:df:62:e3:d1:bd:67:9b:1d:bd:
93:dc:39:d3:ba:b4:96:ef:b1:70:a5:51:8a:c5:5c:a6:f1:57:
35:b0:35:c9:f2:20:c0:53:b9:40:c3:69:e3:39:7b:12:cd:48:
d2:c3:e5:c1:17:6f:95:83:40:ce:29:8a:ac:b6:7c:bc:a5:ac:
5d:19:12:4d:a3:45:80:99:85:e6:ff:83:a5:b6:bc:09:80:1f:
03:9c:e6:4d:81:af:d9:90:5d:87:8c:d1:7e:bd:06:8e:07:ab:
0f:12:4e:c8:09:0e:98:2f:63:77:c9:01:c1:1a:3c:cb:23:f4:
0a:f8:62:cf:37:7b:30:6c:83:6b:a2:bf:e3:a1:59:36:5a:1e:
29:62:3c:a0:d4:9b:63:4b:6d:90:49:71:1c:f1:33:16:30:a6:
98:b9:e4:e1:8e:da:96:38:95:c8:c9:81:a5:64:82:cb:ad:e2:
30:70:5c:0a:91:5f:21:d4:7e:98:ab:e7:b7:00:0d:4b:71:74:
91:dd:24:76:69:cf:98:5a:5c:64:c4:55:69:20:59:30:32:4d:
78:07:2a:a3:bc:69:cc:55:7a:2c:e3:94:61:24:c0:4e:65:66:
6d:67:30:9e:00:bb:31:8d:a3:8c:e7:c8:b3:09:2d:4e:e8:63:
57:6d:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:21:13 2026 by rpki-client