Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File: 48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier: Uc4zypeA5wbwCimX46/6BNauyYTiKDxzjrG4l75e0Jw=
Subject key identifier: 20:5C:B1:97:15:07:9B:54:45:52:9E:EC:D0:23:41:E8:68:DF:63:36
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 01A0DBA9E159773AB0A9ECB8394DA8C0DD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 03:02:18 +0000
Manifest this update: Sat 26 Sep 2026 03:02:18 +0000
Manifest next update: Sun 27 Sep 2026 03:02:18 +0000
Files and hashes: 1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: dkHIUWf74+JhIbncfV4oIRVWTOtZOJUpCoK1lmeqKH8=)
2: gH5BFPvLjCqzOcPYqVQ6Q-d0ay8.roa (hash: b6VMFnv1cWNK34raB+2k08c62RJCIrNzmgwZP9swjd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:e1:59:77:3a:b0:a9:ec:b8:39:4d:a8:c0:dd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: Sep 26 03:02:18 2026 GMT
Not After : Sep 27 03:02:18 2026 GMT
Subject: CN=205cb19715079b5445529eecd02341e868df6336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:a8:7e:db:57:6b:52:52:06:d1:f1:21:6b:
4b:ff:95:54:ba:33:ba:f1:b1:bd:08:95:c9:9e:41:
6a:00:cb:1a:02:73:bc:da:44:60:55:2e:04:5a:fd:
e3:7f:76:83:b6:7b:bc:70:44:43:12:dd:99:5e:ab:
c1:9c:1e:ae:d1:5a:71:a8:be:c3:cc:9f:8a:ec:7e:
d7:ce:5c:92:fb:f5:c6:3a:dc:82:de:07:16:21:89:
9a:95:03:b9:4e:c5:32:56:80:77:58:2d:bc:cc:60:
90:b8:b3:4c:4c:38:f5:9e:8e:b5:98:47:3d:0c:0d:
2e:5d:ea:0f:2a:ec:4b:94:51:6e:31:a3:67:92:03:
2a:49:6b:d2:c0:ca:f8:13:7f:fd:5e:a3:0e:41:0c:
5e:0e:44:4c:fd:39:31:95:da:09:57:f6:9b:17:92:
23:ad:09:fa:aa:a0:0a:5e:9a:b2:3a:ca:ae:15:ce:
70:1a:7d:8d:4c:d1:b7:cd:d4:5b:5d:35:3f:b1:27:
9d:8b:c0:06:d7:1b:9a:09:b8:bc:31:81:1b:fd:03:
ed:64:74:1c:91:85:63:86:5b:00:64:c8:a8:61:cf:
3f:ac:11:a5:39:2a:22:20:5c:7a:9f:0d:3c:d4:fb:
76:d1:83:0f:c0:ef:17:ab:c0:14:c8:c9:cb:a5:df:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:B1:97:15:07:9B:54:45:52:9E:EC:D0:23:41:E8:68:DF:63:36
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5f:e0:f2:ad:a7:2d:18:ca:97:9c:41:92:ec:9f:8f:aa:2a:
c0:1c:69:7f:a2:3f:3d:03:a3:81:86:81:4a:50:ac:c8:de:38:
f8:58:cd:1b:cc:b6:e9:31:86:3f:dd:1c:90:c8:4f:03:d2:7f:
70:4d:5b:2c:92:22:64:31:02:f9:c2:10:54:91:0b:da:fe:1c:
15:e1:91:11:d7:c8:90:d1:f5:0b:02:7f:2d:11:5a:2b:d5:e3:
0d:52:5d:48:58:b9:21:8a:c9:67:e5:01:31:7a:97:36:75:e9:
5a:fd:8d:b5:93:15:b2:4c:8b:65:46:83:65:49:00:c9:3d:d6:
12:8c:65:01:09:ff:61:c0:d0:56:29:f6:67:13:82:e6:cc:81:
49:72:3d:bd:0d:5e:55:36:30:43:db:85:1c:c3:91:21:7c:6b:
c4:3a:c6:75:d9:7d:d8:b5:83:29:66:00:eb:8b:fe:06:3d:77:
4a:1e:9e:59:c2:4d:7b:43:f1:bf:97:fc:ad:36:bc:d3:cc:b5:
d0:44:45:9e:fa:88:ae:41:45:11:49:b2:bb:f9:e4:00:8c:80:
71:27:e2:cc:6a:91:08:74:5c:2d:c9:91:8b:19:bf:d5:95:7e:
43:34:da:4b:42:40:7e:39:8f:dc:37:b8:6f:12:e5:1d:c0:7d:
64:e0:c8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:37:40 2026 by rpki-client