Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
File: D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json)
Hash identifier: tmB3ZwnAHKmB8BNXUwqi/vBkmallePP4ybpW++ss6G8=
Subject key identifier: 48:74:17:C9:9F:64:2C:F4:30:7B:18:35:17:AF:5D:BE:96:CF:E2:E9
Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
Certificate issuer: /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Certificate serial: 019E1E6C9945346510298AF919BD907AC29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
Manifest number: 050C
Signing time: Tue 12 May 2026 23:01:33 +0000
Manifest this update: Tue 12 May 2026 23:01:33 +0000
Manifest next update: Wed 13 May 2026 23:01:33 +0000
Files and hashes: 1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: +o0kx37QTgJV9tfuWtv2yN8LT2qzQ5lyoavnhegZuNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:99:45:34:65:10:29:8a:f9:19:bd:90:7a:c2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Validity
Not Before: May 12 23:01:33 2026 GMT
Not After : May 13 23:01:33 2026 GMT
Subject: CN=487417c99f642cf4307b183517af5dbe96cfe2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:c7:25:9a:49:b9:87:98:62:f8:53:07:b1:
e3:6e:36:3f:16:8a:45:69:e3:96:6a:be:78:10:49:
c5:66:17:f4:cc:23:27:f7:45:4b:31:44:b3:f2:66:
76:64:76:74:08:97:de:63:ed:cc:90:5f:fa:02:72:
40:ed:1d:0a:ad:0d:0b:91:74:1c:7e:52:7c:32:b4:
f0:56:01:44:ab:38:a6:4d:bf:e4:db:34:8d:a8:18:
cd:b2:32:ec:3c:dd:3a:a8:3a:cf:40:84:f9:0c:06:
19:23:51:28:da:e2:d1:6e:a7:7f:30:67:a1:0a:11:
b9:65:c9:24:cd:97:46:91:98:96:d0:64:eb:e5:02:
94:a3:73:e6:7b:6d:db:e1:07:3c:29:fd:79:37:42:
9d:fd:68:51:eb:a3:c3:94:f3:53:2f:5c:f1:b0:e3:
82:59:a3:51:27:f3:fd:b3:0d:f0:f7:79:80:8f:f6:
d2:9c:d4:b0:30:a4:39:4d:12:df:9b:08:1d:c9:30:
a5:c0:81:8e:c3:b7:dc:d6:b6:42:77:17:c2:bd:8f:
a1:5e:76:0a:ff:96:60:ae:63:bc:a1:53:8b:39:90:
7b:3f:2a:18:44:af:8c:c3:e0:4c:32:40:15:14:7e:
40:7b:14:c5:8c:9c:1e:a9:b8:6b:23:3b:e4:ac:09:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:74:17:C9:9F:64:2C:F4:30:7B:18:35:17:AF:5D:BE:96:CF:E2:E9
X509v3 Authority Key Identifier:
keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1b:56:1b:9b:ef:7d:eb:1a:7d:c8:4b:30:33:e3:4a:cf:a0:
dd:30:fa:21:fb:1b:5f:98:2e:0b:26:58:42:8c:9f:90:fa:3c:
b2:af:91:a2:ca:7f:43:10:f6:ca:6f:11:46:79:a9:be:37:f4:
e3:58:5f:94:bd:03:98:c8:2e:f9:b4:e6:93:a0:8b:05:9a:b0:
af:f8:81:ea:bd:91:de:25:ba:9a:54:6b:d8:c3:e9:ea:aa:00:
6c:88:6f:4f:ff:4c:84:22:7e:35:21:7d:76:62:5e:2d:14:e0:
20:96:6c:fa:f5:17:1c:cd:17:b6:f1:72:3e:38:02:8c:02:3c:
b1:3f:40:41:fa:39:fb:5c:bd:a5:5b:08:da:e0:fc:50:55:34:
a0:99:84:7e:28:a8:17:26:be:32:50:80:63:b0:e3:25:d2:0c:
40:67:d7:3e:23:a9:58:39:a5:c0:78:e5:ea:6b:8c:a9:ac:dd:
28:0d:a3:54:6d:3d:75:99:1b:80:48:11:c8:96:17:d3:56:fd:
21:a4:c6:bc:61:dd:5f:af:c8:ec:1a:14:ce:b8:e2:8f:a3:0c:
de:ad:5b:7e:51:15:46:6d:d2:93:71:68:d9:f2:82:ba:1c:bd:
71:fa:b3:3d:a0:41:e7:85:07:77:b7:f6:af:5a:dc:44:a8:5f:
40:2a:8a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:18 2026 by rpki-client