Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
File: D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json)
Hash identifier: 5AX9sooHGxclubInqiuAYDrNfNgz2NGzhBFVmjMu1Ac=
Subject key identifier: 40:6E:1A:BB:77:2C:C9:A3:16:6C:E2:73:12:16:BA:EA:A2:9A:78:3F
Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
Certificate issuer: /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Certificate serial: 019D273A883999E7933B3CD87C74CA754D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
Manifest number: 048C
Signing time: Wed 25 Mar 2026 23:00:40 +0000
Manifest this update: Wed 25 Mar 2026 23:00:40 +0000
Manifest next update: Thu 26 Mar 2026 23:00:40 +0000
Files and hashes: 1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: FSV9SxRPo70CQYUKSCD4U0zxpZVHrYhW7IHNW+lrqs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:88:39:99:e7:93:3b:3c:d8:7c:74:ca:75:4d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Validity
Not Before: Mar 25 23:00:40 2026 GMT
Not After : Mar 26 23:00:40 2026 GMT
Subject: CN=406e1abb772cc9a3166ce2731216baeaa29a783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:46:df:bf:f8:96:b3:cf:d2:29:53:37:c2:
07:c1:27:b5:0f:66:f4:6d:47:f2:47:a1:98:c7:84:
cb:0f:5f:87:57:8e:c7:1a:b8:fb:24:9c:6c:51:26:
47:09:07:c6:3f:95:1c:40:3a:27:53:70:12:1e:8b:
15:36:bc:62:73:92:3b:0d:00:b6:68:1c:97:80:52:
17:72:e4:98:63:36:9f:bb:21:79:9d:e9:63:0a:c0:
91:d1:8e:99:ff:54:82:1a:94:7a:b3:8c:02:61:09:
70:ba:7f:75:4b:8b:be:32:71:5a:55:98:df:93:65:
d6:f7:30:ce:55:32:e1:55:f3:b6:f4:66:f2:a7:df:
87:f6:70:76:91:1f:36:9c:1d:45:2a:c9:4a:97:08:
3d:6b:26:88:a4:b6:29:b8:2b:d2:da:11:6d:ac:d7:
2e:28:62:7b:27:04:cf:27:85:12:51:90:81:c8:de:
7d:56:82:76:31:66:91:59:b2:85:dc:72:40:98:df:
02:f4:d2:3b:7d:a2:f3:12:73:23:80:c8:44:50:ac:
05:9a:60:a4:1d:81:57:f3:60:75:c7:c1:c5:56:11:
4c:09:82:48:4c:e5:1c:d1:2e:1d:09:48:88:56:ab:
f7:48:64:e7:04:4b:02:2c:62:10:85:38:c2:4f:3f:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6E:1A:BB:77:2C:C9:A3:16:6C:E2:73:12:16:BA:EA:A2:9A:78:3F
X509v3 Authority Key Identifier:
keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f4:fc:fc:bd:16:39:fc:46:ce:38:05:27:34:3c:c8:e4:82:
36:73:3c:a7:22:fa:fb:1a:31:91:76:a4:d7:f3:35:fc:e6:5c:
b8:bb:6d:fc:9c:f9:b5:85:24:c6:d2:56:71:37:67:e2:11:0d:
fc:dc:f8:be:5e:ac:3f:51:0e:95:8b:0c:7b:4b:47:d1:69:f9:
26:7b:cc:d4:ee:64:82:1a:11:68:d0:41:e8:c7:65:11:0b:a7:
c5:7d:f4:79:0f:bc:87:46:b5:eb:c2:86:a3:66:a0:ef:d4:d7:
b1:d8:5c:ba:27:d5:46:09:ec:5f:f8:38:c6:75:0d:41:ea:24:
f0:d2:d7:e7:e8:bf:a3:6d:5e:ee:9b:09:fc:df:b4:50:77:3a:
1d:92:29:52:39:85:78:50:64:4a:45:b8:6d:54:b4:32:9b:40:
de:7b:a4:83:05:af:d6:10:04:b3:b1:63:a1:c5:f0:2a:8d:a8:
20:70:5c:87:e9:c0:5e:2e:15:f8:4a:a1:42:94:fa:06:36:8e:
73:25:47:e5:19:6e:c9:70:fb:aa:d0:2f:4c:c4:27:dd:cc:c8:
97:14:7d:f8:29:0a:01:79:b6:8f:01:fa:26:98:6d:14:a8:9d:
a1:1c:1d:f8:7f:7f:0e:ff:61:33:89:82:bc:9f:87:ae:88:86:
e9:59:85:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:05 2026 by rpki-client