
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft
File: 48uGjyIUmP6iUVXOAH_AGbc3_7A.mft (raw, json)
Hash identifier: rULs0EFqhx0KJp3/hkPoc/lFkg3tvrfVkffdEm7dLkU=
Subject key identifier: 85:7E:38:BE:8F:48:BE:D1:32:86:3A:7B:39:B3:F0:7B:D4:37:02:7B
Authority key identifier: E3:CB:86:8F:22:14:98:FE:A2:51:55:CE:00:7F:C0:19:B7:37:FF:B0
Certificate issuer: /CN=e3cb868f221498fea25155ce007fc019b737ffb0
Certificate serial: 019E1CEB84E34C2FF44858C9A583030B4653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48uGjyIUmP6iUVXOAH_AGbc3_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft
Manifest number: 0138
Signing time: Tue 12 May 2026 16:00:57 +0000
Manifest this update: Tue 12 May 2026 16:00:57 +0000
Manifest next update: Wed 13 May 2026 16:00:57 +0000
Files and hashes: 1: 48uGjyIUmP6iUVXOAH_AGbc3_7A.crl (hash: S20NYCV9ZN9MfwGlPDz8FRCopUKwGQLIYyQpiNlFQog=)
2: LT9Y5vQG-KKC5ohOLYSFhDzKcrQ.roa (hash: nut59sxjSaBAsjL5yczj9vKm25xZIG45untoxMX+iNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/48uGjyIUmP6iUVXOAH_AGbc3_7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:84:e3:4c:2f:f4:48:58:c9:a5:83:03:0b:46:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cb868f221498fea25155ce007fc019b737ffb0
Validity
Not Before: May 12 16:00:57 2026 GMT
Not After : May 13 16:00:57 2026 GMT
Subject: CN=857e38be8f48bed132863a7b39b3f07bd437027b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:41:93:1b:23:f0:88:cf:1a:a4:44:44:00:
16:71:34:81:89:a8:48:51:e7:1f:ba:c9:d3:14:26:
4d:6a:e3:3e:ff:5d:c9:74:54:84:12:66:30:5a:27:
55:92:ad:77:a2:49:73:c8:8b:93:00:be:a8:fc:77:
b9:72:f2:bd:63:d0:d3:0d:55:b0:e8:51:17:62:71:
b3:0c:fc:6d:34:a2:5a:0a:60:1b:84:82:9b:73:78:
c2:64:17:c3:4c:4c:f8:df:b5:ea:19:a0:d0:71:7b:
fa:3d:69:07:d3:64:86:d9:1b:47:70:29:9a:9b:f6:
c8:6b:15:17:39:ea:6e:08:f8:f3:1e:4c:e8:5a:af:
53:70:9f:e1:50:c7:f1:eb:21:ab:ec:78:7e:11:b6:
76:95:c6:12:e6:b0:a5:7f:25:03:3e:46:c0:9a:19:
cf:eb:1c:39:9f:f3:e2:2e:be:84:15:28:a1:d6:a6:
77:34:14:fd:6c:00:56:35:34:1e:6f:dc:74:6a:02:
98:eb:b4:a7:bd:7e:a8:1c:fe:38:cf:1b:b7:b9:30:
55:81:a6:29:c7:d7:34:e6:6a:12:ee:67:ac:19:db:
c0:71:40:0f:43:49:a1:7b:ad:68:f3:f4:af:2d:a0:
63:78:a7:9a:27:27:f3:e3:eb:32:a8:91:46:2e:60:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7E:38:BE:8F:48:BE:D1:32:86:3A:7B:39:B3:F0:7B:D4:37:02:7B
X509v3 Authority Key Identifier:
keyid:E3:CB:86:8F:22:14:98:FE:A2:51:55:CE:00:7F:C0:19:B7:37:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48uGjyIUmP6iUVXOAH_AGbc3_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1a9ad0-2bb1-414f-866c-a8f31c8b9e03/1/48uGjyIUmP6iUVXOAH_AGbc3_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:86:a1:a2:ec:f4:6b:bd:f4:22:c6:77:fe:75:21:84:c1:36:
54:33:7a:ed:d0:50:66:24:fa:b2:90:1e:2c:02:18:84:57:dd:
e1:4d:25:c5:5a:01:43:ef:e1:83:88:80:f9:e5:2d:35:db:d5:
27:20:f8:27:55:f2:cf:b6:fe:31:36:a4:20:4d:64:1d:6e:4d:
28:5c:d2:d8:ce:33:05:9f:88:ac:88:79:47:80:d1:e7:c5:64:
02:a6:51:9b:07:02:74:17:2a:5a:8e:74:ce:ce:28:c1:90:cd:
9a:41:22:10:45:a5:b5:c3:41:28:31:e6:d2:92:05:f9:db:bc:
b3:34:c5:1b:15:ac:ef:ad:8e:b2:7d:88:e6:f2:66:c3:c6:df:
26:ce:a8:b3:20:a9:de:c1:9e:55:ce:08:d7:e2:ae:65:0e:dc:
da:66:31:fe:a8:b9:62:59:02:e8:95:b2:69:cb:b2:02:79:7b:
b6:fe:e0:8f:cd:08:76:a5:e3:13:17:46:d5:7c:54:d7:82:89:
7b:7d:d9:70:82:2c:ba:dc:08:18:80:bf:89:32:d0:20:4d:ac:
69:75:f4:69:2e:af:a3:76:02:27:8c:43:51:7b:05:80:1f:2c:
41:78:51:59:0c:ed:3f:5e:92:37:2d:55:50:62:d3:bf:13:3a:
e4:ae:66:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:26 2026 by rpki-client