Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: bauX72uJ8V/hXpndIJsqYA7AjusngNI7LXTfNmWLbbE=
Subject key identifier: FB:AC:A6:62:63:E5:6F:5B:EA:1A:62:DA:CD:D4:BB:DB:FE:82:A9:AB
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 019F90FF607E88AF58F5BBFE0E9583150109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 13C4
Signing time: Thu 23 Jul 2026 22:01:23 +0000
Manifest this update: Thu 23 Jul 2026 22:01:23 +0000
Manifest next update: Fri 24 Jul 2026 22:01:23 +0000
Files and hashes: 1: CEaoQwoKe32gXLS8xrDkZN95-LU.roa (hash: 3B+1jOz57ND8z/Cc76ODdU/PdomfAHvLxw8vMmK0i5M=)
2: D-eIJMBlUgsV2EKXzikcwUfJ8a4.roa (hash: uzfe0JHrQ3H4xrAH5ZMRf3GDL4lVYto1KjiBlRbDnQQ=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: vv8ttlOHoIKQuYWiQLdyzIx8fWsyw50L5zTgk2VtRbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:60:7e:88:af:58:f5:bb:fe:0e:95:83:15:01:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Jul 23 22:01:23 2026 GMT
Not After : Jul 24 22:01:23 2026 GMT
Subject: CN=fbaca66263e56f5bea1a62dacdd4bbdbfe82a9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e8:b4:4c:42:ce:e0:12:02:c4:cc:c9:74:8b:
b5:ef:dc:1a:53:79:df:cf:5f:a2:dd:bd:1c:15:81:
af:c4:fa:29:c8:06:cf:99:f3:91:1d:bc:c3:cd:62:
6c:f7:66:55:3d:85:1b:2b:0a:e5:d5:4c:95:72:bb:
d6:9d:95:d8:a0:ee:2c:1f:bb:ac:d3:f5:8e:0d:4c:
25:d7:3c:a6:f5:ef:b3:17:f3:38:13:31:a0:c0:d7:
e3:0f:d0:67:02:bb:07:4d:56:b4:81:28:83:d3:4f:
42:49:8a:df:c2:af:a1:bf:47:8a:94:e3:50:cc:04:
5e:fe:0e:dd:af:a7:eb:db:5f:32:e9:7c:b5:6b:db:
2f:fa:79:4c:67:99:d2:57:f8:38:59:75:e5:03:1c:
20:7e:b0:c3:65:22:fc:1c:e7:e5:42:07:bb:c8:af:
f2:43:66:c7:bd:61:13:38:18:cd:fd:14:a2:21:fe:
fc:64:00:26:b9:40:4a:32:60:8d:b9:7d:b4:cc:d5:
dd:73:94:fc:98:a4:fc:6e:cd:61:1d:66:57:e3:ce:
aa:03:f0:63:89:f9:46:7b:51:ad:6f:81:42:00:79:
d5:1d:bf:90:f0:ab:4a:69:a2:5e:af:02:25:3e:1f:
5f:68:52:e7:bf:e9:3a:89:fd:77:20:5a:0a:fd:a5:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AC:A6:62:63:E5:6F:5B:EA:1A:62:DA:CD:D4:BB:DB:FE:82:A9:AB
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ef:6d:64:4b:30:21:5d:66:54:eb:df:5f:b9:b7:c5:58:cc:
f1:6c:d3:40:32:9c:9d:70:df:ce:24:6e:64:93:a4:7d:9a:07:
f5:68:8d:43:8a:cb:b5:b5:5a:28:1d:fd:3c:63:d0:aa:70:cd:
ff:e2:85:11:0c:d4:54:9e:34:d3:d9:90:79:b6:3e:53:11:32:
5a:9b:d5:83:a3:a9:a3:d1:05:98:34:c1:b9:70:85:d2:62:81:
48:7a:53:31:6c:ff:52:55:b6:9b:b5:72:6a:a5:bd:ca:18:39:
a8:e6:be:c8:11:e0:be:83:e9:8b:96:ce:c7:9a:55:e9:56:6f:
a8:d4:03:79:1a:93:a3:20:26:77:97:50:4f:78:41:78:a7:fd:
81:9e:b3:a3:21:cd:5d:39:6d:36:b0:5b:92:85:d6:d2:49:67:
d5:58:62:5d:cf:ae:66:d9:3e:2f:a2:f8:3c:2e:b6:0b:72:0b:
4b:62:9a:96:8e:dd:9c:de:37:31:a0:d2:13:29:14:7f:d6:cd:
f8:76:86:94:c0:73:b7:b6:75:f4:9c:ad:c1:9b:e0:7d:99:23:
65:33:9c:7c:f5:34:82:7b:33:2a:78:23:78:bd:5b:bc:f6:fc:
c5:2f:f6:73:51:97:61:5f:51:51:dd:91:db:f3:b9:36:7c:c8:
2b:71:19:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:25 2026 by rpki-client