Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: 6/pt1z8H38BrlpcpqT58JDopAoK/Xy+qrwmApQFZ66k=
Subject key identifier: 66:E3:6F:86:E8:C8:77:9B:1E:22:92:A6:B2:E2:02:D8:3A:4A:F2:B3
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 01A0CFA402DAFB16AD2CD6C203AFA59295C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 1469
Signing time: Wed 23 Sep 2026 19:00:27 +0000
Manifest this update: Wed 23 Sep 2026 19:00:27 +0000
Manifest next update: Thu 24 Sep 2026 19:00:27 +0000
Files and hashes: 1: CEaoQwoKe32gXLS8xrDkZN95-LU.roa (hash: 3B+1jOz57ND8z/Cc76ODdU/PdomfAHvLxw8vMmK0i5M=)
2: D-eIJMBlUgsV2EKXzikcwUfJ8a4.roa (hash: uzfe0JHrQ3H4xrAH5ZMRf3GDL4lVYto1KjiBlRbDnQQ=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: W2GG+H27BKG+S8GTDqU4xUkJqrCw1OZFo8hliRulg30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:02:da:fb:16:ad:2c:d6:c2:03:af:a5:92:95:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Sep 23 19:00:27 2026 GMT
Not After : Sep 24 19:00:27 2026 GMT
Subject: CN=66e36f86e8c8779b1e2292a6b2e202d83a4af2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:6e:9c:e2:03:39:64:4b:00:6e:2d:cb:2e:
45:e9:5a:4e:2a:d7:70:37:22:82:36:d7:01:ce:2b:
f0:97:38:59:0e:57:36:97:33:5a:5a:e8:59:e5:6b:
44:3c:4a:ec:d4:91:db:d3:85:cc:cc:f6:16:0b:31:
c0:f0:3b:2c:8b:fa:d7:3e:c3:5a:7e:c0:14:e2:6e:
61:41:29:50:3d:ac:45:9b:3b:88:09:93:9d:48:5b:
99:c9:63:c9:48:e3:34:42:a0:4a:d6:c7:3e:54:0a:
fd:a3:59:31:5d:ab:3e:bf:c2:81:d9:f0:4c:f7:8b:
93:4d:0c:21:18:f1:41:6c:f0:10:c9:06:8a:e8:a5:
8a:78:15:3f:f7:cb:c3:f5:53:33:93:4d:9f:1e:24:
89:6e:36:62:fa:0a:6e:0d:91:3e:67:93:cd:b7:40:
a5:c4:fc:15:ae:42:66:84:54:1c:8c:04:ec:33:c5:
b4:db:85:b4:32:d0:8d:33:7b:68:be:3b:79:90:e7:
44:8b:ed:0b:84:10:da:4d:ce:ba:6c:96:67:48:b3:
a2:21:48:41:94:e9:1f:39:da:b8:28:3d:71:ad:c1:
9e:e7:55:7b:06:98:6e:30:5f:57:97:75:e1:3e:74:
6d:de:72:5a:b0:41:07:a2:d6:94:d5:05:7c:8e:a2:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E3:6F:86:E8:C8:77:9B:1E:22:92:A6:B2:E2:02:D8:3A:4A:F2:B3
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2d:7a:24:54:7a:c1:08:b6:93:6b:32:4f:f5:21:d0:1f:56:
fe:bd:e1:85:89:f2:39:0c:ef:5b:a4:dd:74:8b:19:69:ac:75:
fe:c1:ec:3b:82:f0:bc:7d:29:eb:11:c0:0d:30:c7:2c:63:da:
e8:c9:62:49:59:d6:e7:8b:d2:13:6f:e9:43:32:aa:de:bd:af:
b6:06:f5:db:bc:0c:ab:39:a8:03:04:96:48:b3:11:a2:7f:aa:
43:2a:5b:48:66:e6:9e:29:25:d5:69:7a:33:d5:26:35:f0:56:
44:77:b7:70:3b:a1:2b:15:d7:57:f8:e9:1a:09:8f:3f:70:cd:
48:5f:7b:09:13:df:b0:c3:71:60:a7:69:cb:22:94:b5:d5:9e:
7a:c2:46:66:8b:24:ac:8d:2b:e3:82:08:cb:03:52:13:b8:bc:
2c:88:ca:8a:3d:60:da:13:4c:8e:94:56:39:a6:bc:f5:4b:7b:
df:70:cf:3f:2b:ee:61:c0:71:09:0e:f0:9c:9e:e9:74:9a:21:
bf:32:c5:d0:3b:56:ee:61:40:c2:0c:7c:21:e1:81:be:d4:3a:
58:5c:a9:fe:09:89:7a:fc:f6:db:20:2e:fe:fd:3c:ec:12:74:
47:5a:b1:0f:41:78:4c:80:26:92:89:c5:b6:87:53:c2:09:3e:
75:a5:96:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpALa+xatLNbCA6+lkpXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkY2UzYzJhYWZjNzc4M2NjZTgyMzQ1NTFmM2U5NjYxZDI3
ZWVmYmMwHhcNMjYwOTIzMTkwMDI3WhcNMjYwOTI0MTkwMDI3WjAzMTEwLwYDVQQD
Eyg2NmUzNmY4NmU4Yzg3NzliMWUyMjkyYTZiMmUyMDJkODNhNGFmMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdhunOIDOWRLAG4tyy5F6VpOKtdw
NyKCNtcBzivwlzhZDlc2lzNaWuhZ5WtEPErs1JHb04XMzPYWCzHA8Dssi/rXPsNa
fsAU4m5hQSlQPaxFmzuICZOdSFuZyWPJSOM0QqBK1sc+VAr9o1kxXas+v8KB2fBM
94uTTQwhGPFBbPAQyQaK6KWKeBU/98vD9VMzk02fHiSJbjZi+gpuDZE+Z5PNt0Cl
xPwVrkJmhFQcjATsM8W024W0MtCNM3tovjt5kOdEi+0LhBDaTc66bJZnSLOiIUhB
lOkfOdq4KD1xrcGe51V7BphuMF9Xl3XhPnRt3nJasEEHotaU1QV8jqLR1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbjb4boyHebHiKSprLiAtg6SvKzMB8GA1UdIwQY
MBaAFK3OPCqvx3g8zoI0VR8+lmHSfu+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84MjRjY2QtYmM5Yi00YTgyLWJlOTEt
NjMxMDRkYjZhN2E1LzEvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84MjRjY2QtYmM5Yi00YTgyLWJlOTEtNjMxMDRkYjZhN2E1
LzEvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgy16JFR6
wQi2k2syT/Uh0B9W/r3hhYnyOQzvW6TddIsZaax1/sHsO4LwvH0p6xHADTDHLGPa
6MliSVnW54vSE2/pQzKq3r2vtgb127wMqzmoAwSWSLMRon+qQypbSGbmnikl1Wl6
M9UmNfBWRHe3cDuhKxXXV/jpGgmPP3DNSF97CRPfsMNxYKdpyyKUtdWeesJGZosk
rI0r44IIywNSE7i8LIjKij1g2hNMjpRWOaa89Ut733DPPyvuYcBxCQ7wnJ7pdJoh
vzLF0DtW7mFAwgx8IeGBvtQ6WFyp/gmJevz22yAu/v087BJ0R1qxD0F4TIAmkonF
todTwgk+daWWLg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:59:07 2026 by rpki-client