Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: HyBkuKW4yT/9qSzhDX4DFBIq7wefEi+ba84aHihnD4k=
Subject key identifier: 12:53:45:3B:AF:10:EC:F7:9B:AE:36:7E:0E:B6:44:EC:71:97:D0:8E
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 019D27040F84BFEC3A0FB1E8311499C52386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 1284
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: CEaoQwoKe32gXLS8xrDkZN95-LU.roa (hash: 3B+1jOz57ND8z/Cc76ODdU/PdomfAHvLxw8vMmK0i5M=)
2: D-eIJMBlUgsV2EKXzikcwUfJ8a4.roa (hash: uzfe0JHrQ3H4xrAH5ZMRf3GDL4lVYto1KjiBlRbDnQQ=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: drP5F1lymHGh77ZrLFT2IgNHf/KJ8BH9Wjp8KwZRxRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0f:84:bf:ec:3a:0f:b1:e8:31:14:99:c5:23:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=1253453baf10ecf79bae367e0eb644ec7197d08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:db:eb:97:a8:a4:c7:e2:97:a9:aa:80:d3:83:
a5:04:d5:c5:a2:b1:1e:eb:01:6b:e3:88:ed:37:a7:
50:32:08:37:9b:04:b2:57:ce:99:2e:db:a0:44:b0:
5b:5e:33:83:70:f3:ca:07:55:3a:6e:e6:77:98:5e:
fd:f2:8c:d0:4f:df:d0:ec:9e:ac:a2:02:13:7b:ee:
2b:01:6e:bf:d1:38:73:3b:2d:32:78:27:42:89:81:
60:22:ca:c8:7b:01:6b:27:28:38:4d:51:48:c7:22:
7a:0d:86:c7:34:d3:c0:81:58:29:c5:9a:f6:8c:9b:
26:44:17:66:0b:cd:8e:0a:64:9a:65:15:40:a7:07:
a3:9c:9c:aa:7c:37:39:9b:7a:fc:ad:ac:11:8f:79:
41:b3:85:de:21:a6:46:53:9d:71:11:f0:1d:e5:45:
e7:df:e4:5e:03:84:fe:b6:e3:9c:b0:ea:f5:62:85:
3d:50:07:f3:c1:f1:2f:6e:ea:6e:5d:b0:68:c1:d3:
9b:c1:bb:48:95:ee:13:4c:06:f7:12:ff:a6:b2:c9:
fb:0a:e9:09:ab:0e:37:31:c7:23:ec:d6:59:3b:8e:
cf:a2:22:5a:f6:60:0f:38:29:fd:49:62:1e:b0:a6:
fe:52:2a:30:8d:53:bd:86:d5:be:d6:db:68:af:3b:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:53:45:3B:AF:10:EC:F7:9B:AE:36:7E:0E:B6:44:EC:71:97:D0:8E
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:50:d8:a4:45:04:87:c6:17:e5:36:58:90:03:c6:cf:27:1e:
c9:c6:06:fa:b8:01:a1:f3:dc:fa:e6:93:f4:8d:2d:22:41:b7:
cf:66:45:05:42:78:cc:7c:3b:d9:87:6a:cf:d7:57:9b:95:8b:
af:a9:87:1d:90:62:c3:0e:b5:7b:6d:ae:6b:83:e7:4d:92:ee:
df:e8:de:a4:3a:ff:18:df:b9:c7:ff:4c:15:fc:ed:dd:48:52:
8d:33:3c:08:42:29:6f:07:51:11:5f:0d:97:e5:85:e7:ae:0d:
f8:e9:f6:85:3d:37:cc:94:51:62:3a:55:0f:92:fa:ab:09:a3:
87:f6:c6:5e:c0:1b:d1:3e:48:6e:b7:22:bf:bb:1c:50:0b:a1:
32:48:9b:0d:88:d0:92:b7:76:5c:13:92:0d:2c:2a:62:4d:fd:
0a:b1:9f:e1:f9:ef:00:66:19:c1:33:30:0a:02:c7:bc:03:1b:
c2:dc:37:9a:ff:26:9d:f4:3d:02:09:72:86:62:58:21:01:8d:
9c:44:ab:3d:41:c0:92:0b:d7:76:e6:44:8e:be:10:76:e9:8a:
91:d2:6c:1a:ac:58:91:3f:46:f2:d4:19:98:87:f8:f6:68:03:
d1:50:8c:47:48:42:a8:03:90:b5:7b:0a:16:86:69:aa:9d:76:
79:f1:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:46 2026 by rpki-client