Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: lSNt2AWfbmGvmTD/fgIIioxuLKrsl81RkdAiVZGvr24=
Subject key identifier: 9C:DF:AE:92:21:FE:D0:03:87:C8:0D:98:21:ED:2E:86:CB:20:10:33
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 019E1E3585FE6804C4115015ACC04F897A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 1304
Signing time: Tue 12 May 2026 22:01:24 +0000
Manifest this update: Tue 12 May 2026 22:01:24 +0000
Manifest next update: Wed 13 May 2026 22:01:24 +0000
Files and hashes: 1: CEaoQwoKe32gXLS8xrDkZN95-LU.roa (hash: 3B+1jOz57ND8z/Cc76ODdU/PdomfAHvLxw8vMmK0i5M=)
2: D-eIJMBlUgsV2EKXzikcwUfJ8a4.roa (hash: uzfe0JHrQ3H4xrAH5ZMRf3GDL4lVYto1KjiBlRbDnQQ=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: 2cAPpavS5fdBASrq5Ukpn5uUUO+NriHq9mU8rzD/5WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:85:fe:68:04:c4:11:50:15:ac:c0:4f:89:7a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: May 12 22:01:24 2026 GMT
Not After : May 13 22:01:24 2026 GMT
Subject: CN=9cdfae9221fed00387c80d9821ed2e86cb201033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8d:de:96:f1:48:56:8a:60:a9:72:6e:8e:a2:
82:65:a5:68:77:a2:ba:5a:25:e1:54:de:00:3d:a7:
78:6c:e2:30:fb:93:f8:40:d0:bf:51:4f:2f:2b:36:
d7:b3:82:61:04:aa:02:31:de:a7:9e:7d:33:c5:16:
35:90:18:d2:cc:92:94:c8:07:16:26:3b:70:61:d4:
9e:b7:61:d0:52:7b:dd:00:8c:d6:8f:97:40:20:ed:
0d:7e:cc:6c:75:21:08:ed:9f:b1:24:51:c7:bd:c6:
4c:6f:d0:72:4f:fa:8c:99:5b:97:4d:ba:4f:32:4b:
d7:74:48:d6:b7:e4:dd:76:d4:29:6a:e5:33:c0:46:
00:ac:8c:31:89:d3:20:c4:d1:0e:2f:d6:5d:ed:73:
18:e4:85:0e:c6:61:7b:05:ec:c2:f8:bf:62:43:1b:
ca:c4:6c:8e:3e:88:ab:cc:5a:51:84:10:4d:10:f9:
ac:29:65:d2:8a:b1:8f:b1:fa:a0:8d:2c:27:c8:d5:
3e:45:f9:15:00:b8:73:bf:da:98:ef:d7:52:fa:8b:
e3:fb:8b:5c:24:19:d4:ec:12:27:cd:d0:60:ac:39:
37:70:15:79:06:40:6e:eb:15:b3:e3:87:d2:3d:09:
81:a7:40:dc:6a:07:96:eb:ac:0b:73:ce:3d:12:f2:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DF:AE:92:21:FE:D0:03:87:C8:0D:98:21:ED:2E:86:CB:20:10:33
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:46:6f:b9:7d:0b:78:36:ed:32:27:d9:1d:fa:69:0d:fd:b3:
ec:5f:02:65:a5:f9:5e:0f:58:8b:52:b6:3c:e5:9d:aa:87:4e:
51:f8:18:fb:b8:51:cd:54:52:b4:3f:24:f2:e1:bf:55:6d:77:
e9:a4:77:67:f9:5d:26:6e:43:7c:cc:6b:c6:84:86:d3:f6:85:
ba:31:73:2b:41:13:91:13:6e:9c:1b:2d:0e:91:a7:0d:ff:4b:
ff:41:71:cd:31:85:35:a8:c4:6a:55:04:ef:88:0d:14:d1:37:
6c:24:49:d7:eb:1e:db:4f:b0:02:54:29:38:e6:79:49:3b:e2:
b5:e0:44:3a:38:52:5b:73:9b:51:83:1e:51:eb:6f:04:fb:a7:
d8:56:40:3d:a5:40:ff:b4:fb:98:b2:3c:2b:e0:96:d5:dc:3f:
51:f0:bd:65:2c:40:44:0c:b6:f7:98:0f:b6:b3:ce:14:9d:7d:
96:0c:02:d5:3a:94:80:9e:80:5b:b1:da:de:a6:03:0c:e9:bf:
ad:75:64:2f:f1:39:bb:f2:1b:13:2f:8e:15:5c:24:9a:f4:4e:
c3:b9:d7:d2:a3:95:6a:5f:fc:02:7b:c3:ca:42:a1:81:21:67:
d2:4c:21:59:2b:71:90:e4:93:97:76:1c:b5:c9:d0:fb:d9:06:
1a:64:5c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:14 2026 by rpki-client