Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/48ed79-62e0-459f-905e-c05adf57a10c/1/SPV9zk68lqMShLrrQu92zD2HSwU.mft
File: SPV9zk68lqMShLrrQu92zD2HSwU.mft (raw, json)
Hash identifier: QuSIu78HdtU5/w1gSv394V65H6ED01JazpoPWLQhkC0=
Subject key identifier: 33:98:DD:EE:21:6B:56:37:18:16:C6:24:34:54:6C:81:E2:41:62:C7
Authority key identifier: 48:F5:7D:CE:4E:BC:96:A3:12:84:BA:EB:42:EF:76:CC:3D:87:4B:05
Certificate issuer: /CN=48f57dce4ebc96a31284baeb42ef76cc3d874b05
Certificate serial: 01A0E32BF34C1ECA6A936D44B2967F711148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPV9zk68lqMShLrrQu92zD2HSwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/48ed79-62e0-459f-905e-c05adf57a10c/1/SPV9zk68lqMShLrrQu92zD2HSwU.mft
Manifest number: 01C1
Signing time: Sun 27 Sep 2026 14:01:43 +0000
Manifest this update: Sun 27 Sep 2026 14:01:43 +0000
Manifest next update: Mon 28 Sep 2026 14:01:43 +0000
Files and hashes: 1: R6CXQRG_bUGdqF_hURWhPOfO5ig.roa (hash: 9hsfYzdZ3uUYLtNXia0mHBK4KdVl4c+WLR9/NCsDRH0=)
2: SPV9zk68lqMShLrrQu92zD2HSwU.crl (hash: 2hSFaJIYmCTIIbFaS7/qc+qaqu+TutbFrKg/pcO0Asc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/48ed79-62e0-459f-905e-c05adf57a10c/1/SPV9zk68lqMShLrrQu92zD2HSwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/48ed79-62e0-459f-905e-c05adf57a10c/1/SPV9zk68lqMShLrrQu92zD2HSwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPV9zk68lqMShLrrQu92zD2HSwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:f3:4c:1e:ca:6a:93:6d:44:b2:96:7f:71:11:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f57dce4ebc96a31284baeb42ef76cc3d874b05
Validity
Not Before: Sep 27 14:01:43 2026 GMT
Not After : Sep 28 14:01:43 2026 GMT
Subject: CN=3398ddee216b56371816c62434546c81e24162c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:ca:05:42:5d:e6:e2:16:e8:b8:9e:d6:14:
81:d2:3c:64:33:e2:1e:40:86:39:2c:38:c3:55:1d:
54:7f:f4:a9:21:8c:7d:be:00:9e:36:a2:35:ae:ec:
64:7d:93:c3:b2:e5:47:50:0b:02:a0:5a:3c:f0:b4:
74:3b:b3:68:4c:41:d3:25:94:0f:28:ac:23:28:f5:
e1:c8:4c:8f:c5:9e:26:b9:da:9c:be:ce:ca:3c:a6:
fc:91:e4:b4:52:1a:82:b4:5c:cd:53:60:cc:fa:61:
6f:ca:42:17:79:18:f8:04:94:16:b3:9e:66:13:f4:
1d:48:54:28:e4:e0:79:79:2d:2c:5e:77:64:7f:9c:
d4:83:fd:60:fe:80:c6:54:7a:19:a0:0b:aa:0a:2b:
0e:40:b3:d5:78:f4:98:37:59:c6:14:fb:a3:c5:73:
15:4c:72:45:0a:79:5e:81:21:5f:d2:ba:80:9e:b8:
53:99:5b:2c:e9:bc:c0:5a:61:1f:83:e8:0f:d3:41:
f8:36:a8:0d:90:6b:47:8d:7a:51:10:57:3a:5b:42:
dd:60:1b:1c:1d:0a:2c:2f:a1:35:ea:1d:b9:4b:62:
a8:d2:3e:1e:03:0a:b9:87:13:f8:65:15:5a:bf:12:
64:dc:e2:7b:97:71:56:f7:bd:a9:3a:22:1a:84:e9:
a3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:98:DD:EE:21:6B:56:37:18:16:C6:24:34:54:6C:81:E2:41:62:C7
X509v3 Authority Key Identifier:
keyid:48:F5:7D:CE:4E:BC:96:A3:12:84:BA:EB:42:EF:76:CC:3D:87:4B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPV9zk68lqMShLrrQu92zD2HSwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/48ed79-62e0-459f-905e-c05adf57a10c/1/SPV9zk68lqMShLrrQu92zD2HSwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/48ed79-62e0-459f-905e-c05adf57a10c/1/SPV9zk68lqMShLrrQu92zD2HSwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:69:28:a2:42:3e:d7:d7:37:c6:eb:29:29:25:4a:75:b7:11:
0d:a1:69:20:a7:2b:7d:e7:16:2a:54:69:f7:7b:cc:d0:a3:c0:
a2:8a:2c:13:6b:d8:bd:9f:a8:1c:04:19:fc:45:36:9e:2d:b6:
42:1c:3d:01:c1:d1:c7:79:d7:e9:e2:60:e7:49:ce:ef:3c:2b:
33:72:3c:33:11:fa:95:c5:45:ee:78:ba:88:e8:c9:f7:2d:aa:
0e:44:fc:07:6b:b0:83:48:42:54:14:96:b2:f3:be:32:00:f2:
d6:b2:27:ea:25:c7:a9:78:45:54:0c:0e:6c:60:e5:0b:94:a2:
14:9a:d1:7b:7c:ce:cd:37:0d:9f:56:c1:77:60:9e:a1:41:ee:
4d:77:fa:bf:94:bc:d3:2e:9f:f2:b2:a8:87:79:5f:fa:da:bc:
c7:3d:2e:e5:a9:8a:75:b4:1c:cd:2f:a7:bb:85:28:11:e7:ba:
5e:2f:d2:76:b0:c8:ff:4d:b3:9c:f5:7b:40:30:1d:e2:41:78:
1b:e8:4e:2b:11:cd:ae:43:6f:cd:37:9a:bc:d6:23:6a:e3:0c:
98:d8:ef:6c:46:c7:48:00:cb:47:ed:44:b2:c7:f9:c9:4a:52:
06:92:d6:2c:bf:84:cd:c1:66:d3:6e:08:cf:ee:02:08:ae:32:
d6:27:94:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:54:23 2026 by rpki-client