Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier: JBfX0k3yI1NryZsdupEoZ5mABOtYSnLPU9os0soDFWE=
Subject key identifier: 26:AF:21:7E:33:00:CE:2A:BC:3A:5B:38:89:31:D6:E0:F1:A2:79:78
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial: 019CAD2251147DFFE17C53B4281D00911D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 06:00:33 +0000
Manifest this update: Mon 02 Mar 2026 06:00:33 +0000
Manifest next update: Tue 03 Mar 2026 06:00:33 +0000
Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: oaGLaashcmwmf4WLEAuU2+nhYrHCqfdrYJNSxD+6iHk=)
2: Bh71MIA76HLsWqh-KULy4KIN5yE.roa (hash: 2dPXwrTJcmE8t9PcfYM/2V6FylW3n+nURaEmxVQppFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:51:14:7d:ff:e1:7c:53:b4:28:1d:00:91:1d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
Validity
Not Before: Mar 2 06:00:33 2026 GMT
Not After : Mar 3 06:00:33 2026 GMT
Subject: CN=26af217e3300ce2abc3a5b388931d6e0f1a27978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1e:97:ff:7c:cf:c7:24:9a:83:3e:26:16:66:
5f:e4:e3:3a:54:08:70:09:1a:9f:62:70:0c:79:0e:
8e:94:40:6d:2b:c6:ba:41:cf:b5:88:d9:e3:78:37:
aa:ef:c6:d0:ee:6d:73:d5:bc:70:02:13:49:ae:07:
1e:ec:2b:73:9a:09:4c:6b:a8:1f:0f:39:f7:a1:27:
41:6e:67:b9:46:e2:0d:b6:24:d3:ca:f8:4e:b1:a4:
e9:03:bf:c7:c2:21:46:35:0e:e2:66:0d:1b:3a:79:
7c:08:4c:d0:70:63:c8:e9:94:e5:d7:1b:42:c1:e5:
e0:77:f6:ac:4e:5b:fb:6f:b2:9e:ca:3a:e7:20:80:
18:e8:10:db:19:1e:e5:be:df:04:31:ee:e7:99:24:
30:4e:3c:ce:01:14:63:c5:09:6b:92:aa:6e:0c:94:
2f:eb:84:09:7f:f9:8f:b9:17:95:8c:a7:99:71:99:
f7:db:bd:6a:d1:4a:54:1a:44:74:94:ca:48:9d:fb:
11:bd:35:f5:4d:ba:7e:90:f8:cb:56:a4:63:3d:ea:
2c:b6:83:1d:65:fd:64:e9:50:50:e7:c9:d3:b7:06:
7d:11:3e:01:f5:7b:60:4b:9e:5b:d7:cb:e5:1f:57:
45:bc:bb:8c:5e:9c:37:27:c4:69:45:33:3b:03:e8:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AF:21:7E:33:00:CE:2A:BC:3A:5B:38:89:31:D6:E0:F1:A2:79:78
X509v3 Authority Key Identifier:
keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b5:70:15:e2:eb:cf:a9:26:00:f7:ed:d9:8e:80:fb:df:46:
d8:de:79:83:cd:0d:bc:14:67:f2:23:7b:f7:27:16:11:cb:69:
80:70:ee:98:ac:b4:3b:97:a5:76:30:0d:51:78:a4:5e:a0:92:
8a:d7:66:5e:ce:76:cc:b4:cb:03:7c:cc:c3:04:90:84:86:1d:
0f:2b:0c:cf:c2:fc:d4:a3:f7:6c:1d:ec:ea:be:d0:5e:f2:6d:
7c:7c:d6:57:13:e3:4e:5f:e1:95:9f:0d:27:5b:64:bf:67:89:
81:89:62:36:a1:ae:14:42:f3:d2:ab:d5:8d:6b:34:6e:ef:09:
f3:90:13:1f:bb:d1:f7:de:ce:3c:db:54:6f:27:b1:9e:a3:1d:
31:1f:90:c2:dc:47:1c:44:02:2d:20:0c:a8:d5:a3:3f:dc:9c:
40:04:27:f9:a8:7e:af:2b:ac:aa:fa:ba:37:6e:bd:ae:f3:bc:
c8:da:51:86:7f:e5:59:0e:43:1d:05:55:fc:cf:5c:4b:27:cc:
21:ad:85:27:d6:1d:73:c8:2b:67:f2:84:56:72:df:ba:67:c7:
d7:92:78:24:a6:ed:9e:33:15:55:7c:91:38:41:a1:87:1d:c7:
57:71:3f:0f:21:ae:08:45:8c:29:71:2a:e5:76:01:29:fd:7f:
6c:9c:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:36 2026 by rpki-client