Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: 4KfJGgdVGZhFTlBvvEambZ3mWq47thI6ap8/Io7FAic=
Subject key identifier: 3E:DB:58:0D:AF:20:B2:7F:2B:D2:E0:0F:BB:70:6A:54:72:86:17:20
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 019EC25BB4BD66197E56C521BDC7CFF95A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 1359
Signing time: Sat 13 Jun 2026 19:00:50 +0000
Manifest this update: Sat 13 Jun 2026 19:00:50 +0000
Manifest next update: Sun 14 Jun 2026 19:00:50 +0000
Files and hashes: 1: CEaoQwoKe32gXLS8xrDkZN95-LU.roa (hash: 3B+1jOz57ND8z/Cc76ODdU/PdomfAHvLxw8vMmK0i5M=)
2: D-eIJMBlUgsV2EKXzikcwUfJ8a4.roa (hash: uzfe0JHrQ3H4xrAH5ZMRf3GDL4lVYto1KjiBlRbDnQQ=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: RgAh7PktDMTKnWn0lKjrtzK+VQ/iKOUgd2mkNFWbY8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:b4:bd:66:19:7e:56:c5:21:bd:c7:cf:f9:5a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Jun 13 19:00:50 2026 GMT
Not After : Jun 14 19:00:50 2026 GMT
Subject: CN=3edb580daf20b27f2bd2e00fbb706a5472861720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:0a:72:fa:87:9c:b9:b4:7d:5a:df:9d:30:
66:22:f1:df:bb:2c:0e:0e:6c:85:2a:1f:cb:09:9f:
97:25:cd:e4:a0:1a:ff:a0:5b:6f:a8:cc:f1:e3:6c:
2b:b5:48:4c:0b:d1:09:d5:cb:3a:6c:e8:8b:aa:8d:
5c:ee:6d:6b:70:03:7b:8e:b4:32:2f:db:11:cb:c6:
e9:46:c6:60:09:62:b0:a7:43:bf:d0:3b:e7:73:34:
97:11:ff:36:9d:a4:9a:16:46:7f:0d:de:58:bc:c2:
df:25:c4:44:33:c5:74:1d:85:8b:dd:b1:7c:7b:26:
88:bd:9b:4d:13:9c:87:a7:62:be:b4:d6:2d:99:22:
7e:16:8a:1e:e9:18:ec:24:6e:5a:4b:23:77:73:bc:
50:8a:d9:b8:4e:3f:ff:29:ed:e7:26:95:c9:39:b3:
0e:95:f8:0d:9d:62:0f:78:9a:9f:2e:cd:79:45:00:
f2:83:d0:38:05:4b:40:8d:13:6a:31:4f:79:e7:b1:
4c:f4:ab:8a:57:3d:e2:09:f7:bf:96:65:30:a1:76:
9e:01:04:7e:d1:95:59:cd:2c:ec:c4:47:08:3a:f5:
71:de:96:65:92:e7:90:7b:8c:b8:89:0b:c8:75:9b:
2e:d3:58:96:e2:e5:3b:69:8e:81:29:0f:71:9e:ec:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DB:58:0D:AF:20:B2:7F:2B:D2:E0:0F:BB:70:6A:54:72:86:17:20
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a0:92:cc:ca:b1:01:6a:5c:45:62:8d:57:89:a5:91:42:51:
18:2a:25:25:65:cf:f4:e9:22:61:36:e1:cf:12:31:5e:50:8a:
f6:75:d3:14:7b:cc:28:9f:0a:c3:55:92:0f:42:4f:24:b1:f0:
80:bb:33:c7:9b:d3:a0:14:16:ae:67:1d:05:b2:cd:79:5e:24:
b0:85:7c:b6:fc:b5:0b:44:4d:ab:4f:cd:c7:e5:63:11:a8:74:
fe:f6:5e:37:dd:c3:4c:02:cc:ac:58:53:fb:2f:cb:5e:96:0e:
1d:b4:64:cd:5e:7a:75:a6:06:96:d0:f8:b1:26:eb:a8:cd:e2:
57:2b:93:db:d1:80:88:5c:21:d6:da:59:61:a9:96:ed:4a:c0:
1f:19:c8:86:94:76:ea:a4:53:d4:20:c6:ea:c6:06:3f:c9:c1:
28:61:cf:94:42:6a:de:b8:20:3f:a4:db:da:26:d4:9d:21:c3:
fb:67:59:ae:1d:ec:03:e5:0f:ae:e0:0b:4d:e7:ac:b5:32:86:
33:2e:c0:4b:7f:f8:8c:7f:a5:d0:fc:bf:fc:83:db:c3:fa:1c:
8c:23:85:b1:8a:b9:7a:d0:98:ec:a0:2b:22:04:25:71:09:e4:
43:8a:aa:04:d3:00:02:1a:ae:88:b4:7c:04:8a:b4:a7:42:81:
b0:99:3d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:53 2026 by rpki-client