Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: ++t8mXLxl0cbH4xJJNLdVwYACjdAZnlaP6x+qqN9mbw=
Subject key identifier: 19:0D:21:E8:BD:B9:98:40:97:88:7F:18:CF:25:7E:25:26:C0:CC:FE
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 019D98F46D7B0C80D9499B2D68CF109F6B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 12BF
Signing time: Fri 17 Apr 2026 01:00:48 +0000
Manifest this update: Fri 17 Apr 2026 01:00:48 +0000
Manifest next update: Sat 18 Apr 2026 01:00:48 +0000
Files and hashes: 1: CEaoQwoKe32gXLS8xrDkZN95-LU.roa (hash: 3B+1jOz57ND8z/Cc76ODdU/PdomfAHvLxw8vMmK0i5M=)
2: D-eIJMBlUgsV2EKXzikcwUfJ8a4.roa (hash: uzfe0JHrQ3H4xrAH5ZMRf3GDL4lVYto1KjiBlRbDnQQ=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: J8FtngI1hIBYXjmH4yusoENqlqhx6m9HN0rTqR93jg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:6d:7b:0c:80:d9:49:9b:2d:68:cf:10:9f:6b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Apr 17 01:00:48 2026 GMT
Not After : Apr 18 01:00:48 2026 GMT
Subject: CN=190d21e8bdb9984097887f18cf257e2526c0ccfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:90:61:67:c3:4d:0e:4f:5c:e6:bb:74:ea:
34:f8:0f:1c:85:b3:ab:45:52:c2:6c:8b:ca:d9:9f:
ab:b1:1d:06:fe:a6:ef:91:8f:bd:f8:8e:57:c9:bf:
90:23:97:ce:63:06:56:f4:d0:0a:b6:8a:eb:20:d5:
e5:6b:df:40:58:eb:50:22:eb:36:76:31:37:80:3e:
b2:6e:93:c9:f7:52:78:b5:17:fb:97:18:25:64:6a:
92:bc:bb:d4:e0:54:6a:ba:61:b8:e0:d3:8e:73:1f:
b1:0b:dc:80:bc:e1:cc:4a:ed:83:0d:2a:4e:5d:52:
a4:24:83:0b:5d:d8:b1:b0:e1:b0:62:e6:26:40:d0:
b2:4e:62:79:db:79:80:2d:37:ce:d5:01:9e:bc:f6:
38:0b:ef:2a:b7:71:09:b3:c4:00:e9:e2:9f:5b:3d:
af:f4:f3:d9:8c:5b:10:cb:e2:bc:82:46:85:a0:63:
20:b8:b9:76:df:d9:9d:eb:4d:f5:e0:e5:a0:94:85:
25:39:47:56:01:c2:1c:bd:23:34:97:76:8b:06:12:
0c:91:fa:8c:c2:35:95:82:9a:3d:87:ae:4f:69:db:
8a:48:8e:2b:8b:0d:88:db:b2:40:4b:3e:a7:43:24:
06:59:78:7d:30:52:24:4a:48:75:8b:9a:1e:17:b3:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0D:21:E8:BD:B9:98:40:97:88:7F:18:CF:25:7E:25:26:C0:CC:FE
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a6:1a:4d:74:29:76:1e:23:a6:92:44:0c:e3:c9:76:66:3a:
5a:5a:26:9a:ec:73:f7:6b:a9:b8:b0:29:2b:e8:1f:82:12:8f:
c7:26:e2:6d:2c:7a:d6:29:fa:cb:5e:b5:9b:da:29:d1:5e:5b:
92:53:d6:fa:39:91:83:c6:fb:be:97:f8:c7:09:77:12:46:28:
70:e7:c4:bf:7b:6f:6e:dc:e3:b5:47:c0:e7:be:b4:3d:71:b2:
87:5a:82:d5:c9:01:00:f8:af:e5:b7:4d:50:b3:6c:b1:f8:52:
88:97:7e:3d:0d:f1:dd:d5:8f:7b:e8:c7:21:08:14:c3:a7:ec:
a3:5b:c9:3c:7f:0e:79:73:93:42:a3:b4:81:d2:cd:cf:5d:cf:
b1:51:40:4a:ae:f2:f7:43:21:e7:73:e2:44:42:28:2b:68:e1:
c2:1d:d7:0e:f4:40:c3:aa:e6:64:df:a8:26:e7:45:b3:3a:89:
69:5e:47:46:3c:3f:ef:7b:80:41:2b:46:e5:b6:95:76:64:e2:
b0:93:f0:c3:f4:eb:da:a3:d5:b6:87:b0:4d:73:b4:fc:50:52:
4c:40:d5:7c:1c:fd:1c:8c:da:97:5d:c3:f8:c2:bd:d3:bb:6b:
5d:39:83:4e:e7:ef:e7:24:56:76:4b:3c:67:82:0c:42:e7:96:
9c:a4:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:36 2026 by rpki-client