Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: 0RMbnwJG8CnJpEfVdQo9ipXrQYwtxCmKlcB4dYwQfgk=
Subject key identifier: 80:C3:63:3A:BB:C5:36:95:A0:FD:1B:B8:A8:3E:C8:91:E0:DA:33:54
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 01A0D94CE66B0038A225DBD7D11C74D243D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 146E
Signing time: Fri 25 Sep 2026 16:01:30 +0000
Manifest this update: Fri 25 Sep 2026 16:01:30 +0000
Manifest next update: Sat 26 Sep 2026 16:01:30 +0000
Files and hashes: 1: CEaoQwoKe32gXLS8xrDkZN95-LU.roa (hash: 3B+1jOz57ND8z/Cc76ODdU/PdomfAHvLxw8vMmK0i5M=)
2: D-eIJMBlUgsV2EKXzikcwUfJ8a4.roa (hash: uzfe0JHrQ3H4xrAH5ZMRf3GDL4lVYto1KjiBlRbDnQQ=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: Np/cT45t09h4xNUzffkA7QmqZlnFaU32Da6K+smNOsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:e6:6b:00:38:a2:25:db:d7:d1:1c:74:d2:43:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Sep 25 16:01:30 2026 GMT
Not After : Sep 26 16:01:30 2026 GMT
Subject: CN=80c3633abbc53695a0fd1bb8a83ec891e0da3354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:c2:96:5a:26:ff:69:67:27:71:23:cb:6a:
cf:8d:08:45:8e:e2:80:42:23:dc:02:c5:fe:26:f8:
6e:32:eb:4b:94:3e:b6:6a:c0:2f:be:e8:1b:b4:10:
3c:36:51:1b:0c:25:52:33:c8:92:27:ef:e8:c5:51:
5a:70:34:a7:ee:9b:4e:1f:25:07:a2:b4:ae:e6:47:
23:df:0b:50:e7:49:4d:2f:29:a7:51:93:16:02:5e:
a9:83:d4:d6:89:60:32:93:67:ba:cf:1f:c1:91:a6:
b9:d1:84:82:54:88:32:2f:ab:e5:35:5c:af:de:fd:
7e:b4:64:60:ca:0e:c0:3f:0e:5c:ca:e0:b5:c0:0b:
58:37:ac:e3:f5:71:fd:ca:21:e3:59:e0:87:3e:f4:
3e:3e:5b:9d:d8:c7:2a:96:c7:98:1f:be:e9:7a:69:
51:b3:66:7c:34:58:bc:ca:95:54:b2:a9:d3:bf:e1:
72:cf:b6:32:09:43:f0:60:d3:71:88:0b:98:83:12:
4a:71:9b:25:13:ee:c4:71:d9:9e:c8:a4:3d:eb:ce:
f5:11:1f:29:66:00:ec:a8:c6:4a:bd:67:fb:8b:1a:
51:1e:60:6a:11:d9:ad:36:d0:8d:78:a4:8a:70:0c:
28:00:45:9e:f6:ff:e5:f6:40:7d:6a:d2:cb:5c:9b:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C3:63:3A:BB:C5:36:95:A0:FD:1B:B8:A8:3E:C8:91:E0:DA:33:54
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3f:09:14:4c:b4:b2:41:d7:32:5c:6c:4b:e9:c4:92:35:dc:
71:88:c8:03:8e:c3:84:73:8e:19:a2:61:ad:75:a9:bd:ba:2e:
b4:47:2d:f4:79:f8:90:53:8f:31:d2:2e:b9:a2:7c:6a:cb:c4:
9b:a7:2e:c8:0d:f4:e5:ff:32:9e:38:fe:06:5a:8c:e7:57:c6:
fb:b2:80:3d:62:fb:aa:7c:33:25:5d:84:aa:45:cb:cc:b4:26:
89:5d:f4:f9:bd:68:e6:0a:44:68:5b:15:37:19:89:8e:ad:ab:
65:85:aa:5f:ab:bd:6b:af:f0:d9:a9:cf:f7:8a:93:29:b3:b5:
72:59:83:ef:d0:24:3e:6e:44:11:1d:62:e1:14:07:50:81:a1:
aa:ce:2c:91:7a:91:b9:19:ae:32:8f:7c:4e:e6:90:9b:e4:56:
dc:9a:d9:27:5e:70:69:7b:b6:f4:6d:20:35:83:c9:26:94:8d:
84:48:0b:f4:7d:92:8e:61:e8:b5:f7:97:17:95:28:34:8a:f6:
9d:9d:31:8d:99:f7:55:1a:83:14:ab:c9:5b:1e:99:06:8b:b1:
f7:fe:22:10:04:68:19:9c:c7:57:85:58:3c:87:6b:9b:69:ac:
6d:ce:d5:39:6d:78:c8:a6:11:c0:cb:c0:c8:5f:5c:99:05:dd:
bf:13:e4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:14:16 2026 by rpki-client