Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File: 48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier: D1BAwYHd16tLTOwagKln6vHB9xUdtwjcBWaKVhd47aA=
Subject key identifier: CA:5D:11:92:6B:07:4A:5D:30:45:53:79:E3:B1:FC:8A:DD:57:83:81
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 019F17C25FE889B525C480F78E5C3C7C952E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 09:00:42 +0000
Manifest this update: Tue 30 Jun 2026 09:00:42 +0000
Manifest next update: Wed 01 Jul 2026 09:00:42 +0000
Files and hashes: 1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: Gwcv1HsDDMUEBVD7PL24jCvGd1xaN8pT0RomtYykTck=)
2: gH5BFPvLjCqzOcPYqVQ6Q-d0ay8.roa (hash: b6VMFnv1cWNK34raB+2k08c62RJCIrNzmgwZP9swjd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:5f:e8:89:b5:25:c4:80:f7:8e:5c:3c:7c:95:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: Jun 30 09:00:42 2026 GMT
Not After : Jul 1 09:00:42 2026 GMT
Subject: CN=ca5d11926b074a5d30455379e3b1fc8add578381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:c5:ca:40:71:7a:ab:b6:fd:97:03:c5:0d:
71:80:b3:e4:4f:71:fd:76:d2:82:cd:35:0b:34:a5:
60:22:8a:ac:53:a9:5f:5e:f7:39:01:59:39:e4:39:
2c:e9:22:3c:5a:6e:e2:6b:8a:19:2c:09:b9:5c:87:
8d:8f:d0:ea:90:49:d8:26:22:f2:ae:e1:c1:85:3d:
cc:9a:f2:2c:61:80:54:9f:70:5e:2c:97:7c:8b:fb:
2d:b4:c0:1b:f5:b3:9e:3a:8d:8b:2d:41:82:19:df:
f4:5a:ed:fa:c5:1f:4f:55:aa:e3:68:b3:7f:63:98:
3b:db:66:0f:e4:ab:47:0f:7c:9c:1f:78:54:60:64:
83:4f:62:00:eb:51:94:be:e2:7b:a5:c5:1d:5b:c9:
be:f6:08:c5:e0:f0:a3:d3:bd:f3:75:ba:02:ea:30:
bd:23:4c:62:6a:02:f1:40:bc:db:49:c5:4b:38:dc:
7a:fe:18:f3:d8:22:3b:ac:a8:81:dd:35:c5:c3:98:
ca:ce:d8:2e:d7:44:63:e0:51:bd:2a:2c:0a:e9:d7:
7f:5a:f1:c3:0f:8a:e5:59:29:77:30:ab:5d:01:7e:
91:b0:4e:02:e0:6e:f2:93:e4:bb:9a:6a:12:b2:a6:
43:ec:9e:18:f9:35:42:bc:f1:31:10:7b:aa:16:77:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5D:11:92:6B:07:4A:5D:30:45:53:79:E3:B1:FC:8A:DD:57:83:81
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f8:2c:a6:0e:93:a5:2a:3c:92:3f:b0:f0:17:cc:84:84:67:
43:2b:d9:8b:eb:0c:a8:31:ee:7c:d0:b0:d3:dd:39:03:45:0e:
57:da:03:e2:bc:bb:7c:46:69:c5:30:77:e6:2a:30:8b:99:e0:
e1:57:80:0e:cb:7e:2d:ba:21:b5:3c:ad:24:d8:5e:35:a1:55:
43:30:a3:2f:49:90:23:db:1f:88:21:98:82:0c:d1:ea:e4:64:
26:c6:56:d2:37:e3:4b:90:a5:dc:b7:bb:01:8e:0d:9c:6f:f2:
cb:40:af:b3:7f:6f:af:7c:80:64:49:20:67:4f:be:48:07:2f:
a8:44:85:f9:8c:9e:4f:ba:8d:13:55:f4:e2:f1:eb:85:b6:46:
ee:34:d6:0e:c0:c7:c6:29:fb:0e:40:61:9d:8a:fa:bd:48:f1:
5b:84:96:07:2f:fe:95:e1:a3:ed:12:42:9c:24:ca:29:d5:1c:
40:38:10:5e:8a:b2:3a:01:35:ef:02:75:e7:50:d1:23:c6:d0:
bd:1a:af:c3:b6:48:22:59:89:33:ad:38:e9:5a:ca:48:ff:f9:
6a:17:12:c1:1b:5c:d7:41:9b:d6:4f:02:56:b7:4f:cc:93:81:
d3:aa:7a:90:97:67:08:61:88:e7:df:50:8a:a6:79:b0:7f:e9:
ec:a6:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:36 2026 by rpki-client