Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: B3XAbyJNdokgxcro7Har6Wv9GnfRaoFFSG34lC7GJ6M=
Subject key identifier: CB:7C:44:2E:F4:0D:AA:E2:FE:CE:43:AD:9D:1F:1E:67:B2:F0:F4:CD
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 019D386691660B78893F771ED1362F2EAA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 128D
Signing time: Sun 29 Mar 2026 07:02:19 +0000
Manifest this update: Sun 29 Mar 2026 07:02:19 +0000
Manifest next update: Mon 30 Mar 2026 07:02:19 +0000
Files and hashes: 1: CEaoQwoKe32gXLS8xrDkZN95-LU.roa (hash: 3B+1jOz57ND8z/Cc76ODdU/PdomfAHvLxw8vMmK0i5M=)
2: D-eIJMBlUgsV2EKXzikcwUfJ8a4.roa (hash: uzfe0JHrQ3H4xrAH5ZMRf3GDL4lVYto1KjiBlRbDnQQ=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: Ml5JYyVVZ0v/E08/Pv6seb1QF6f8gMrkPLe3ZifNg7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:91:66:0b:78:89:3f:77:1e:d1:36:2f:2e:aa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Mar 29 07:02:19 2026 GMT
Not After : Mar 30 07:02:19 2026 GMT
Subject: CN=cb7c442ef40daae2fece43ad9d1f1e67b2f0f4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:cd:d4:93:37:2f:47:19:0e:7f:77:19:f1:
c7:c1:24:bc:03:a6:e5:42:a7:b8:44:61:1c:68:ab:
e1:39:f2:53:b5:cc:cd:55:e8:51:27:eb:23:fa:ee:
7a:ee:77:ad:6b:99:75:32:37:fe:4a:ef:b4:fa:e6:
d9:17:cc:f9:60:be:c0:d7:7c:a0:a4:85:75:56:ed:
89:cc:59:b6:33:54:40:c5:09:2a:b8:96:73:a7:31:
2d:86:cf:06:66:d0:78:59:4d:4a:f0:75:44:b7:d3:
23:e0:f7:ee:ed:d4:84:df:33:14:3c:64:6a:34:42:
a5:74:81:06:95:bd:ae:ff:6c:3f:7a:df:9f:2a:8e:
8a:ff:1c:25:d1:3b:b3:f0:34:d1:a9:e3:4b:ba:c9:
aa:06:6f:31:cf:b3:48:6b:11:1e:a7:0e:43:ce:4d:
8b:ea:7b:b7:bb:b8:fe:fa:ad:4d:4f:8a:71:f6:13:
25:c1:76:4f:c7:9c:ae:a1:75:b2:c6:95:f9:f8:f1:
f0:39:e4:c1:f7:a3:8d:28:89:c9:be:2a:03:44:a3:
21:c1:20:ae:3b:b8:bc:c7:87:65:24:57:eb:a4:28:
7e:09:43:65:ac:de:a2:07:5d:88:6c:6c:b8:da:58:
86:0c:7b:08:22:45:17:68:5e:09:a1:96:32:56:ec:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7C:44:2E:F4:0D:AA:E2:FE:CE:43:AD:9D:1F:1E:67:B2:F0:F4:CD
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5b:01:e3:e2:0b:34:2f:3c:a1:e9:b4:3d:34:0a:6f:8b:f6:
f9:76:24:53:d7:37:93:a3:1f:28:cf:7b:db:0a:e7:56:0d:a2:
e7:09:9f:8a:51:69:ff:ea:91:24:3e:f1:93:0e:c8:d2:c0:10:
66:69:04:c8:4d:d2:5d:0c:e9:16:d2:8e:84:aa:30:68:d0:11:
f1:84:d0:4d:1f:2b:42:18:fe:57:9e:f8:bb:56:63:f2:f7:ad:
ca:29:bf:dd:5b:b6:98:00:2e:0a:f1:a9:76:59:0c:a4:4a:5a:
be:3f:83:35:7b:66:e0:60:3d:20:ba:43:54:ce:16:ba:74:e5:
68:ca:e5:31:e2:68:b0:06:aa:6f:9a:ef:76:e5:e6:5f:11:54:
e2:a5:2d:88:60:5b:33:d4:dc:81:98:86:bf:89:13:14:f8:73:
e3:87:ca:2b:29:97:02:0d:08:3f:84:01:48:5b:f3:92:59:e5:
e8:df:e8:55:84:6c:9a:4b:3a:27:fb:af:5e:72:fc:26:18:7a:
b6:f7:7e:d8:d2:24:38:a0:bd:27:8e:3d:88:30:b6:ee:a9:f4:
8f:5a:51:e9:8d:36:98:57:df:37:27:59:3a:77:7f:39:3d:09:
b4:91:14:a2:3b:97:50:f6:b3:81:cb:f6:76:24:76:b2:67:bb:
fa:b1:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:12 2026 by rpki-client