Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: fFv0sYdl/H3o2H7Iz6A5BwPmQ/FVs7yTWk5u4wjoheY=
Subject key identifier: CA:C6:F4:93:64:39:77:9D:E3:6F:BC:92:11:1D:06:DB:85:D3:BD:9A
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 01A11AF54B18B92D828D306721DE3193B474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 1490
Signing time: Thu 08 Oct 2026 10:00:45 +0000
Manifest this update: Thu 08 Oct 2026 10:00:45 +0000
Manifest next update: Fri 09 Oct 2026 10:00:45 +0000
Files and hashes: 1: CEaoQwoKe32gXLS8xrDkZN95-LU.roa (hash: 3B+1jOz57ND8z/Cc76ODdU/PdomfAHvLxw8vMmK0i5M=)
2: D-eIJMBlUgsV2EKXzikcwUfJ8a4.roa (hash: uzfe0JHrQ3H4xrAH5ZMRf3GDL4lVYto1KjiBlRbDnQQ=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: bTwi2+joI0uU8VnrsVIg1VlmYbN+Fratupiy2Hx+HRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:4b:18:b9:2d:82:8d:30:67:21:de:31:93:b4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Oct 8 10:00:45 2026 GMT
Not After : Oct 9 10:00:45 2026 GMT
Subject: CN=cac6f4936439779de36fbc92111d06db85d3bd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:96:ee:f8:26:d9:3e:7e:fb:88:09:d2:00:
34:6e:12:33:7f:43:3c:74:54:68:a2:fd:7c:fa:29:
5c:97:c0:dc:1c:da:6e:c0:69:48:28:2e:a8:0b:67:
73:c9:1d:6f:a6:1b:5e:a2:97:76:35:49:8f:2d:b8:
07:7a:b7:c7:21:81:2d:8a:13:79:74:a8:a7:e0:6d:
c6:29:09:ec:b3:c2:2f:7d:0f:a8:15:01:b0:6a:80:
85:f0:9b:7d:5f:e0:ab:3d:a6:1d:70:e7:2d:e0:50:
f4:10:8c:ee:21:2a:62:36:a7:bb:a9:84:b4:59:a9:
4a:e9:94:b9:81:67:9f:c3:e4:c2:15:0d:d8:c1:68:
49:50:ca:87:22:5a:f8:6b:33:a3:65:d0:22:40:43:
65:fb:7d:86:7d:dc:e3:51:c4:04:56:a6:ca:a5:65:
e0:8b:83:37:a4:17:33:9c:f7:b3:2c:28:26:f7:9f:
73:9e:dd:e6:ab:78:c4:90:9a:13:ce:c6:d0:65:96:
b6:fd:5d:9d:64:60:54:9e:cd:e3:7a:94:7e:48:39:
bc:e8:d3:64:4f:73:db:7a:08:f1:36:0e:0f:63:74:
3e:dd:40:6a:0b:66:65:04:51:6b:2f:ca:ef:98:f8:
6c:16:1b:c8:a5:cd:77:ce:0d:e5:89:06:96:76:b6:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C6:F4:93:64:39:77:9D:E3:6F:BC:92:11:1D:06:DB:85:D3:BD:9A
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:15:be:af:33:d9:3a:86:64:34:64:2b:93:74:f9:54:3a:02:
83:cf:90:1e:51:7b:b4:91:cc:47:a8:1d:fc:35:18:d6:3a:aa:
76:23:ec:ca:74:5a:b0:ac:0c:22:63:21:fb:ae:01:ad:66:9f:
35:ed:98:8d:e8:4e:8e:58:35:a9:18:7d:6e:f7:70:b6:03:76:
ce:26:19:ca:8e:4c:05:a2:4d:e9:96:42:3e:7b:fa:ba:09:64:
4d:a5:e7:99:e8:58:2c:15:94:a3:c1:0d:b5:b2:a0:0c:9e:ac:
ed:c3:b5:55:6c:58:42:f0:2e:be:ef:49:0b:d6:82:48:6c:da:
ae:3b:47:26:45:ea:6a:4c:49:ac:9c:56:30:36:1f:35:72:35:
9e:8d:54:a8:d2:f9:ca:d5:1a:c1:da:5d:97:96:b7:51:26:a7:
f9:8a:6e:3d:0d:35:9b:5f:42:4c:69:3f:3d:35:ff:33:b6:95:
0f:c9:0f:17:28:ed:bb:c4:3f:6a:f8:ba:91:84:6a:20:73:ee:
90:a0:65:7e:e2:6f:e7:57:0c:78:d4:c3:38:d9:ee:9a:27:2d:
27:7b:6f:e4:18:75:c1:36:1e:c7:0e:5f:74:dd:c0:47:6e:2e:
7e:82:4c:18:3d:74:18:21:00:5d:c6:0f:2c:40:07:c3:67:81:
0e:6b:0c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:57:14 2026 by rpki-client