Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.mft
File: 49sxEepZks_aZC-48pyGNUpjrG0.mft (raw, json)
Hash identifier: b8JWbaVYdeH1HVkqepwCltuo666+QcdH7h94q0OuRwM=
Subject key identifier: 0E:78:0A:F5:03:2E:84:AA:29:AC:D6:11:4F:65:3F:E6:53:1E:3C:C8
Authority key identifier: E3:DB:31:11:EA:59:92:CF:DA:64:2F:B8:F2:9C:86:35:4A:63:AC:6D
Certificate issuer: /CN=e3db3111ea5992cfda642fb8f29c86354a63ac6d
Certificate serial: 019D25F1A4A3751DBEB0AF1DF44C10FEE7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49sxEepZks_aZC-48pyGNUpjrG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.mft
Manifest number: 4A
Signing time: Wed 25 Mar 2026 17:01:26 +0000
Manifest this update: Wed 25 Mar 2026 17:01:26 +0000
Manifest next update: Thu 26 Mar 2026 17:01:26 +0000
Files and hashes: 1: 49sxEepZks_aZC-48pyGNUpjrG0.crl (hash: X78D+uu2oN1Jr3YZfaPhtVt1Dp41DbsGQLbzD0GrpoE=)
2: wtj2zhrszj8EZPv9_c-kD8-d_kw.roa (hash: r5hHxvar05WsnD97m7vdBSbjiHPcNLIO8hNC+KUpW8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/49sxEepZks_aZC-48pyGNUpjrG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a4:a3:75:1d:be:b0:af:1d:f4:4c:10:fe:e7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3db3111ea5992cfda642fb8f29c86354a63ac6d
Validity
Not Before: Mar 25 17:01:26 2026 GMT
Not After : Mar 26 17:01:26 2026 GMT
Subject: CN=0e780af5032e84aa29acd6114f653fe6531e3cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:cf:a5:f5:6d:42:bf:0b:66:c3:12:e5:f7:
26:76:be:4a:74:44:94:69:7b:48:a4:a6:e7:b3:be:
4f:33:43:7b:10:bd:5e:2a:62:3b:19:ab:4f:7e:16:
e5:d0:6d:81:c8:ab:5a:04:80:a2:d8:62:93:62:4f:
ea:48:1d:7d:4e:24:4b:23:5a:3b:ab:62:09:da:bc:
e0:92:ac:90:c8:a1:fe:5c:37:21:2a:3f:17:0f:26:
bd:72:0f:46:c5:ac:23:8c:23:5f:e0:6d:f9:cb:a8:
28:a4:77:e1:45:c4:57:d1:46:aa:43:b5:1f:28:53:
56:e0:06:7d:80:6a:23:1b:e6:9a:77:32:34:f3:20:
a3:75:bf:bd:be:bd:71:bd:9f:92:02:51:d5:2a:f2:
eb:81:cf:3b:0a:c1:87:bc:65:36:3d:dd:7f:8e:d7:
4d:ef:25:6e:71:db:0d:be:30:1b:af:c1:63:ba:a8:
f0:d4:87:b8:af:b7:35:ac:e9:40:57:f5:c9:34:fc:
e6:0c:d4:d4:87:2f:96:1c:6c:6b:42:58:e6:49:75:
d5:1c:70:92:d3:af:99:12:92:34:ed:6d:ef:1e:d6:
60:4b:52:9d:b3:b6:2d:4a:ee:69:91:f9:c7:f9:b4:
fe:79:b3:f7:c8:c5:b6:87:d0:c5:87:ba:04:af:47:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:78:0A:F5:03:2E:84:AA:29:AC:D6:11:4F:65:3F:E6:53:1E:3C:C8
X509v3 Authority Key Identifier:
keyid:E3:DB:31:11:EA:59:92:CF:DA:64:2F:B8:F2:9C:86:35:4A:63:AC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49sxEepZks_aZC-48pyGNUpjrG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a4:53:72:0c:5f:81:f6:bb:6d:53:8a:dd:04:ca:ca:b1:2a:
d8:87:1d:cf:7f:e8:1b:db:d7:f0:d5:43:44:20:b7:5e:30:79:
47:c5:dc:34:37:4a:98:04:08:c9:51:8c:76:c3:a8:ea:23:fe:
23:c9:85:5c:e2:9c:61:13:16:f0:2f:88:f7:1c:b4:41:0c:fb:
93:17:3e:2b:1a:43:2e:8f:93:68:07:87:b6:e8:61:57:e4:ed:
93:20:39:6e:32:ec:59:cb:be:cd:36:9b:ab:bd:58:ae:e0:23:
a0:53:a8:84:2e:f4:68:78:78:a9:e2:37:27:2d:b2:a7:e8:69:
e4:b3:0e:a2:6e:29:ec:db:fa:98:24:11:84:40:75:63:62:93:
5b:08:cf:8a:0b:f6:3b:8a:ec:b6:f4:cf:a1:97:31:d6:40:78:
c8:87:43:df:ca:01:b9:73:33:7c:96:75:ea:b5:8e:d1:23:3a:
89:6e:15:d7:fa:9c:25:c9:15:17:32:ac:d4:ee:2a:3c:8c:5e:
2b:64:6e:c3:55:b7:b2:60:23:cc:8b:be:c6:be:0d:10:89:5a:
9f:9e:1c:b9:8b:ca:ce:fe:ca:e0:2e:34:06:fc:f2:9e:dd:7d:
db:66:ec:03:e6:41:3a:c5:15:af:81:fa:96:2a:61:43:87:e8:
a2:e0:93:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:22 2026 by rpki-client