Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: Kna3uZSC0DkV0N8JsADk/yRZdL62yeJLwSE/ri7m7wg=
Subject key identifier: 2C:AC:A8:01:C8:84:83:95:92:9B:1A:9E:FA:D4:77:B8:8A:5A:11:D0
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 019D2816D00F18A5486158514549BA609728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 0D0D
Signing time: Thu 26 Mar 2026 03:01:16 +0000
Manifest this update: Thu 26 Mar 2026 03:01:16 +0000
Manifest next update: Fri 27 Mar 2026 03:01:16 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: +dE7KUf/LJrFkGstjg/EX++DWww9C0pBVSFHQdNQT/4=)
2: hD5yM-bTRcXqw7hsAje6CKQSULU.roa (hash: BoKM+q4JQCN0QltCSwaO5romaCSLzyBz/YnHCsh+0Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d0:0f:18:a5:48:61:58:51:45:49:ba:60:97:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Mar 26 03:01:16 2026 GMT
Not After : Mar 27 03:01:16 2026 GMT
Subject: CN=2caca801c8848395929b1a9efad477b88a5a11d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:1e:27:7c:cf:be:3c:13:b9:9f:08:07:4e:
1e:37:0f:e1:de:58:25:aa:75:7a:5c:ed:84:e4:68:
5b:7c:74:3e:65:82:53:61:31:3e:b5:3d:dd:32:21:
ab:6e:65:bd:88:9c:93:a9:03:e8:da:5c:4e:a1:40:
0d:9a:b0:9a:eb:98:8f:51:a5:cb:bd:2a:b2:f1:3a:
ce:eb:ca:cf:4a:de:aa:e3:08:59:3a:01:ee:df:e5:
0a:5b:69:4d:cf:36:45:90:fa:cc:b4:0f:54:39:5a:
fb:99:28:9a:80:2d:1f:71:c3:60:89:2f:e8:6b:02:
f6:e7:df:49:fd:76:39:87:0d:8a:62:d6:66:a0:a9:
a2:36:8d:a9:6e:c0:f7:c8:58:81:b1:d0:5f:2b:fd:
e6:22:6d:93:e7:ff:59:53:1c:f9:0d:d9:64:8f:76:
08:04:c6:5c:88:45:50:28:bc:cc:e7:61:f7:54:ab:
f4:e5:19:94:8a:35:85:f8:0d:c4:09:24:af:c8:3a:
d4:08:a9:d1:57:c9:89:20:51:a1:fb:a5:fb:73:3e:
f8:40:32:79:0e:a3:0c:34:a6:76:b9:3e:6f:9a:63:
b3:13:9e:7b:6e:c7:32:53:44:9e:fa:30:45:1f:41:
d4:7a:1e:59:e7:c5:69:5d:b4:33:5f:b9:ea:49:6e:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AC:A8:01:C8:84:83:95:92:9B:1A:9E:FA:D4:77:B8:8A:5A:11:D0
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ad:4f:dd:1e:0a:08:e8:50:f4:96:d8:37:21:f8:73:93:6e:
cf:27:3e:1a:a4:03:eb:44:f6:ef:6d:66:5d:e6:26:15:1f:2c:
2a:19:05:04:fc:bd:9c:48:32:78:12:a1:5e:93:f4:7a:56:f1:
fe:5b:c3:02:c7:5a:7f:e9:d9:90:51:3c:e1:fa:e6:02:68:ad:
aa:0a:c8:b9:59:8e:09:7f:3c:bc:f9:f5:6a:ec:c8:65:18:3c:
17:df:91:39:c0:5f:f2:a8:d6:5a:bf:56:e7:88:3a:e1:e8:09:
6e:ce:56:2e:55:ca:4b:c5:a3:ef:df:95:65:77:56:c6:a4:e2:
dd:32:bc:16:3f:f0:27:0f:4e:3b:67:a9:ee:11:17:7b:f1:bd:
8d:58:8d:42:c3:cf:09:30:f4:b0:1a:9d:fa:ce:6e:93:2c:8c:
73:0b:42:9e:1b:3f:e8:a1:af:3a:8b:4d:6e:5a:dd:14:2d:13:
d5:b5:f6:91:d5:1f:e1:35:26:a5:95:18:e6:0d:db:08:94:ee:
43:44:55:2d:9d:31:92:39:bc:16:7b:5f:7f:4d:82:b6:77:3a:
d6:fb:c5:3e:31:09:25:bb:2c:44:03:83:08:b2:73:3b:6f:ef:
e8:8b:d9:35:d7:91:e6:e0:b1:05:62:a7:25:92:d5:3a:3d:cd:
72:ed:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:06:56 2026 by rpki-client