Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: 67Ds81CkB+9K0lP4d40eNO27RS3IoiJQw79zhUwnkis=
Subject key identifier: D5:C7:E3:47:67:F5:A7:80:C3:1D:EC:2E:8D:B7:6C:47:63:3D:9B:76
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 01A0CEC822A40C0BDB6223DACF84A958D19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 0EF1
Signing time: Wed 23 Sep 2026 15:00:17 +0000
Manifest this update: Wed 23 Sep 2026 15:00:17 +0000
Manifest next update: Thu 24 Sep 2026 15:00:17 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: Etj1+rbT7wSCVcnuPqkVoBy1X+OLSmF4X3ZP9dKkhmU=)
2: hD5yM-bTRcXqw7hsAje6CKQSULU.roa (hash: BoKM+q4JQCN0QltCSwaO5romaCSLzyBz/YnHCsh+0Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:22:a4:0c:0b:db:62:23:da:cf:84:a9:58:d1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Sep 23 15:00:17 2026 GMT
Not After : Sep 24 15:00:17 2026 GMT
Subject: CN=d5c7e34767f5a780c31dec2e8db76c47633d9b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5c:a1:05:38:7e:e4:33:e8:5b:7f:7a:8d:cc:
a7:7e:af:7d:e2:5d:b9:f0:c9:d3:75:72:4c:1b:90:
43:7e:f5:d2:97:fc:f0:6a:d5:f2:d6:5b:c9:db:63:
74:96:2a:12:43:ec:b6:d3:7d:1d:4c:dd:6a:08:81:
e4:b9:f2:b7:22:ba:ce:43:65:ca:3c:e1:0d:a6:7b:
1a:df:f5:a1:ab:40:09:45:1e:8b:dd:a5:d8:a0:57:
42:12:55:83:e4:91:c8:42:a8:ca:b5:09:21:31:12:
f6:56:40:dd:48:d9:54:39:f7:2b:6b:fd:7f:03:cc:
c4:44:8b:31:72:d2:6b:9a:02:7a:3d:bf:85:ba:42:
22:bc:cb:88:00:00:34:9c:b1:9f:31:08:2b:74:06:
98:44:78:32:57:3d:b6:69:ee:6a:87:ad:91:93:ad:
ca:69:30:c3:39:ba:3f:4d:9f:8e:7b:a7:71:1c:f4:
5a:ea:a2:cc:16:d6:ac:69:6c:ab:82:9d:02:cd:a1:
96:34:ad:27:ca:ae:ff:a2:ac:da:04:fb:d3:64:7c:
27:e6:c2:89:ec:1a:df:cf:09:49:e5:fc:96:cc:ba:
16:e8:14:15:0a:56:09:44:2a:dd:b4:cb:f2:6e:b7:
5f:79:50:2d:87:ab:11:7f:2b:98:03:b7:08:2a:00:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C7:E3:47:67:F5:A7:80:C3:1D:EC:2E:8D:B7:6C:47:63:3D:9B:76
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d7:ed:9f:22:5d:f2:f5:42:c3:5c:1e:78:ad:96:d9:35:68:
d1:b5:3e:f9:82:76:7b:09:b3:bd:a6:f0:3d:7b:89:3a:7a:9a:
18:52:85:91:a6:e7:b5:18:50:9c:16:68:44:c4:6c:84:6e:73:
e0:89:1c:b2:1c:3c:8d:15:28:09:2e:63:b8:3a:83:43:0b:1f:
23:fd:6a:89:16:a0:20:ec:67:da:87:28:3c:76:e4:fe:3f:95:
3a:bc:fb:1a:37:ca:ae:29:fc:5b:83:e1:b2:c4:4c:5f:f6:72:
50:61:41:c1:a8:20:28:85:a4:fb:ec:a6:e2:93:f6:8f:af:2b:
ce:85:2c:cc:95:b0:cf:47:5e:43:bb:75:24:cd:a7:86:9f:90:
31:90:52:3e:a0:04:17:b2:1c:b6:59:99:4e:30:70:f5:c1:95:
47:f5:de:38:a2:97:f6:21:1f:23:55:55:21:4d:b4:90:f9:c3:
d0:ea:29:d2:a9:7f:94:82:49:81:b1:61:a4:f1:7f:ac:b3:9f:
5c:d2:6c:4b:b5:66:be:0c:81:bc:41:ec:c6:03:61:f0:a6:86:
b2:88:42:87:3d:77:d3:74:89:05:a2:12:5a:88:4d:7a:ec:88:
e9:4d:f6:58:19:e0:b3:ca:ec:1a:f3:8b:e6:f0:16:7b:54:03:
31:d1:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:39:12 2026 by rpki-client