
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
File: 49HX1DNmpbAGPDdXExnfpDLRUxs.mft (raw, json)
Hash identifier: l7slpRc28oaURpbA/iKiD/oBppA7mK7yZcZAMOxZJfI=
Subject key identifier: 00:53:FA:7E:F6:D9:7B:33:6C:F5:CC:44:EE:1E:75:C2:00:99:19:0B
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019E1BD8E653A85AF0EC7BD3C882E7D20BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
Manifest number: 5A
Signing time: Tue 12 May 2026 11:00:59 +0000
Manifest this update: Tue 12 May 2026 11:00:59 +0000
Manifest next update: Wed 13 May 2026 11:00:59 +0000
Files and hashes: 1: 2VKIV5Pmpq7i49-7CNPhkYLJ0Ws.roa (hash: 9yfUaLJe3s5BNXMRs/G6I4N3tD+yudXfO8n0JDvf1PQ=)
2: 43fr0bjJ5ROcWmZv4cWGOKe6iAM.roa (hash: 0avprymNeUudEwmWC7hx2NwOiVDcL07wZUkru6MxbtE=)
3: 49HX1DNmpbAGPDdXExnfpDLRUxs.crl (hash: EQmDCxj7DZrhHFJhYegzbPi705f3zF7YQpYtEVbahTQ=)
4: 6y6W7W8j_dSlc57S1luvac1zdrQ.roa (hash: rZpAH8qmJ3sCtaLAax/eniPTJwByfwh5ew5CuQY9/rw=)
5: 7nbejW5fYHHE3btqjYskr_48NAY.roa (hash: HlkQWca9DpuryMz27HyPFtCZTaPD1lm9ROsyp1H4SUU=)
6: 8pARH6tQiMW5VOww33fEnzxJ8JM.roa (hash: oalnnS5D3eLopK4CN73XkDh+N3g2fvrPYgN9383me2M=)
7: A4Dh7ZjplGb-PN4SKQhst4MePwI.roa (hash: stPyk70c80f5gGOf1fecn++zbSc8YHTYr3VUl3oBgHQ=)
8: CLxmmzY5XSgsxI8CRjjJzvpYmws.roa (hash: KY/55fXsDwYRuaze9aKDk9CwxlXC0t+tJnvqtD5wY2g=)
9: DXhW05AaUxKgKfFZALTUXoukrf0.roa (hash: aygJbXm0jBENKkWE5cq/ZPih5L5O7wNfBCDVk2kAw5w=)
10: EwuDBNwsbSMtyx0cZMtM0qPkPMA.roa (hash: UeXhJ2qTzLZJgTHgN9h/HZW4A+wpinm+DBVQ9mkXo+g=)
11: IfhE8S5G_YWuz-WUX0iFTE_6Lac.roa (hash: 8T/5pVSgx6eK00RZ3y1+Kj5br6QCnING8+49FCt+r2Y=)
12: LTh9-MZ5she5Y4TdatH9zy4F4nU.roa (hash: B2KBu4CQ2ifEVbQDwhUxuhsJw3WmFj2SaKSL5DaA6cc=)
13: ME6IpY0e6is0iL7jrzO8oaY85Rw.roa (hash: rAekRKCmN/5lCziqs3wus7Ac161OgYY0VDQ691q63tQ=)
14: PgevlkTAr8jU-YjWzhea_mOXIRs.roa (hash: H1qdI38PaorFRf3/HCK0UyxP5GGGKhmK0S8nXeXUz6w=)
15: SnRjh7mFY3ZtqKgpRUVND4GTCfQ.roa (hash: lEs2Fv20mbhy3waE5I1sqd+O7RdDwyYkt+KG96yZ2vY=)
16: WRyJaerT_NLOYa-_Cg0jS-FIQSM.roa (hash: 5sRRgPfgMg7bo1SqFHKdzqlgLXo0JREs2XRrXZA4n98=)
17: X24SMyhhEzJhIEJZt8GBk865dy8.roa (hash: C99CiP9jroJvfjWkBUqNpUU1eE61i2kxw+mxk90HNok=)
18: aFo7O0fFwgQXegvkfL92mW-s4oQ.roa (hash: JwPvNbbv8zXsoA37xp0t914U5rIu6z8P0o4Ua6HueKM=)
19: c9rAo0EmNEjHl-r5VQD1G12O7fE.roa (hash: MhVSyyrZG4aTJFZKHlSu1nxe0q5tXAhm/l6ss8T1Dlc=)
20: dvq5w2q2zN_mq-AZDV0T40Oa_cE.roa (hash: MgP8+aUJ4ghQ1ZiOSVmomAq1gt9aaGNDzSB3ivnADqI=)
21: muPWE_3xduyBwxC7K8xvGwjtHOo.roa (hash: 9EbXo8tYziInu+WsdlQoRAdnNi0wAKV6caIvMW4pyl8=)
22: rwlvB_VgdIL7xx3fg1zUzG7Lmvk.roa (hash: Dzsj11IT+d0KSr0YpBwndQ2B8rxfuaWJQea/BdKgCIM=)
23: uoAmCYb4JGma3FeQH3_YGCuhsJw.roa (hash: EcH49+F0N5aQG4uqhNbGiVfV1+BO1VpTeFehTTxWi2g=)
24: wRoRQUULK3o7iJPVrE4WjRzz_jA.roa (hash: MJ7xYJKlBl8Xd0fVCX+ZUSxJBE1xvFkBBGg9gxd2itE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:e6:53:a8:5a:f0:ec:7b:d3:c8:82:e7:d2:0b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: May 12 11:00:59 2026 GMT
Not After : May 13 11:00:59 2026 GMT
Subject: CN=0053fa7ef6d97b336cf5cc44ee1e75c20099190b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:f2:3f:b4:d0:32:03:b0:10:91:d2:bd:c0:
38:61:cb:57:b3:fa:20:47:16:14:75:59:ca:5d:19:
33:1f:72:30:e8:ae:e2:14:fe:b1:25:17:74:ce:2c:
48:1a:70:8e:93:d5:f0:d7:4f:10:73:f1:18:30:27:
27:61:e7:bc:44:13:29:9d:6b:64:33:9d:a0:8d:c0:
1b:2a:ff:e0:06:36:09:5e:f6:f9:60:a5:a9:7c:18:
13:68:23:9c:41:ea:6f:35:a5:7b:f9:b0:75:af:2a:
a3:aa:39:f8:ef:ec:fb:bc:1e:a7:72:15:01:5d:25:
0b:61:ac:09:6d:51:d7:98:5d:c1:90:e3:0c:b0:92:
3b:43:6d:05:19:9b:2d:06:5b:77:33:0c:37:e6:3c:
14:4b:b2:e0:cf:98:7d:4f:64:1d:cf:c7:d1:79:38:
e0:e3:5d:74:17:d1:84:ac:b9:2f:26:88:84:c5:1a:
b3:4c:a8:cb:3c:8a:41:89:4a:a4:27:b2:be:ac:16:
1c:39:85:22:72:e0:17:f2:c7:20:e4:7e:8e:be:51:
6d:a3:26:b5:bd:4a:14:a1:bc:eb:6f:60:dc:59:35:
54:13:09:f7:70:83:9c:d5:37:79:7b:67:63:b4:47:
3a:ca:c6:60:40:ec:d6:a4:97:9a:3f:f6:19:3a:bd:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:53:FA:7E:F6:D9:7B:33:6C:F5:CC:44:EE:1E:75:C2:00:99:19:0B
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a2:f4:13:f9:cd:83:c7:78:70:b4:24:ca:97:c4:23:8f:e8:
4e:d7:10:0e:cd:17:f8:3d:77:67:42:a4:0e:37:e8:66:ff:28:
a7:c2:00:65:96:c2:b6:b4:78:f6:7a:5a:3f:3f:4c:38:0c:4c:
33:af:23:69:10:24:ab:38:c7:c2:85:98:8f:e9:dc:0c:1f:5d:
f2:e5:0b:6d:33:c8:8e:c4:e1:92:63:67:ce:05:82:fa:fd:aa:
aa:d3:4c:55:42:08:bd:75:0a:ef:d7:11:f3:12:69:c4:34:fc:
3b:c9:20:af:97:1c:ad:00:57:83:ce:d4:02:a2:f8:c5:77:64:
94:3b:dc:f8:ca:c1:1f:7c:a8:99:f7:13:10:f1:3a:f2:fa:e9:
e9:cd:ba:09:f0:2e:65:ab:8f:8c:5e:65:c5:1b:84:04:34:87:
e2:aa:0a:7b:b8:06:9b:0c:29:47:56:e8:31:32:3b:42:0f:f4:
32:23:c8:2a:bd:a3:ce:bb:b0:b5:49:c5:74:0e:1a:57:0f:21:
16:0d:ec:b2:1d:3e:8f:b8:17:99:69:03:d5:fb:53:95:28:02:
51:64:c4:a5:f8:5a:ab:dc:73:02:1e:8f:1a:c9:47:38:e7:a8:
54:c3:f6:05:db:52:f6:72:d4:96:77:27:a7:9b:fe:f8:4b:a9:
1d:2f:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:28:14 2026 by rpki-client