Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
File: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft (raw, json)
Hash identifier: OD6gUIIOE2kBaUdrtcHrR2Yoo15XcyFnAF8iKiAXWUg=
Subject key identifier: 1A:7A:F7:37:61:9A:A0:12:2B:CB:6A:74:42:53:EF:23:E5:6B:44:56
Authority key identifier: E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
Certificate issuer: /CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Certificate serial: 01A0CEC8B0BEE1A9DD6D6EAF6D3748692033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
Manifest number: 025B
Signing time: Wed 23 Sep 2026 15:00:53 +0000
Manifest this update: Wed 23 Sep 2026 15:00:53 +0000
Manifest next update: Thu 24 Sep 2026 15:00:53 +0000
Files and hashes: 1: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl (hash: FjQy+u9jONJeatQyeROajjhby/FhHVVhxcvMZbYLoeQ=)
2: KIZ8Qo_Osa0eeRKHpCezFEWpt38.asa (hash: BUCO47iMjOX10Oz4gqlvyalBtDL8T56NMGskn473Wu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:b0:be:e1:a9:dd:6d:6e:af:6d:37:48:69:20:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Validity
Not Before: Sep 23 15:00:53 2026 GMT
Not After : Sep 24 15:00:53 2026 GMT
Subject: CN=1a7af737619aa0122bcb6a744253ef23e56b4456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:5d:cd:57:d9:0f:c8:7a:21:2c:06:30:cc:
74:5f:61:eb:61:cb:f5:ad:25:65:8c:69:3e:e8:1d:
16:f9:35:13:e7:09:95:7e:76:90:0d:24:06:8d:fd:
3d:3c:1d:4c:fc:9e:a7:50:28:f1:7a:bb:ee:8f:73:
87:bb:67:13:f4:d5:e2:97:d5:44:46:e5:8e:84:37:
e4:25:ea:7f:e0:70:36:8f:68:95:a4:b3:fd:c6:98:
64:ad:fc:22:13:44:19:bf:10:1f:3c:53:87:c1:b4:
58:72:2d:6e:4b:8d:0b:1f:60:eb:62:bd:7f:0d:74:
34:77:64:4a:5c:d6:1c:e0:22:ba:99:b2:a8:f9:da:
b9:da:2b:db:6e:36:40:83:ad:30:48:c3:95:b9:83:
4e:99:c9:26:78:b1:4c:9b:47:f7:e9:f7:7d:cf:67:
19:27:e0:92:20:b6:d3:6d:85:4d:1e:24:d5:43:f2:
c7:54:f4:4a:82:04:ab:af:53:e6:31:20:7b:15:df:
ae:44:a0:82:c5:cc:37:7c:25:87:6c:9f:c1:21:30:
9c:fb:be:a4:36:f3:77:ad:3e:8a:3c:d0:cf:12:05:
c7:4a:cd:c6:37:5f:b1:24:c0:ef:d2:4f:38:1c:f6:
15:be:97:fc:bb:89:90:56:50:92:fd:42:c7:7c:9e:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:F7:37:61:9A:A0:12:2B:CB:6A:74:42:53:EF:23:E5:6B:44:56
X509v3 Authority Key Identifier:
keyid:E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0a:1d:b4:ed:f3:3b:77:69:04:91:89:45:e1:23:9c:c6:65:
5c:be:4c:d8:a9:13:9f:54:92:4e:bd:1c:85:0f:07:67:93:c7:
ea:da:74:4b:01:f1:76:24:f6:45:a3:1b:55:d6:c7:83:9f:28:
4b:bf:af:0e:bc:27:14:4e:9f:74:07:7f:8a:1c:92:cb:3a:e2:
39:27:53:ab:92:bf:c0:49:b6:de:cc:c1:4d:c4:7e:c2:45:55:
55:7d:b2:0e:0c:49:28:7a:7d:14:af:56:9e:49:fb:2a:4d:2e:
d3:ec:c6:0d:d6:d6:1f:c6:0e:da:47:72:3e:6c:6c:ed:ed:81:
c2:3e:4e:62:e8:f1:b4:c0:04:a9:c6:ad:ac:ae:06:cf:62:b0:
ac:6b:5c:b6:00:72:48:ce:fb:a5:bd:9b:62:01:23:34:da:7d:
3e:ed:9f:c8:e8:c4:7c:60:79:0b:4d:48:64:ab:0e:b3:b0:bc:
ce:e6:58:a7:1e:1b:f8:52:52:6c:be:b9:1f:ea:8e:6b:b5:02:
b1:45:fa:d9:42:90:d7:a1:10:ec:5b:36:be:43:89:75:ab:eb:
49:6f:4a:54:7e:c0:9c:23:b4:37:f8:b4:2b:e3:64:31:70:fd:
17:f1:70:02:63:22:77:4c:23:8e:01:c4:6e:a1:bf:ba:b9:d2:
cf:5c:ac:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:26:06 2026 by rpki-client