Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
File: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft (raw, json)
Hash identifier: F7S8BmS5IlENr/XN1bAoFmEWs9k7IYXWij/9VNKfClg=
Subject key identifier: 2B:8D:9B:21:9A:E5:EF:17:50:04:97:31:A9:25:FD:4D:2D:09:C1:AD
Authority key identifier: E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
Certificate issuer: /CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Certificate serial: 019D333E6FFCF2F218A6272380B881C837ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
Manifest number: 7B
Signing time: Sat 28 Mar 2026 07:00:23 +0000
Manifest this update: Sat 28 Mar 2026 07:00:23 +0000
Manifest next update: Sun 29 Mar 2026 07:00:23 +0000
Files and hashes: 1: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl (hash: PTqQvH66dQEkaszK8zzWYXYqTkoYD5UN9CPRokMl9Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:6f:fc:f2:f2:18:a6:27:23:80:b8:81:c8:37:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Validity
Not Before: Mar 28 07:00:23 2026 GMT
Not After : Mar 29 07:00:23 2026 GMT
Subject: CN=2b8d9b219ae5ef1750049731a925fd4d2d09c1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:c9:1a:56:73:9d:90:23:89:d7:2a:07:2e:
6b:d0:39:9e:78:5d:33:70:4f:c1:b4:55:ae:98:db:
31:04:76:90:d6:c1:fb:39:6c:68:4e:9f:01:18:7f:
96:20:5f:27:6c:53:6e:5e:2b:36:46:ee:7f:90:6c:
4a:1e:1d:78:bb:9b:5e:80:97:74:21:44:36:8a:a3:
a6:3f:f4:88:3a:97:16:84:62:84:91:4c:f2:c9:de:
6e:d7:46:b5:33:d5:c5:98:dd:06:9b:7a:70:87:04:
5e:6a:78:74:e9:18:ba:d9:90:23:da:d1:1c:ec:4d:
1c:e5:56:fe:87:96:80:75:33:55:8c:25:27:d1:93:
6c:d5:ea:93:a2:1e:e1:24:d9:33:23:73:cc:63:f4:
4e:8e:1e:87:6e:24:f5:b3:f9:35:09:c1:21:29:d1:
fd:5e:eb:6e:b8:d3:55:5b:48:c3:97:84:81:c2:85:
52:6f:0e:87:dc:c0:15:ba:a8:9f:a8:e4:59:fb:10:
b3:b8:46:1b:ef:eb:e7:46:40:d8:37:4b:9f:1d:f3:
27:6e:d2:77:9f:0b:04:6c:5f:d5:8a:81:6a:c8:02:
9d:59:14:d7:80:83:50:ef:20:31:41:09:9c:86:03:
d7:9a:17:db:5b:c3:21:70:f3:2d:2a:4f:3a:c2:fc:
48:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8D:9B:21:9A:E5:EF:17:50:04:97:31:A9:25:FD:4D:2D:09:C1:AD
X509v3 Authority Key Identifier:
keyid:E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:38:6e:3b:d1:f4:df:3c:9a:02:ce:4b:55:e6:c1:a1:86:17:
a4:cd:16:43:3c:d6:84:e1:b8:e0:d4:07:f8:fd:0c:ba:a3:1f:
99:af:9a:35:e5:cb:08:9e:2f:15:a0:63:cc:6a:27:2d:56:0c:
bb:c6:9f:f0:d9:d8:d7:23:5b:f9:cc:41:95:05:00:04:a8:9b:
af:cb:ee:bf:2e:3c:76:0b:e6:74:e6:43:25:a9:52:cc:e2:5e:
d1:d8:bf:01:2a:01:56:0a:40:d2:0b:b1:05:4e:63:b7:30:f3:
95:96:30:93:56:6d:64:35:c0:89:ec:bc:7c:fc:84:92:6a:f6:
69:78:8f:93:78:2e:fb:0f:51:bc:53:5a:29:56:61:c6:7e:2a:
9b:68:16:1e:fb:41:1c:2d:e5:3a:94:36:49:d0:4b:3d:e3:36:
94:d5:bd:5e:9f:32:6b:34:b9:84:cc:2c:a3:0a:1b:17:00:d7:
82:f5:dc:7b:68:3d:8f:52:19:78:d7:c8:95:16:62:4c:20:2d:
36:f6:b4:43:85:a2:5f:e0:24:70:07:05:44:a8:8b:22:61:80:
4b:0e:bb:97:e9:17:84:54:1b:7b:47:91:20:19:e3:5f:d0:a9:
03:12:32:40:d1:04:bb:92:e7:2a:a7:94:e0:5f:bb:fe:94:c2:
60:1e:a6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:14 2026 by rpki-client