Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
File: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft (raw, json)
Hash identifier: 7LG6p4TcqoLQqLURRzQPWweaqiehnmvfSqADtpHQgn8=
Subject key identifier: FA:4A:7E:E7:9D:8D:56:E3:A3:F0:DE:20:36:71:0C:CE:3D:87:17:C4
Authority key identifier: E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
Certificate issuer: /CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Certificate serial: 019F8E347972D5FBDC3168C48EBFAEB36425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
Manifest number: 01B5
Signing time: Thu 23 Jul 2026 09:00:31 +0000
Manifest this update: Thu 23 Jul 2026 09:00:31 +0000
Manifest next update: Fri 24 Jul 2026 09:00:31 +0000
Files and hashes: 1: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl (hash: JyoqGgfc4Q5d2thwqvtBkinmJIW38mTLYv7yuS/TH5E=)
2: KIZ8Qo_Osa0eeRKHpCezFEWpt38.asa (hash: BUCO47iMjOX10Oz4gqlvyalBtDL8T56NMGskn473Wu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:79:72:d5:fb:dc:31:68:c4:8e:bf:ae:b3:64:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Validity
Not Before: Jul 23 09:00:31 2026 GMT
Not After : Jul 24 09:00:31 2026 GMT
Subject: CN=fa4a7ee79d8d56e3a3f0de2036710cce3d8717c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:b4:c8:e2:88:bf:df:52:7e:09:fc:eb:d1:
f8:e4:e7:c1:41:59:e9:57:06:0b:fb:71:d3:09:d6:
46:2d:51:9b:5a:04:b5:1a:96:e3:95:48:da:80:a3:
ca:b9:a6:3b:05:ed:36:76:de:77:04:eb:73:26:4e:
fd:a1:74:ac:18:b9:29:2a:69:e7:74:20:25:bc:a8:
5e:c6:c9:b3:32:b4:62:fd:97:9c:0d:7e:de:ac:71:
00:76:7c:6c:b6:23:96:f0:59:92:d2:6b:e0:3f:e5:
54:8f:4c:65:19:b4:ee:44:19:78:88:3e:64:9b:fc:
ef:ac:65:cb:91:1a:ad:47:ce:bf:48:b5:1f:7f:86:
66:42:39:dd:6e:b7:26:9f:a5:b1:b8:b8:6d:a5:64:
5a:52:b1:3e:db:3f:16:d5:20:27:74:b5:c7:a0:36:
93:40:69:d1:54:53:92:46:ee:93:28:c2:50:84:d1:
44:25:3b:ba:0d:2b:8f:6c:19:e1:b4:f4:c2:13:ba:
94:c2:3d:f2:56:83:c1:45:7e:8f:4a:2a:36:7e:c8:
2b:c9:f4:f6:02:fe:56:6e:33:4b:44:12:df:f7:29:
90:43:92:9c:e0:33:69:3a:bb:94:0d:35:5c:7f:a9:
f1:8a:6d:60:db:c4:d3:12:9a:e9:e6:52:7d:45:51:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4A:7E:E7:9D:8D:56:E3:A3:F0:DE:20:36:71:0C:CE:3D:87:17:C4
X509v3 Authority Key Identifier:
keyid:E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6d:6e:33:4c:2b:ce:14:aa:9d:43:ed:59:16:b4:35:6b:ca:
2a:76:40:5e:0d:9b:68:08:65:2d:45:51:06:94:39:6c:c4:3d:
5f:e5:37:59:d5:00:0c:15:a4:c8:e6:5a:8a:7e:2e:db:b3:3f:
08:7c:dc:12:cd:fd:f1:66:99:55:bb:ee:4b:33:df:ee:02:98:
fe:21:5f:26:52:1b:9c:e1:e2:ba:7e:10:da:78:47:9a:f3:d0:
b6:b4:c1:d7:59:67:32:b1:d6:ec:84:eb:94:5f:2c:08:a4:53:
52:53:37:35:ac:f8:14:58:72:4f:d6:23:24:9b:b1:a0:b3:f6:
6a:39:00:c7:0a:68:a4:d2:7f:0a:08:09:12:86:d1:21:cb:4f:
19:cb:c4:ee:57:57:cb:8d:82:78:fc:b7:2b:8a:1a:c5:99:84:
44:20:28:79:84:9a:1f:8f:e5:b5:be:17:9c:98:78:7b:26:45:
2f:a8:4f:21:90:23:a1:2b:49:78:25:ef:4d:d7:aa:1b:83:3c:
b6:25:6d:bb:5d:e8:19:86:17:80:ea:81:88:64:7d:dc:3e:9b:
cc:5f:03:1e:3d:8e:59:16:e6:e8:fd:34:28:d9:aa:69:5f:42:
e3:b9:64:4f:01:55:a4:9b:e0:96:60:9b:e1:27:75:23:16:83:
fa:c6:03:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:25 2026 by rpki-client