Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: oWQLtdp/TaHEZxkvJsT4m9pkUEtc/U4VVF8a1xIgfcs=
Subject key identifier: FC:53:90:5B:1E:FD:19:95:0C:50:5E:54:AC:43:DB:AE:43:F7:29:CC
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 01A0CDB66F5CAC5E0DBF678F4DB35017890B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 133D
Signing time: Wed 23 Sep 2026 10:01:20 +0000
Manifest this update: Wed 23 Sep 2026 10:01:20 +0000
Manifest next update: Thu 24 Sep 2026 10:01:20 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: pYy3cjBruDxXHS5onm/a88czNKoCK/Dqfxp3zQb94XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:6f:5c:ac:5e:0d:bf:67:8f:4d:b3:50:17:89:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Sep 23 10:01:20 2026 GMT
Not After : Sep 24 10:01:20 2026 GMT
Subject: CN=fc53905b1efd19950c505e54ac43dbae43f729cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:7e:07:91:62:06:68:63:47:64:1d:7e:f6:
ea:fc:99:75:53:65:bd:9d:da:99:1d:20:a7:e2:22:
77:0b:c2:92:b7:45:8d:19:9e:14:05:df:40:ed:ae:
b3:e0:f2:59:65:92:c2:df:64:be:8e:31:f0:97:84:
82:e0:b4:8c:a8:89:13:74:4e:9d:df:ff:1f:bc:c5:
e2:fa:71:e1:03:50:c3:68:23:a8:63:a0:3f:5a:aa:
01:fa:a8:c7:b0:8a:97:2e:47:e8:94:ac:ad:9c:69:
6d:02:a7:44:4e:8b:b0:dc:4d:6e:03:c2:b7:f5:90:
bb:cf:28:bb:26:25:27:76:97:fb:a3:be:8d:92:33:
5f:d1:df:73:c7:6e:8b:31:f1:2a:c2:47:31:3c:b0:
f1:5a:57:22:5d:52:fd:0b:b5:d6:4c:15:72:91:d5:
e5:26:f9:c2:a7:89:e1:1c:94:82:f6:17:09:28:3a:
08:a8:26:19:68:d0:f1:4a:e0:e5:d6:3b:37:2f:27:
ca:6f:b9:7c:02:a3:83:34:25:cb:5d:4e:47:52:a9:
dd:76:f0:6f:67:24:52:6c:46:98:f4:78:2c:48:25:
09:2d:f1:f3:67:e7:60:ba:cc:5f:7d:6a:2b:c5:3a:
12:8b:01:52:1a:7c:03:76:ff:bd:06:f9:0d:57:a4:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:90:5B:1E:FD:19:95:0C:50:5E:54:AC:43:DB:AE:43:F7:29:CC
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c8:4c:32:be:7c:c5:e9:7d:a2:fb:b6:bb:90:ff:30:20:b5:
bf:84:2d:6e:5b:6d:54:67:2f:ad:a6:db:b6:43:b6:7d:be:8c:
2b:0c:62:f5:36:3a:0e:32:8e:f5:c8:2a:6f:54:fb:ed:7d:65:
6a:e3:8f:cf:0c:e9:95:22:a0:4c:30:79:29:a9:73:2a:a2:94:
1f:a7:e1:dc:52:f4:7d:33:4e:5d:e8:0e:d5:63:62:22:0a:fb:
c1:be:29:8a:3f:56:9f:8c:a2:1b:8d:c6:83:d6:d7:36:cc:a4:
3f:56:88:e6:ad:b6:d6:32:77:8f:4f:62:1b:ca:7c:f0:19:c5:
19:c0:e1:c4:ee:55:15:ed:48:83:c2:fa:9a:f4:dc:4c:e1:4e:
7f:80:ca:fa:51:34:0e:76:52:42:05:9f:5c:62:2d:6f:f8:a0:
f8:b9:8e:f6:d7:7a:75:59:31:77:1c:2b:75:ea:75:e2:da:f2:
41:ad:3c:19:d2:fb:36:6f:3a:38:22:48:36:da:a5:85:6d:2c:
4f:b7:9d:b4:b4:80:d4:11:fd:db:b2:30:99:b7:9e:f3:73:88:
fe:28:72:b4:4d:b1:82:53:8d:a5:ca:37:c7:ea:b4:4f:84:b1:
02:ae:ed:2d:72:b8:14:76:29:c3:a4:54:f9:4e:85:66:4a:e2:
48:3d:43:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:57:50 2026 by rpki-client