Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: pUF8zyzOmuuA8uQbhf5bw0yone+GGU3ALVEdXWki6IM=
Subject key identifier: CF:78:DD:34:78:C1:99:73:BC:44:11:B8:2D:7A:9C:0A:4A:F2:CB:FA
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 019F90FFB7DD8F78BAEAABB8742765E7DB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 1299
Signing time: Thu 23 Jul 2026 22:01:45 +0000
Manifest this update: Thu 23 Jul 2026 22:01:45 +0000
Manifest next update: Fri 24 Jul 2026 22:01:45 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: Swz9c/RlI6YY1nibznAfZ3mbNNdf1uTj2G5gTBrxuiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:b7:dd:8f:78:ba:ea:ab:b8:74:27:65:e7:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Jul 23 22:01:45 2026 GMT
Not After : Jul 24 22:01:45 2026 GMT
Subject: CN=cf78dd3478c19973bc4411b82d7a9c0a4af2cbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:58:77:45:49:02:26:21:f8:c3:de:ff:58:
77:35:c9:95:d9:99:d9:77:77:16:c6:22:24:b4:8e:
0b:5d:0e:2f:74:71:04:7c:6d:51:bc:fe:49:f2:1d:
8b:0b:1f:c2:ce:6d:ca:f3:e7:ca:d2:a8:b8:34:54:
83:ed:d4:20:d3:ed:e2:de:18:77:80:f9:6d:9c:4e:
9a:8a:55:2a:33:e1:8c:61:f3:df:09:e5:44:b1:60:
a0:b6:bc:b0:b4:1e:0a:6a:8a:94:03:e2:12:70:80:
06:43:84:3c:74:d6:de:b3:0b:c2:16:3f:b2:ac:9d:
c0:a5:e0:c1:75:03:d3:3a:e6:31:ee:8a:1f:71:35:
9f:31:f8:cd:44:bb:ac:be:66:a0:b7:f7:3b:bf:fc:
48:52:46:3a:91:fe:31:af:2b:7c:91:3e:c0:be:98:
78:5d:eb:f9:60:74:1c:18:07:b3:88:c0:16:5a:f7:
f0:c9:7c:c2:f0:01:81:ac:14:a4:91:cf:1d:66:21:
3e:f6:59:fa:bf:ed:77:24:ff:f3:35:79:6a:bb:07:
0f:16:c4:94:19:fc:79:a9:75:39:2e:45:0b:3c:23:
84:48:1a:a3:e7:0b:92:b3:4f:0e:a1:b2:75:80:e9:
ad:11:61:39:2f:4d:27:bf:4c:d5:3c:6a:6f:2e:f7:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:78:DD:34:78:C1:99:73:BC:44:11:B8:2D:7A:9C:0A:4A:F2:CB:FA
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7d:bb:69:c7:18:b0:05:9d:33:ae:69:61:06:3b:0c:a1:f8:
8a:db:27:eb:d3:6b:97:d8:dc:24:00:96:f5:7f:76:23:74:36:
81:de:f9:2c:a3:1f:81:6e:e7:e4:98:6d:55:a5:01:d6:ff:da:
55:8c:d1:60:0a:50:14:98:5a:05:cd:9b:1e:f4:a8:92:a0:bf:
29:61:7e:4e:2d:60:8b:e2:8f:83:51:4c:6d:79:24:b2:c2:1b:
1a:8e:a7:f5:97:a1:85:b7:16:cd:f1:7d:fb:59:cd:c9:a6:2c:
4a:95:39:e5:1d:ea:f0:75:35:67:b1:08:d8:18:af:00:59:6c:
e8:83:0c:a5:8a:a5:4f:ca:dd:aa:a1:98:ec:ed:bb:ed:cc:fa:
08:74:03:e5:3f:f9:e5:e9:20:81:56:5b:33:a7:18:a3:e9:65:
88:b5:23:77:b9:ac:85:5b:fc:3c:32:58:b4:67:e8:db:95:f7:
cf:b7:2b:33:d7:dd:bc:02:b2:a0:9d:ce:86:77:fc:b2:3b:ba:
78:92:7d:eb:5b:28:b6:4a:43:36:16:d5:42:18:c4:85:4d:1c:
12:9d:ca:0c:8c:9c:8c:56:5b:60:1a:17:1b:83:23:66:8d:97:
6a:a7:14:88:c4:45:d2:39:98:ec:54:6e:56:ce:3d:1c:7d:03:
0f:d8:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:29 2026 by rpki-client