Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: IDAIWrZz+9Lb4dDbSzuSvf+3I2nfpNCwpYJlwcLNnd8=
Subject key identifier: 03:BA:E5:81:7C:37:5A:21:16:FF:24:40:65:EF:25:AD:A6:A5:47:CE
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 019E1C472C34C2B37AE7DF23ECA690E56033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 11D8
Signing time: Tue 12 May 2026 13:01:26 +0000
Manifest this update: Tue 12 May 2026 13:01:26 +0000
Manifest next update: Wed 13 May 2026 13:01:26 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: ZGVcjsZ14qJQhT8NoaJVKFe+7yduw0YDel1Obzd/leg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:2c:34:c2:b3:7a:e7:df:23:ec:a6:90:e5:60:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: May 12 13:01:26 2026 GMT
Not After : May 13 13:01:26 2026 GMT
Subject: CN=03bae5817c375a2116ff244065ef25ada6a547ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6a:a1:66:25:5e:12:ab:12:8c:39:99:d1:f1:
2c:3c:95:72:3a:b0:54:ff:c7:95:aa:a7:c2:b3:08:
6d:02:b1:e3:eb:af:54:e5:e7:72:88:ea:38:14:53:
d6:0f:88:34:0f:3b:da:36:a7:07:d7:cc:72:57:fc:
8f:bc:9a:80:f3:9f:5d:e6:9a:d3:6f:8d:e2:99:1b:
12:5d:b8:d6:cc:32:7a:3d:51:f4:55:53:5f:34:82:
5d:ab:14:1f:c8:55:86:fa:70:dc:b1:43:83:3e:88:
ff:e1:56:29:4f:fd:74:97:aa:bd:4f:c1:13:9b:40:
3f:90:5a:40:a0:2d:a1:71:1e:4d:76:70:e7:3d:73:
4f:4e:b7:a5:f1:01:03:ed:e4:9a:87:c2:6e:d5:4f:
22:81:98:81:44:c3:fe:ac:99:43:3d:f5:ca:64:0a:
fc:a1:21:2c:1a:73:35:84:cf:bc:f1:56:8e:fc:c5:
cd:96:4e:91:60:37:95:99:dd:d7:f5:d4:9b:a0:3e:
21:83:4a:e7:1e:54:40:16:07:67:fc:e7:27:44:91:
b6:f4:d7:42:80:e8:66:2d:26:00:44:26:c6:26:dc:
eb:dd:51:aa:71:17:b8:cf:77:db:15:cf:54:5c:52:
9b:19:5c:13:0a:e3:22:24:e6:39:f3:ca:55:df:dc:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BA:E5:81:7C:37:5A:21:16:FF:24:40:65:EF:25:AD:A6:A5:47:CE
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:15:6d:a4:a4:f1:37:72:c4:9f:a8:4e:c1:d8:65:60:28:ae:
a6:c5:3e:ff:cd:d0:fc:f3:41:ce:9e:49:1d:38:c3:54:2d:dd:
20:39:4e:81:75:60:b2:f0:79:e3:8e:da:3e:87:16:18:5e:13:
74:32:65:ca:40:cd:5d:f4:ac:fa:6c:42:60:c0:6d:7f:07:36:
e3:7d:df:82:28:0e:0e:21:0b:b7:98:f0:05:33:ee:57:f2:53:
bb:ed:e0:30:65:6c:53:81:df:bc:57:67:1a:f0:b2:c6:ae:15:
89:0b:1c:49:e9:ea:d5:9f:d7:8f:9a:1c:c2:70:3b:20:a4:e6:
85:ec:30:cc:10:62:44:0e:9f:ab:39:a2:08:1e:0f:3b:37:26:
1f:a0:ce:60:fd:10:35:50:d2:4e:f2:7d:89:b0:9b:f5:f0:54:
c6:1f:7b:75:15:ef:b0:ad:6e:b3:80:96:0b:c3:7c:a4:32:bd:
a7:15:48:1d:5e:f7:0f:40:4c:26:e1:26:65:d7:39:01:c5:48:
72:ff:4f:1b:73:bd:48:02:f6:99:75:4f:8b:80:bd:8d:cf:f5:
6b:76:92:e1:35:7c:e4:57:e3:01:97:8a:9d:bb:5d:72:83:f2:
11:68:4e:13:ad:55:e4:73:d2:d2:d7:61:3f:c4:3a:e1:15:8d:
97:c0:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:07:06 2026 by rpki-client