Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: roZoLt9U9MOlNyTj6ux+yUT1z3Yt1dNc/j9iaPKizIU=
Subject key identifier: C0:94:47:68:E1:B7:F6:0C:3B:F8:BC:3A:7C:91:B7:56:83:A2:9B:58
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 019D2703B6E24B1023080D701C10A76335D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 1159
Signing time: Wed 25 Mar 2026 22:00:47 +0000
Manifest this update: Wed 25 Mar 2026 22:00:47 +0000
Manifest next update: Thu 26 Mar 2026 22:00:47 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: B02GTWkj3AQ1Jupg3GgfhgNTXg6QBB28LihY0L2Ymqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b6:e2:4b:10:23:08:0d:70:1c:10:a7:63:35:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Mar 25 22:00:47 2026 GMT
Not After : Mar 26 22:00:47 2026 GMT
Subject: CN=c0944768e1b7f60c3bf8bc3a7c91b75683a29b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:78:3d:df:de:ee:7c:9c:a9:21:69:29:9c:0d:
36:00:2b:a1:d8:e5:30:82:0d:32:ab:a4:63:00:70:
a5:29:dc:c3:06:2b:c8:e0:67:37:aa:49:a6:8a:2b:
68:41:33:72:75:f3:d7:1e:16:88:b4:af:00:5d:11:
fd:20:26:b8:82:fe:ee:11:2d:a0:0a:2c:69:8e:4f:
ca:76:4e:40:cd:95:7f:72:a4:0d:58:ec:f7:cc:61:
e1:f9:92:04:51:0c:14:39:10:06:4f:6c:12:40:70:
77:df:49:7e:53:92:59:4f:5b:8e:2c:10:1d:d3:48:
8b:0c:5b:da:99:f0:f8:bb:07:60:7d:a7:73:e1:b0:
fc:3f:e5:fb:94:87:c3:1e:9c:31:46:43:a7:0b:36:
88:bc:ca:b1:e5:bf:07:6d:91:22:0d:7c:f9:13:b3:
0d:64:47:04:d6:fb:ef:13:35:8b:9b:53:9d:09:ca:
a6:85:15:2e:3a:3d:20:40:2c:19:87:19:2c:7c:38:
ae:d1:57:8f:11:79:e5:65:93:fd:c3:b2:28:0a:f2:
5d:ed:17:73:c0:00:4d:e6:3e:3d:11:46:5f:6b:af:
81:89:60:7d:15:e6:b5:ce:86:86:32:6f:fe:b1:e4:
02:4f:7e:cb:fd:cc:9f:ac:56:bf:8b:04:9b:e5:32:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:94:47:68:E1:B7:F6:0C:3B:F8:BC:3A:7C:91:B7:56:83:A2:9B:58
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:89:ea:ac:f3:64:15:60:be:6e:9a:af:f0:60:59:02:49:80:
f9:0f:ee:5f:07:d2:4e:0f:4e:5f:b0:7b:9d:2a:b4:b7:73:11:
86:b2:8e:35:8b:5b:5c:8a:22:88:dd:e4:c0:ff:08:12:b6:53:
b6:a4:82:2a:82:0e:99:f6:6d:32:44:0b:8a:2f:30:e1:51:67:
b6:a8:a1:c8:b0:76:96:cf:db:cd:b5:b4:a9:77:31:c5:3f:cb:
67:71:7b:d3:10:e3:40:d2:e2:90:9f:56:7e:f7:2d:a1:ca:16:
93:b8:00:d0:03:54:d5:07:99:dc:62:cc:85:1b:d4:70:ec:a3:
85:81:c9:54:78:f2:62:60:44:a2:44:15:43:37:a2:af:ff:ec:
4f:83:f3:c0:ab:05:1a:62:ef:89:e4:7d:04:6b:af:fe:91:1c:
2a:47:5c:4f:ee:88:d8:80:42:c5:9d:69:98:7b:a5:b8:61:36:
e6:c5:ea:b5:7c:d2:50:f3:f5:90:6d:42:52:b4:ec:20:3b:b4:
90:b9:f0:c8:9b:ff:fe:d2:4b:37:ab:e0:7a:63:e3:32:93:96:
a4:36:cb:09:be:78:72:99:77:b6:dc:5e:bb:99:17:e0:09:7f:
a6:c7:67:08:3f:a0:ad:83:1d:c3:f5:01:25:b2:53:a3:41:26:
45:5c:91:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7biSxAjCA1wHBCnYzXUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDJhMzg1YWQ5MzYwMzYxMzUwN2Q4OTU3Nzg4YmYxYmRj
N2UyMWIwHhcNMjYwMzI1MjIwMDQ3WhcNMjYwMzI2MjIwMDQ3WjAzMTEwLwYDVQQD
EyhjMDk0NDc2OGUxYjdmNjBjM2JmOGJjM2E3YzkxYjc1NjgzYTI5YjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Hg9397ufJypIWkpnA02ACuh2OUw
gg0yq6RjAHClKdzDBivI4Gc3qkmmiitoQTNydfPXHhaItK8AXRH9ICa4gv7uES2g
Cixpjk/Kdk5AzZV/cqQNWOz3zGHh+ZIEUQwUORAGT2wSQHB330l+U5JZT1uOLBAd
00iLDFvamfD4uwdgfadz4bD8P+X7lIfDHpwxRkOnCzaIvMqx5b8HbZEiDXz5E7MN
ZEcE1vvvEzWLm1OdCcqmhRUuOj0gQCwZhxksfDiu0VePEXnlZZP9w7IoCvJd7Rdz
wABN5j49EUZfa6+BiWB9Fea1zoaGMm/+seQCT37L/cyfrFa/iwSb5TIPZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCUR2jht/YMO/i8OnyRt1aDoptYMB8GA1UdIwQY
MBaAFOPSo4Wtk2A2E1B9iVd4i/G9x+IbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYt
ZmVkMmRjM2VjZDcxLzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYtZmVkMmRjM2VjZDcx
LzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYnqrPNk
FWC+bpqv8GBZAkmA+Q/uXwfSTg9OX7B7nSq0t3MRhrKONYtbXIoiiN3kwP8IErZT
tqSCKoIOmfZtMkQLii8w4VFntqihyLB2ls/bzbW0qXcxxT/LZ3F70xDjQNLikJ9W
fvctocoWk7gA0ANU1QeZ3GLMhRvUcOyjhYHJVHjyYmBEokQVQzeir//sT4PzwKsF
GmLvieR9BGuv/pEcKkdcT+6I2IBCxZ1pmHuluGE25sXqtXzSUPP1kG1CUrTsIDu0
kLnwyJv//tJLN6vgemPjMpOWpDbLCb54cpl3ttxeu5kX4Al/psdnCD+grYMdw/UB
JbJTo0EmRVyR+A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:43 2026 by rpki-client