Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: GwATAjimn0S0UVEb1GK61iXEoPvzxRSJo0X3EV+3uKg=
Subject key identifier: 7C:5F:7B:C3:59:D3:E2:C1:F1:F6:00:BE:4C:00:DD:34:74:9C:25:9E
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 019EBF9154C70A0A2E5E7AD17B7CBE63FC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 0DE0
Signing time: Sat 13 Jun 2026 06:00:32 +0000
Manifest this update: Sat 13 Jun 2026 06:00:32 +0000
Manifest next update: Sun 14 Jun 2026 06:00:32 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: SWU2A6fbRdoPfoKrdj6Cec098d5zug3b1udEQqCOHD4=)
2: hD5yM-bTRcXqw7hsAje6CKQSULU.roa (hash: BoKM+q4JQCN0QltCSwaO5romaCSLzyBz/YnHCsh+0Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:54:c7:0a:0a:2e:5e:7a:d1:7b:7c:be:63:fc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Jun 13 06:00:32 2026 GMT
Not After : Jun 14 06:00:32 2026 GMT
Subject: CN=7c5f7bc359d3e2c1f1f600be4c00dd34749c259e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:bf:3b:8e:23:8d:9d:4e:fc:bf:ec:3b:8f:
7a:d5:1e:58:8b:2a:f0:21:74:9f:ac:41:5e:ed:54:
69:00:50:ba:86:23:c0:d6:06:c4:bd:04:47:f5:63:
3c:98:a1:1a:82:64:5d:18:c9:c4:06:cd:5f:44:30:
6f:c6:b3:ec:6c:65:3f:df:12:7e:48:23:a2:1b:45:
4f:02:0b:b1:6b:79:62:9d:5f:7d:c7:7c:ad:68:0d:
ee:91:bc:2d:3a:6d:08:54:25:1c:49:13:6e:56:33:
75:b0:82:80:15:6d:ee:d0:ac:8f:c2:7c:d5:96:5d:
86:6a:48:81:f5:20:d5:e3:42:7f:40:91:21:88:b1:
a1:d7:f6:37:86:cf:83:00:01:07:d7:43:75:08:71:
42:45:63:22:ef:23:31:80:64:7f:2f:43:31:3d:e0:
1f:7e:12:47:87:db:bc:cf:ac:5c:48:7b:89:0d:4c:
16:20:af:3c:47:c5:f2:6c:af:aa:10:4b:05:ad:64:
07:ff:bf:27:92:73:1b:7e:48:88:47:d7:3f:09:4f:
14:bd:22:59:02:54:07:7e:f9:27:7d:e4:a5:b6:83:
a9:cf:4e:c1:81:b9:aa:d1:90:b9:06:a9:53:dc:92:
03:04:ab:68:f8:a5:9a:fb:80:8c:18:50:6a:c4:02:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5F:7B:C3:59:D3:E2:C1:F1:F6:00:BE:4C:00:DD:34:74:9C:25:9E
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0d:d7:0d:80:dc:18:ab:67:0f:a4:7a:39:bd:b5:80:3a:59:
12:3f:33:d1:50:13:23:9d:22:24:20:0d:55:46:ad:63:91:f6:
2c:11:46:f4:09:10:c9:c1:6d:b2:74:3a:6d:93:43:16:45:81:
c7:18:22:b7:1a:8d:55:89:5b:00:dd:bb:83:38:ac:2d:a9:1f:
ef:90:16:9f:7e:a1:2d:74:68:f6:b5:95:6e:bf:83:38:23:72:
f7:1b:5f:aa:63:fc:ed:3a:3c:ce:e9:d0:7c:28:56:89:8b:bc:
da:7b:18:d3:11:60:50:a0:0a:b2:6b:3f:80:a6:8d:c7:5c:d2:
77:a1:cb:bb:f6:af:4b:2b:6f:56:13:42:85:9c:51:f6:4f:a7:
dc:ed:87:30:e2:2e:84:35:2f:7a:85:d6:d1:b1:64:5b:61:5d:
47:3a:91:fc:32:3c:e7:46:19:ca:87:2c:2f:1b:c6:1a:f4:d5:
c9:e5:6e:29:2c:f1:a3:82:a5:a0:14:33:26:ea:e6:52:66:d3:
e8:4a:57:d6:43:c9:04:71:7b:33:a8:42:fc:63:59:c3:85:15:
f8:a9:40:ee:a1:a0:16:c8:2d:10:5f:d4:fe:e6:d1:16:82:09:
21:02:00:ea:f3:e4:76:5a:90:25:f6:e8:88:52:76:8a:e1:2a:
33:c2:85:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:50:14 2026 by rpki-client