Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: vJ15q/HWIMBnSdJrR0KUMkMhA+zYXdNUw/qr9Pg90Qw=
Subject key identifier: C0:83:D6:FF:15:B1:90:41:DB:DE:03:BC:72:9D:70:77:2D:71:55:0C
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 019DA3AEDBBA34AD5D0ABB3DEB23DCFC889A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 0D4D
Signing time: Sun 19 Apr 2026 03:00:38 +0000
Manifest this update: Sun 19 Apr 2026 03:00:38 +0000
Manifest next update: Mon 20 Apr 2026 03:00:38 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: e3bi9dRIcrCDLd1Gvucfnoli0JapXZWaAd5yrwUdeQY=)
2: hD5yM-bTRcXqw7hsAje6CKQSULU.roa (hash: BoKM+q4JQCN0QltCSwaO5romaCSLzyBz/YnHCsh+0Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:db:ba:34:ad:5d:0a:bb:3d:eb:23:dc:fc:88:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Apr 19 03:00:38 2026 GMT
Not After : Apr 20 03:00:38 2026 GMT
Subject: CN=c083d6ff15b19041dbde03bc729d70772d71550c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:dd:ec:b6:54:7f:9c:71:e2:e1:3a:6a:bd:
49:d3:c4:0c:b1:a2:28:5c:d0:1b:33:da:50:e1:a7:
4b:f6:cc:16:b8:1c:d8:62:e9:eb:1d:0b:d0:9a:23:
be:99:36:89:33:f6:ac:80:28:8a:a1:0e:93:98:2c:
e5:67:44:1b:6b:a7:0f:8c:71:33:d6:5c:98:9b:34:
09:ef:24:91:9d:a2:ea:75:07:d4:07:b2:04:13:7e:
38:a3:8c:cb:d1:61:d8:8f:37:cc:75:f5:45:14:94:
22:17:7a:bb:0e:19:56:b1:6b:e1:5d:ea:08:03:08:
60:0c:7b:a9:21:91:d2:73:ac:61:42:de:12:15:bc:
15:ba:d2:bc:c3:c0:68:b6:32:40:06:ee:b4:d6:0f:
d5:c0:59:cd:42:69:1b:89:a0:af:fc:45:7f:78:8c:
1e:72:31:fd:03:20:e5:80:90:fe:eb:cb:9b:82:98:
dc:8f:53:4f:03:39:8f:d2:34:45:c8:89:2e:83:dd:
68:e3:81:7b:03:79:22:35:0b:59:01:22:2b:d1:04:
12:f6:ae:6a:bf:8f:1a:39:2f:f0:1e:77:46:5f:02:
9f:3f:36:ea:d9:a4:01:35:ba:92:d8:3c:cf:5c:6c:
48:a7:27:81:da:f1:a3:28:69:92:fa:72:f3:03:6c:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:83:D6:FF:15:B1:90:41:DB:DE:03:BC:72:9D:70:77:2D:71:55:0C
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:80:4e:52:08:ea:dc:08:c6:ab:a4:7e:82:fa:32:88:a4:e2:
ad:c8:0f:0e:df:1d:53:de:90:36:ec:80:b3:b9:68:ff:fb:47:
82:dc:0e:ce:9d:8e:e3:2a:5a:8e:60:db:4c:ae:e3:f0:81:a0:
3e:f3:ec:3b:0a:c1:b0:66:ac:51:c1:ea:4d:4d:1a:e7:52:85:
ec:1e:31:50:6c:f8:0b:38:11:0d:44:e6:72:4c:cc:e6:1a:fe:
4d:fa:54:75:05:63:b2:90:f0:51:5e:37:d9:4f:1f:a7:bd:cd:
cf:b2:10:8d:15:66:88:0c:89:34:55:cc:ef:52:10:a6:1e:21:
e1:a5:e4:13:6b:42:1d:48:0c:09:7d:97:8e:ef:a4:64:52:be:
da:1f:cb:4f:a7:84:37:c0:0b:92:eb:05:9f:21:ed:f0:bc:9c:
fb:50:1c:e2:cf:e7:d4:03:5f:d8:95:52:5b:b9:4d:2e:61:2f:
8d:1d:c3:44:d5:14:d8:79:dd:fc:b7:c4:6b:e6:47:00:aa:4e:
2e:a5:e1:0c:78:61:44:61:59:4c:00:22:24:4b:fe:3f:f4:ec:
fd:0d:cc:eb:72:1d:d4:78:a5:e2:a1:45:43:3b:e0:bb:61:eb:
6f:85:9c:04:25:fe:99:25:5d:b0:b4:01:df:f7:44:b7:52:ce:
01:3f:5d:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrtu6NK1dCrs96yPc/IiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDUxNTk4ODJlNzdhNjdmNzk3ZjhmOGI5OTZiNjJjNGVi
YWJjMjAwHhcNMjYwNDE5MDMwMDM4WhcNMjYwNDIwMDMwMDM4WjAzMTEwLwYDVQQD
EyhjMDgzZDZmZjE1YjE5MDQxZGJkZTAzYmM3MjlkNzA3NzJkNzE1NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIfd7LZUf5xx4uE6ar1J08QMsaIo
XNAbM9pQ4adL9swWuBzYYunrHQvQmiO+mTaJM/asgCiKoQ6TmCzlZ0Qba6cPjHEz
1lyYmzQJ7ySRnaLqdQfUB7IEE344o4zL0WHYjzfMdfVFFJQiF3q7DhlWsWvhXeoI
AwhgDHupIZHSc6xhQt4SFbwVutK8w8BotjJABu601g/VwFnNQmkbiaCv/EV/eIwe
cjH9AyDlgJD+68ubgpjcj1NPAzmP0jRFyIkug91o44F7A3kiNQtZASIr0QQS9q5q
v48aOS/wHndGXwKfPzbq2aQBNbqS2DzPXGxIpyeB2vGjKGmS+nLzA2yGmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCD1v8VsZBB294DvHKdcHctcVUMMB8GA1UdIwQY
MBaAFOPVFZiC53pn95f4+LmWtixOurwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zMDUyM2ItOGIzYy00NmNiLWFiYmMt
ZTEwMTQ3N2VmYjhhLzEvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zMDUyM2ItOGIzYy00NmNiLWFiYmMtZTEwMTQ3N2VmYjhh
LzEvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYBOUgjq
3AjGq6R+gvoyiKTircgPDt8dU96QNuyAs7lo//tHgtwOzp2O4ypajmDbTK7j8IGg
PvPsOwrBsGasUcHqTU0a51KF7B4xUGz4CzgRDUTmckzM5hr+TfpUdQVjspDwUV43
2U8fp73Nz7IQjRVmiAyJNFXM71IQph4h4aXkE2tCHUgMCX2Xju+kZFK+2h/LT6eE
N8ALkusFnyHt8Lyc+1Ac4s/n1ANf2JVSW7lNLmEvjR3DRNUU2Hnd/LfEa+ZHAKpO
LqXhDHhhRGFZTAAiJEv+P/Ts/Q3M63Id1Hil4qFFQzvgu2Hrb4WcBCX+mSVdsLQB
3/dEt1LOAT9dvw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:05 2026 by rpki-client