Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: QY9x6mL0zA3ALC1hyNt8P5k6lEPwuDAHq6lMHdXG1aM=
Subject key identifier: D8:25:2B:A5:A0:3C:53:FF:C3:BE:97:1E:22:51:73:B3:51:E0:5A:7F
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 019CAC7DCFC958F9B1769CDD2B76E52526F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 0CCD
Signing time: Mon 02 Mar 2026 03:00:52 +0000
Manifest this update: Mon 02 Mar 2026 03:00:52 +0000
Manifest next update: Tue 03 Mar 2026 03:00:52 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: aAO7cimLfQUDCOyPHJSnwF/HZGYEMZh7e7WUwEjGavg=)
2: hD5yM-bTRcXqw7hsAje6CKQSULU.roa (hash: BoKM+q4JQCN0QltCSwaO5romaCSLzyBz/YnHCsh+0Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:cf:c9:58:f9:b1:76:9c:dd:2b:76:e5:25:26:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Mar 2 03:00:52 2026 GMT
Not After : Mar 3 03:00:52 2026 GMT
Subject: CN=d8252ba5a03c53ffc3be971e225173b351e05a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6f:63:1f:e0:b1:bc:18:72:1f:c6:60:6b:42:
6b:e9:41:ac:4e:81:f2:50:e9:62:d9:4e:ca:15:d0:
7e:0d:34:c0:e4:fa:04:cf:8c:90:a5:01:3f:77:e4:
43:f6:73:bc:c4:e6:06:2b:36:6e:c0:47:25:f5:34:
9e:30:60:b8:19:ea:77:36:30:77:f9:83:c9:5b:f2:
b4:25:b4:1a:05:d4:dc:e2:7e:1b:92:2d:0e:31:f6:
26:ac:49:21:6b:93:2d:eb:e8:66:1e:72:b9:42:50:
ca:22:a0:0b:7c:f5:c0:6b:51:6f:e3:45:47:86:20:
66:b3:94:5b:c0:f6:f5:86:58:1a:67:e6:b9:f5:4b:
96:01:8b:ae:42:eb:07:49:34:4b:93:b4:ab:61:b4:
a6:df:df:80:4f:f3:b8:ea:eb:57:54:9c:51:ed:3b:
62:3d:f2:6a:5e:ac:44:31:7b:e5:77:9c:70:4b:67:
d8:54:3e:71:d4:88:65:57:a9:3c:03:5b:1c:2d:d9:
17:3d:e4:e7:0b:ef:95:1a:1d:f0:42:60:e8:71:31:
f1:fb:9f:81:56:b5:93:a4:ca:ef:7e:2a:a1:ab:b7:
f6:75:c8:d4:d1:bc:a0:a6:bf:93:89:f8:66:37:07:
57:13:13:bf:5d:30:ba:19:52:16:13:4e:2e:10:43:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:25:2B:A5:A0:3C:53:FF:C3:BE:97:1E:22:51:73:B3:51:E0:5A:7F
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:28:97:70:0c:1c:08:66:66:a9:2e:0c:f1:ba:2f:65:fc:99:
de:12:a1:db:9c:87:ac:d3:3f:06:9c:26:18:d5:26:f4:a5:17:
66:3b:98:06:4a:5b:d9:02:51:7a:d9:2f:f8:71:1d:37:97:be:
45:21:eb:4a:81:ee:54:38:30:63:69:61:19:b5:8d:20:de:df:
e9:50:35:ca:01:fa:b2:24:b8:1d:06:c9:92:fe:f8:2a:d6:8e:
df:9d:ed:06:bc:51:90:78:54:5d:96:2e:a2:0b:ae:56:1e:54:
f6:f1:61:0e:00:1c:a0:ba:b1:98:da:d2:4c:e0:7f:dd:d3:ad:
7a:f8:27:0e:19:e3:23:d6:61:52:54:20:af:8a:db:bf:67:cf:
d5:c3:8d:65:bd:4c:05:13:b6:37:d5:63:16:2a:b5:f6:67:d9:
e6:9e:40:1c:ac:89:65:4f:6e:5b:f6:7d:f2:a1:11:9e:71:c3:
76:29:28:7e:74:d6:33:91:59:a9:1c:23:2e:c3:2a:ce:a6:b3:
a2:08:8b:46:0e:a3:8f:dd:77:73:44:6d:d8:6f:de:71:12:98:
fa:67:a7:46:f2:e2:73:6f:69:cc:3f:3a:30:66:52:d1:7f:c2:
24:e9:b0:3b:45:63:5e:27:58:bc:24:7a:be:42:09:20:e2:d0:
2e:4c:be:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:37 2026 by rpki-client