Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: jYTAmOaq36Zqw8uG1lHYx3q+1hyQrk2inmrN2a+/GJU=
Subject key identifier: 2A:7F:BA:FC:F0:DF:C5:CA:19:4A:C9:6E:14:3F:12:9F:E1:03:D8:80
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 01A1C5FA873FC4D21FDEDB778485C36EA66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 0F71
Signing time: Tue 10 Nov 2026 15:01:32 +0000
Manifest this update: Tue 10 Nov 2026 15:01:32 +0000
Manifest next update: Wed 11 Nov 2026 15:01:32 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: NHesi5Qwmy7KEqqTHrIYONdwhFJ6C0DeLmGsEYrWe2A=)
2: hD5yM-bTRcXqw7hsAje6CKQSULU.roa (hash: BoKM+q4JQCN0QltCSwaO5romaCSLzyBz/YnHCsh+0Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:fa:87:3f:c4:d2:1f:de:db:77:84:85:c3:6e:a6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Nov 10 15:01:32 2026 GMT
Not After : Nov 11 15:01:32 2026 GMT
Subject: CN=2a7fbafcf0dfc5ca194ac96e143f129fe103d880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:44:8b:a0:1a:be:fa:92:6b:39:41:46:22:
b5:5a:2b:8d:43:d0:7d:73:69:89:b4:d8:d6:45:7c:
07:2c:c9:cb:cc:9d:f1:85:e1:a9:92:96:2b:f9:e3:
82:cb:be:10:72:e7:aa:39:78:85:8a:b8:96:64:93:
eb:70:53:27:3b:44:36:92:9f:4c:5f:a7:b2:c4:cb:
91:e8:6d:4e:6a:f9:29:cf:2d:bc:08:78:9d:51:f8:
7b:d1:5b:67:16:52:48:dd:68:00:f5:4b:88:cc:c7:
9a:1f:97:9a:73:41:02:4f:6e:4f:42:3b:7c:c4:49:
5d:19:f3:67:76:93:fe:7e:90:39:07:8a:20:d0:0d:
2a:7e:0a:a7:c7:70:98:c1:ac:9f:28:73:2c:52:db:
d3:60:c3:dd:10:8d:06:b9:22:83:34:ec:67:69:1b:
d4:f7:dc:25:7d:97:3c:3f:f3:87:0b:bf:d8:ab:59:
17:ad:a1:d5:57:e8:73:e5:55:47:40:43:9b:c7:c8:
b9:8c:ae:18:9a:e3:31:08:10:aa:4d:50:6d:ed:aa:
2c:06:6a:75:bd:47:8e:75:e7:7b:21:90:0a:76:05:
a7:aa:6c:ca:ed:c4:ce:29:a7:4b:74:03:86:76:5e:
24:f0:73:64:3c:cd:42:0e:01:ae:ce:ca:e2:5c:c1:
d5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7F:BA:FC:F0:DF:C5:CA:19:4A:C9:6E:14:3F:12:9F:E1:03:D8:80
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:35:38:a3:e4:a6:68:44:cb:09:d8:ad:dd:9d:60:24:95:eb:
1d:bb:ae:c4:46:ba:97:06:29:02:27:31:16:fb:01:db:30:bd:
7a:2d:3c:a4:3e:16:f6:5a:8f:d8:4d:77:ea:71:1a:34:62:c3:
bd:43:36:7b:45:27:d8:c4:2c:bc:6a:99:b3:50:4f:5b:84:d8:
32:2d:bf:99:de:43:e7:f6:67:57:32:15:b9:7e:b2:d0:a5:a9:
31:de:11:e5:f6:13:c9:af:d1:21:ca:f3:b5:75:5a:c3:8b:a7:
c0:a4:98:8c:65:51:27:f6:fa:df:8a:46:50:63:44:0c:0b:3e:
73:bd:47:23:5f:93:7b:56:16:60:80:f8:4e:39:bc:96:e3:bf:
1d:ce:ea:2a:af:57:6b:f1:c8:fe:0a:be:78:a0:65:de:65:6e:
f2:4c:2a:21:ef:ad:45:e2:69:80:81:0b:dd:ca:bd:69:74:31:
ef:35:91:f5:19:b6:9d:43:89:c7:cf:37:5b:2c:58:9d:70:72:
cc:4c:14:fd:28:fa:65:06:17:5d:f9:3e:b5:71:24:83:e8:e3:
6a:6c:ba:ef:b4:49:9e:ce:95:5a:13:b2:07:90:c1:b7:d5:b1:
6d:11:c6:4c:e7:d4:5c:78:b0:42:d3:05:cb:db:c3:4b:45:71:
3e:3a:75:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:18:36 2026 by rpki-client