Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: OyCBUXtKRtyrwLdScukWtzKuQDy5MHXCfNTt0oVXDyc=
Subject key identifier: 4E:02:BF:C9:45:77:68:A4:DD:A7:5E:ED:BA:F1:AB:60:03:97:88:05
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 01A0C3320123FD216516A3DFBB603E14CDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 0EEB
Signing time: Mon 21 Sep 2026 09:00:29 +0000
Manifest this update: Mon 21 Sep 2026 09:00:29 +0000
Manifest next update: Tue 22 Sep 2026 09:00:29 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: wuRzQ/VQdOJvohCpuOpQdeyETQteKgz/ujDX9aJ4aEY=)
2: hD5yM-bTRcXqw7hsAje6CKQSULU.roa (hash: BoKM+q4JQCN0QltCSwaO5romaCSLzyBz/YnHCsh+0Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:01:23:fd:21:65:16:a3:df:bb:60:3e:14:cd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Sep 21 09:00:29 2026 GMT
Not After : Sep 22 09:00:29 2026 GMT
Subject: CN=4e02bfc9457768a4dda75eedbaf1ab6003978805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:51:93:9b:99:11:47:21:0f:f4:6f:41:b9:
47:d3:1a:0c:8a:3e:5c:80:5b:6d:94:4a:f2:ba:50:
88:86:96:7b:13:5c:ea:43:47:3c:2d:e3:e9:37:94:
ba:67:b7:62:fd:00:bc:be:58:77:8f:64:30:c4:15:
ea:c0:1c:1c:8b:ca:33:c0:01:f1:60:23:e0:9e:75:
c3:53:f6:f5:13:4f:24:ed:4c:52:27:39:33:70:7a:
4d:da:20:ab:66:34:cd:d1:ff:17:09:26:af:55:2c:
d0:04:3a:f4:16:45:f2:1e:fc:d1:2b:d1:1d:b1:64:
fb:0a:ab:9c:8f:a4:b4:ed:c5:cf:6b:96:c1:b3:19:
20:1a:1a:9d:fb:4a:43:fe:60:e8:dc:4e:c2:fb:c0:
26:1b:8b:2a:d9:29:e3:67:64:d1:96:c3:96:99:df:
60:05:7c:bd:af:8c:5d:31:2a:a2:1b:4f:f8:61:37:
ef:b0:01:aa:60:57:52:c7:1c:bd:b6:0f:72:95:46:
e9:ff:6d:f4:a5:8f:e2:b1:06:b4:3f:e2:24:8b:4f:
3e:d8:39:df:42:79:7e:cc:e7:0f:d9:f0:44:17:a4:
7d:a9:77:98:db:19:cf:09:f9:18:d7:0c:b8:5a:bf:
57:91:af:78:17:1f:75:d9:88:9c:44:44:54:c0:f9:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:02:BF:C9:45:77:68:A4:DD:A7:5E:ED:BA:F1:AB:60:03:97:88:05
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5e:8a:06:4d:cb:a6:29:33:64:01:24:d5:87:e7:74:df:5b:
3c:c8:bd:36:c4:50:8c:50:ff:f2:10:bf:97:b8:22:c7:32:b6:
3a:6d:d9:7c:d2:3f:c4:2e:75:78:7d:3f:b8:d5:8c:17:01:ea:
ac:ce:2f:b5:7f:04:df:64:b2:54:16:45:47:04:6c:3d:9a:6a:
f6:2a:06:24:42:c6:eb:63:ba:ff:4a:3c:c0:2a:72:5a:1e:13:
59:89:9c:da:cf:83:90:7c:af:6c:3d:53:05:30:97:79:ee:33:
92:20:16:81:a5:2b:ca:6b:70:ad:c3:89:20:a3:da:ba:3f:17:
b1:93:d9:49:e0:a4:93:2e:af:e1:c4:ae:e8:af:6a:12:12:11:
0d:09:11:a8:c1:e5:89:98:e0:97:9f:d8:42:f9:4f:c7:9f:1b:
46:6f:b2:0c:f9:2d:4e:9a:d2:20:1d:89:4c:c5:ab:32:2c:39:
6b:9f:d2:be:bf:b4:1a:ac:17:b6:69:30:1b:7d:a1:0c:c5:23:
6e:92:6d:08:87:9f:7b:f2:c9:f1:1c:9c:e6:5f:d0:31:ca:38:
20:42:9a:1c:59:84:48:1d:9a:ae:18:f7:4a:e5:1e:3e:71:6c:
24:55:9a:df:db:b1:2b:91:ad:bd:e1:50:eb:f7:49:03:6b:c9:
8d:58:d7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:34:57 2026 by rpki-client