Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
File: 49HX1DNmpbAGPDdXExnfpDLRUxs.mft (raw, json)
Hash identifier: gwRisoEQpMaeWCofS2LokffZ9hwm0i0t2/kHzw6H2Rk=
Subject key identifier: EF:14:DD:67:AE:A4:8A:EF:6C:7C:DE:F3:14:8B:6F:A6:E7:82:A9:D4
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019D9BD5EAC9048FA286EEA1FF3AAD2634AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
Manifest number: 04
Signing time: Fri 17 Apr 2026 14:26:20 +0000
Manifest this update: Fri 17 Apr 2026 14:26:20 +0000
Manifest next update: Sat 18 Apr 2026 14:26:20 +0000
Files and hashes: 1: 49HX1DNmpbAGPDdXExnfpDLRUxs.crl (hash: iWDtg2A+3yBtb4s0T9AtpVXhGHXhFoSbZ6T+jPv61bk=)
2: EwuDBNwsbSMtyx0cZMtM0qPkPMA.roa (hash: UeXhJ2qTzLZJgTHgN9h/HZW4A+wpinm+DBVQ9mkXo+g=)
3: W2hpXQ1A0MT3GUjr32Sgc7VVf5A.roa (hash: YMsNwrZXXy+QRpYjbyRstuKmR56y1+W4eNOMUM8AcKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:d5:ea:c9:04:8f:a2:86:ee:a1:ff:3a:ad:26:34:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Apr 17 14:26:20 2026 GMT
Not After : Apr 18 14:26:20 2026 GMT
Subject: CN=ef14dd67aea48aef6c7cdef3148b6fa6e782a9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:a4:b4:4c:fe:0a:ee:45:d4:4e:0c:28:29:
4a:f5:20:e5:26:62:49:ea:74:3b:84:0a:7c:12:11:
4e:7a:6d:58:84:e0:92:f3:bc:39:c2:f0:2b:6e:49:
13:be:cc:0c:8c:eb:9f:68:0a:d2:e4:65:cb:fb:e6:
a2:53:3d:93:e0:e7:a8:2e:7a:79:5d:d9:46:27:ae:
5d:6f:7b:14:19:7b:c1:34:2f:87:09:32:73:97:2d:
4a:2a:5c:22:9f:a4:1b:dc:77:d5:fb:e1:1a:d4:8b:
87:3a:e2:69:79:cc:57:85:dd:9b:14:26:80:3d:1e:
5a:4b:df:86:56:11:d5:19:91:bc:dc:7e:a6:a8:1c:
90:8c:87:41:cf:f9:21:4d:b5:12:51:a6:98:ab:7e:
83:8d:4d:1d:e5:fd:05:7c:2a:88:85:e6:73:aa:03:
5c:03:d7:35:b3:dc:60:51:ee:37:3f:0f:48:c9:6b:
3c:8c:d1:28:44:ef:da:49:0d:39:23:ab:44:28:ac:
df:e6:a3:b8:5a:52:39:52:7f:a4:6a:4a:d1:fb:6e:
5d:24:db:4e:a2:c1:12:08:f8:02:5c:1d:38:4b:eb:
6a:78:9d:23:1c:67:d4:c2:10:28:5d:38:95:ff:2e:
99:31:b5:04:55:07:cc:de:6c:4f:13:61:21:ab:94:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:DD:67:AE:A4:8A:EF:6C:7C:DE:F3:14:8B:6F:A6:E7:82:A9:D4
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:27:9b:c8:43:a3:f4:eb:92:9a:79:e8:1a:f0:44:a8:a3:48:
3e:f8:d9:08:5b:4f:ef:a6:de:64:7c:29:6d:3c:d9:e3:04:62:
9c:c2:28:c3:ea:3e:7b:a8:f4:2e:24:21:cc:01:59:84:6f:85:
c8:b8:5d:d5:cb:91:1e:72:b7:0f:6b:d4:f2:8d:f1:22:70:b7:
ec:a9:5d:9e:4e:43:cf:57:a4:de:5d:e7:4c:de:c8:84:da:13:
93:06:fa:96:08:24:cf:9f:e5:75:f7:1e:1f:73:ad:f2:6b:a4:
a2:21:f3:bb:c4:14:5d:df:28:99:26:c1:6a:0c:09:f9:38:94:
35:b7:05:4e:fd:a7:5b:59:61:72:c6:a2:a0:60:0d:55:86:9a:
1b:ed:03:38:ef:5e:9e:ed:fa:07:98:e7:af:dd:07:9e:d8:6f:
81:8f:03:4f:71:d4:3e:56:f7:b6:19:35:c9:bc:a5:95:e5:f0:
a8:f9:11:21:60:02:eb:a2:d7:ac:3e:5d:ee:0d:95:e4:e8:e7:
44:82:21:81:ba:dc:76:ad:cd:a9:6e:96:3f:ba:e8:2b:fc:31:
42:02:68:a8:e8:e7:cc:ef:81:e9:40:e9:18:6f:61:17:97:ed:
86:28:23:5e:14:8f:1f:26:ca:b6:fb:cc:81:4f:a0:18:89:af:
20:55:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:59 2026 by rpki-client