Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
File: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft (raw, json)
Hash identifier: Cpgoce3QrUzd2I9/i6NyFXSiLkyicSvaCo4En8tA0Xs=
Subject key identifier: B0:FA:37:6E:4E:A2:F1:6E:0C:FF:7E:46:0A:F3:15:1E:9A:50:83:EE
Authority key identifier: E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
Certificate issuer: /CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Certificate serial: 019ED2E1E94801C020EEA3ADD42A1D40ADEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
Manifest number: 0154
Signing time: Wed 17 Jun 2026 00:01:21 +0000
Manifest this update: Wed 17 Jun 2026 00:01:21 +0000
Manifest next update: Thu 18 Jun 2026 00:01:21 +0000
Files and hashes: 1: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl (hash: Qh+sStBcqNGwwE1tH8IlvWpuopPiH2Vy7td8pOTcqv0=)
2: KIZ8Qo_Osa0eeRKHpCezFEWpt38.asa (hash: BUCO47iMjOX10Oz4gqlvyalBtDL8T56NMGskn473Wu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d2:e1:e9:48:01:c0:20:ee:a3:ad:d4:2a:1d:40:ad:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Validity
Not Before: Jun 17 00:01:21 2026 GMT
Not After : Jun 18 00:01:21 2026 GMT
Subject: CN=b0fa376e4ea2f16e0cff7e460af3151e9a5083ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:8d:c5:d8:a9:80:18:e7:40:6e:b5:3f:2a:
9c:5c:ed:15:34:fd:a6:9c:b0:60:75:c4:df:5d:0e:
9c:23:63:0d:1c:46:56:b3:da:9f:1c:3b:20:ea:9e:
c9:22:45:93:5d:80:b1:b0:f4:ca:41:b8:cb:24:f3:
bc:c1:df:83:0c:6b:82:9a:db:94:f9:9e:ce:44:3b:
55:2f:d1:1e:bc:30:6d:d0:e0:1c:5f:66:d3:e5:30:
41:24:59:9b:be:36:3d:97:96:ce:ad:68:a4:19:3c:
6a:e5:88:8b:cc:68:97:1f:a0:63:16:d8:c6:94:fa:
2c:ec:97:c7:93:93:1b:51:fa:62:60:4e:db:2f:03:
92:e2:71:ad:c9:4c:f5:28:24:0f:5a:ad:e9:c4:a2:
d8:ff:a8:63:02:28:d9:f5:cc:71:16:89:ee:b6:75:
97:f8:b1:49:6d:72:85:3b:75:5d:c9:d8:f4:36:46:
96:bc:93:9b:66:f6:42:c5:96:dd:d2:38:8e:64:44:
61:d2:f7:8c:52:a7:45:d1:1e:a1:7e:d3:33:c7:a9:
50:00:b3:b2:f0:d7:c8:54:96:79:32:80:ec:59:fa:
b4:d5:5c:58:bd:2e:fd:b6:6d:4b:0e:1a:12:c5:43:
b1:ab:3a:7e:c4:64:3c:76:f0:04:21:43:a8:c6:43:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FA:37:6E:4E:A2:F1:6E:0C:FF:7E:46:0A:F3:15:1E:9A:50:83:EE
X509v3 Authority Key Identifier:
keyid:E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9b:ff:11:0d:8c:94:ae:cf:52:01:f3:bf:65:52:8e:be:bf:
27:52:0b:8d:dd:9e:df:f1:5e:dc:3b:92:4a:c4:14:2a:51:5c:
54:77:16:ee:17:81:64:95:4d:e6:c1:b9:c3:3d:8a:f7:4f:06:
c6:b9:a9:87:b4:87:4b:92:d1:f8:27:28:83:95:14:f2:59:5c:
43:9f:73:1e:a8:f5:58:11:a9:d3:b6:1f:ab:64:80:ff:ff:cb:
16:75:c0:18:05:e6:13:56:fd:11:5d:7f:5c:ef:a9:60:5e:67:
14:72:9e:0f:27:2a:ce:b5:af:f9:aa:8c:3c:27:2f:00:1c:1f:
07:c4:0b:fa:dc:b6:ae:04:45:54:83:08:b2:38:63:55:f9:48:
81:80:83:11:d7:05:ab:7e:f2:c5:ec:34:38:3b:88:89:35:33:
c3:ca:4b:1c:24:c7:8c:90:08:89:bb:23:ba:f2:1a:03:53:1d:
46:ba:a0:92:aa:64:55:96:61:fa:9c:98:05:f9:ee:b7:6a:8a:
88:ef:c8:b9:c7:bc:b3:db:77:42:3b:14:89:49:02:3c:66:1d:
e2:b5:e1:e6:7c:48:09:64:bf:a1:3e:22:ba:f9:8b:d1:29:c2:
bd:ee:c4:08:02:4c:55:2e:d6:cd:83:cc:9a:86:a0:71:0a:22:
fe:57:0e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:27:08 2026 by rpki-client