Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
File: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft (raw, json)
Hash identifier: O7wRbkGzZrVteWraxF8nP649OKrYW0+Yrsmvu3d1SZI=
Subject key identifier: 78:5B:7A:2E:85:6B:E7:83:C6:77:50:31:D3:EA:90:EF:80:9A:A2:82
Authority key identifier: E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
Certificate issuer: /CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Certificate serial: 01A0C70E9C37C176F7EB9944A7962CBCAEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
Manifest number: 0257
Signing time: Tue 22 Sep 2026 03:00:18 +0000
Manifest this update: Tue 22 Sep 2026 03:00:18 +0000
Manifest next update: Wed 23 Sep 2026 03:00:18 +0000
Files and hashes: 1: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl (hash: 8V+zLBBGAhZfOr5wjb/jyRYZfKKQ34tde1sKJ5oajXU=)
2: KIZ8Qo_Osa0eeRKHpCezFEWpt38.asa (hash: BUCO47iMjOX10Oz4gqlvyalBtDL8T56NMGskn473Wu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:9c:37:c1:76:f7:eb:99:44:a7:96:2c:bc:ae:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Validity
Not Before: Sep 22 03:00:18 2026 GMT
Not After : Sep 23 03:00:18 2026 GMT
Subject: CN=785b7a2e856be783c6775031d3ea90ef809aa282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:a3:91:fe:41:39:5b:a0:1e:4a:a1:9a:43:
d3:46:26:b8:e6:e5:d5:a1:8c:e7:a6:dc:29:62:5d:
f1:b7:9c:2b:5d:e6:42:3b:2d:56:8f:d9:a8:7e:19:
08:47:12:15:7c:c0:d1:7f:02:80:1d:4d:23:16:ff:
7e:df:8b:79:00:5f:ee:b0:ca:3d:7b:e6:de:5d:fa:
d5:18:a7:ee:ea:fc:f6:f0:7e:ab:f3:5a:88:fa:b1:
67:c5:07:af:78:e5:49:7e:e7:b4:af:15:ff:c0:84:
5d:8d:db:ba:49:ac:6d:99:d0:b3:1c:59:70:f7:a3:
58:07:96:fc:10:ed:1e:2b:bb:0c:f5:aa:94:a7:27:
05:51:1d:9b:a6:19:80:cc:8e:66:93:80:16:91:f9:
fa:39:59:3b:8e:68:f5:8f:f8:f5:72:af:9b:e5:f5:
e4:3a:8f:c2:64:83:ad:99:62:e3:0f:66:20:d5:6b:
00:76:19:5b:69:c0:2d:5f:27:af:1d:c3:f9:80:23:
33:9b:13:af:da:97:19:5a:a7:a3:32:e1:98:33:06:
7f:d4:c6:fa:a6:c6:cf:75:33:04:8e:cb:35:91:97:
98:b5:62:40:2e:48:ce:15:8d:56:ad:f2:ad:da:90:
80:f4:75:bf:30:e6:da:82:01:90:18:51:b2:13:41:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5B:7A:2E:85:6B:E7:83:C6:77:50:31:D3:EA:90:EF:80:9A:A2:82
X509v3 Authority Key Identifier:
keyid:E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ca:ec:cb:7b:3f:60:0e:18:3f:c5:9e:ae:00:f9:53:31:01:
e8:fd:73:e9:38:ea:ad:50:6c:d1:2b:71:16:cd:6b:a8:3a:cf:
00:ed:db:73:d5:2c:51:53:a8:89:a8:40:7b:6f:fe:89:e0:28:
c4:89:60:85:32:e1:3a:79:8e:27:0d:08:65:4c:2e:60:06:80:
ba:3c:0f:28:39:17:1f:ca:ee:f9:61:6e:cf:f6:e1:53:dc:35:
49:05:40:8e:7e:69:13:e1:0f:f4:9b:f9:53:db:96:59:7e:a4:
43:1b:c5:0c:e6:e2:00:79:e1:94:ae:82:b6:27:a1:e0:15:2c:
10:27:2a:fa:54:5d:6d:fb:cc:b7:4b:c2:c2:7a:3f:f4:7a:d9:
6f:42:4c:b8:f0:4b:d0:08:8d:48:e5:be:85:56:89:6f:96:86:
e8:6a:75:e5:18:b5:0e:ac:eb:a9:23:96:96:d6:0f:3e:5a:02:
2f:8f:45:46:3a:87:c6:23:34:38:fe:3f:2d:6b:01:e9:af:76:
1a:d7:83:c1:6e:00:1a:f4:58:4c:29:ae:fe:41:77:d8:7c:79:
53:56:5a:9b:fd:55:a8:b1:36:aa:5b:67:7d:af:3a:af:f4:b2:
41:bb:cc:d1:91:79:c0:7b:ad:ff:76:27:14:e2:8b:f0:1c:13:
ac:05:35:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHDpw3wXb365lEp5YsvK7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDIyYzAxNzg0NjU2ZDRmNTY2NmU3NzAzNDgxYTJmNzA4
NGU0ZjkwHhcNMjYwOTIyMDMwMDE4WhcNMjYwOTIzMDMwMDE4WjAzMTEwLwYDVQQD
Eyg3ODViN2EyZTg1NmJlNzgzYzY3NzUwMzFkM2VhOTBlZjgwOWFhMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6mjkf5BOVugHkqhmkPTRia45uXV
oYznptwpYl3xt5wrXeZCOy1Wj9mofhkIRxIVfMDRfwKAHU0jFv9+34t5AF/usMo9
e+beXfrVGKfu6vz28H6r81qI+rFnxQeveOVJfue0rxX/wIRdjdu6SaxtmdCzHFlw
96NYB5b8EO0eK7sM9aqUpycFUR2bphmAzI5mk4AWkfn6OVk7jmj1j/j1cq+b5fXk
Oo/CZIOtmWLjD2Yg1WsAdhlbacAtXyevHcP5gCMzmxOv2pcZWqejMuGYMwZ/1Mb6
psbPdTMEjss1kZeYtWJALkjOFY1WrfKt2pCA9HW/MObaggGQGFGyE0F2QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhbei6Fa+eDxndQMdPqkO+AmqKCMB8GA1UdIwQY
MBaAFOPSLAF4RlbU9WZudwNIGi9whOT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlJc0FYaEdWdFQxWm01M0EwZ2FMM0NFNVBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hNDJmZmMtNGM4Ny00YWZlLWExOGQt
NWQ5ZjU1MDI4MmE0LzEvNDlJc0FYaEdWdFQxWm01M0EwZ2FMM0NFNVBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hNDJmZmMtNGM4Ny00YWZlLWExOGQtNWQ5ZjU1MDI4MmE0
LzEvNDlJc0FYaEdWdFQxWm01M0EwZ2FMM0NFNVBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMrsy3s/
YA4YP8WergD5UzEB6P1z6TjqrVBs0StxFs1rqDrPAO3bc9UsUVOoiahAe2/+ieAo
xIlghTLhOnmOJw0IZUwuYAaAujwPKDkXH8ru+WFuz/bhU9w1SQVAjn5pE+EP9Jv5
U9uWWX6kQxvFDObiAHnhlK6Ctieh4BUsECcq+lRdbfvMt0vCwno/9HrZb0JMuPBL
0AiNSOW+hVaJb5aG6Gp15Ri1DqzrqSOWltYPPloCL49FRjqHxiM0OP4/LWsB6a92
GteDwW4AGvRYTCmu/kF32Hx5U1Zam/1VqLE2qltnfa86r/SyQbvM0ZF5wHut/3Yn
FOKL8BwTrAU1Ng==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:35:56 2026 by rpki-client