Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: 939DdTBJxoagiML9X7CLoyBoh+zqIO3oeBaoOW/hHMI=
Subject key identifier: 91:74:AB:C3:C5:27:9B:F2:FB:7F:02:6B:27:9D:F5:44:E7:86:03:13
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 019D98F419A31256E21FA1B9CDE48B2E920C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 1194
Signing time: Fri 17 Apr 2026 01:00:27 +0000
Manifest this update: Fri 17 Apr 2026 01:00:27 +0000
Manifest next update: Sat 18 Apr 2026 01:00:27 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: jsGMt5HlW82h10VO9YUwqmxKUr2kO9OqvKypXHgtn4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:19:a3:12:56:e2:1f:a1:b9:cd:e4:8b:2e:92:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Apr 17 01:00:27 2026 GMT
Not After : Apr 18 01:00:27 2026 GMT
Subject: CN=9174abc3c5279bf2fb7f026b279df544e7860313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:c9:e6:f8:d1:84:14:c1:22:b7:0b:f9:bf:
e4:be:b3:07:c0:c6:63:6e:c5:29:4c:e5:14:96:bb:
26:ff:5e:c1:52:a6:1e:53:37:76:91:b2:ca:6c:cc:
80:08:f5:5c:92:df:6b:43:90:40:e2:4f:cb:3a:31:
83:cb:b5:05:31:9b:20:29:9e:84:09:b0:33:69:dc:
89:55:b0:b1:e9:ec:32:6c:0a:59:89:49:8b:fd:93:
6e:1f:2f:3e:ed:56:7f:9c:b0:ab:71:4b:7e:e0:a4:
89:60:0e:44:d4:24:69:c1:ef:91:19:85:2f:e0:b6:
f7:c3:0b:2b:13:51:a5:a4:1b:33:03:bb:f0:48:38:
99:2b:58:73:14:6e:c3:9e:bb:48:e6:83:ce:0d:08:
5b:c5:20:af:86:c7:35:c9:46:3d:eb:25:29:92:3c:
27:52:2c:c3:b5:18:5d:aa:a1:38:e8:b4:ce:75:ad:
31:48:cb:65:f9:bd:e8:16:68:20:0a:f9:34:a9:4e:
ec:04:e7:bb:90:67:e3:10:63:8d:a1:23:33:ed:75:
c2:f6:d6:f4:0c:1b:bf:92:11:99:95:88:b5:ec:14:
cf:37:fd:da:90:99:50:fa:33:4c:90:7f:86:36:b7:
10:19:fe:06:11:db:d6:64:9f:4f:ef:bf:21:ac:1e:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:74:AB:C3:C5:27:9B:F2:FB:7F:02:6B:27:9D:F5:44:E7:86:03:13
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1d:ea:89:b8:38:8e:fb:18:d6:7e:08:46:23:5f:98:43:b3:
ad:1d:b7:23:31:37:6b:2d:4d:cc:26:39:c1:cc:0b:c9:70:2e:
e5:c1:54:db:bc:d9:d0:84:c3:b4:4b:49:a4:9b:85:cd:fa:d3:
dd:79:a1:6a:89:1f:5e:6b:cf:be:f7:98:05:c2:04:c9:52:07:
06:d0:b6:d7:3d:0c:36:77:5a:ff:83:b1:f0:4f:99:c8:e1:94:
4c:34:c7:8e:b2:f0:b3:75:cb:36:22:bc:6b:2d:74:25:a8:33:
fb:f6:95:8f:30:45:0d:e1:fc:ac:82:7c:17:ba:fd:fd:a8:1d:
06:3e:4c:47:6e:07:77:82:e9:ac:cb:4d:ca:cc:0d:16:e5:ac:
9c:ad:08:f0:c5:6b:f3:af:d7:e5:a5:f9:21:0a:e3:50:90:db:
74:98:17:2b:5b:e9:c2:ea:f5:c5:1e:9b:33:4d:7b:e7:8c:c3:
ee:34:1a:4e:80:bf:8c:b4:ad:29:06:92:00:9b:3d:b9:50:88:
a9:5a:a2:c3:c0:a4:45:44:aa:2b:ed:2e:60:d1:84:af:2a:9d:
01:f0:5a:fb:7a:af:49:0c:c2:55:d1:88:0d:28:06:0b:f7:08:
d7:4e:59:81:f2:d6:3b:fe:70:cd:f3:15:da:30:bc:ca:b9:ed:
c7:fa:fa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:46 2026 by rpki-client