Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: n8q2kz9YWUe+nM8pHklFxnAuIU2X/3No/7n79wOW/DU=
Subject key identifier: BF:3A:E9:2C:C6:8A:34:99:A4:55:38:A5:EE:3C:5A:F0:D7:AE:DE:75
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 01A0C21F115B3011B827F31312B4B5479A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 1337
Signing time: Mon 21 Sep 2026 04:00:10 +0000
Manifest this update: Mon 21 Sep 2026 04:00:10 +0000
Manifest next update: Tue 22 Sep 2026 04:00:10 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: Hm8ilsfkjbPjv1QzcyHaTHXy/5cCF36SvKvbj2UzwhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:11:5b:30:11:b8:27:f3:13:12:b4:b5:47:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Sep 21 04:00:10 2026 GMT
Not After : Sep 22 04:00:10 2026 GMT
Subject: CN=bf3ae92cc68a3499a45538a5ee3c5af0d7aede75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:78:61:a0:ed:93:bf:d1:c0:82:89:9e:f6:
bc:00:f1:0f:c3:a9:e1:4f:25:99:13:ac:e3:07:85:
38:a3:dd:d8:35:b6:cb:6d:7b:9a:14:9e:de:5e:1b:
44:52:3c:35:cf:f7:f2:da:6f:44:39:a1:26:60:14:
df:df:a5:b2:fa:2f:8b:72:08:45:1d:63:56:da:51:
57:3a:20:a8:9e:bc:e2:d2:56:ae:fa:6f:fd:75:4b:
ed:13:82:fd:a3:5d:90:3c:34:54:84:9f:66:99:79:
2c:1b:37:df:b4:1c:28:5f:b7:df:98:7c:29:01:4d:
49:bd:60:94:a8:60:bb:07:13:b8:a9:1a:c5:77:97:
a0:16:17:22:21:c4:2f:c3:1b:9f:62:c9:cc:6e:bd:
6e:14:95:83:e7:c1:42:17:f2:a1:4e:9a:99:ee:61:
02:a8:67:7c:53:19:b8:cb:ea:eb:43:01:61:76:3d:
86:37:b0:0d:dc:7a:35:6a:59:b5:ca:93:38:63:4d:
17:f6:e9:ff:e2:52:79:ef:cc:35:5f:26:52:5c:35:
55:91:cf:1a:da:dc:86:eb:43:09:26:8e:6f:f2:d4:
40:b0:df:7d:03:2b:b4:2d:49:93:d9:6b:7e:af:8e:
36:19:74:ef:5e:25:2d:50:68:de:24:3f:f4:c8:74:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3A:E9:2C:C6:8A:34:99:A4:55:38:A5:EE:3C:5A:F0:D7:AE:DE:75
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9b:39:4e:fe:b3:39:54:6f:3c:26:0f:86:d1:1e:bc:58:c5:
36:ab:66:c4:23:f9:1f:21:da:20:bc:bd:58:87:0c:40:46:eb:
98:11:6a:4f:b8:ca:65:0c:b6:3b:91:b5:cd:93:2a:8c:67:f7:
17:f7:7e:07:19:3f:9c:eb:3e:58:11:2f:c2:71:28:d7:57:b9:
b1:70:c1:88:d0:bb:f7:a1:ee:ae:48:9e:92:56:42:a4:67:f4:
5b:26:51:1d:cc:fd:86:ea:9b:06:5d:6e:37:12:79:ef:d3:cd:
bd:c9:0f:8d:13:0d:31:06:d8:73:03:4a:8c:14:e8:97:be:80:
a4:77:fb:b5:f0:4f:8f:a3:31:fb:16:91:06:7e:47:08:08:1e:
7b:b7:5d:e0:e4:b8:f5:ed:80:80:c5:fc:8e:7a:b5:79:18:6f:
99:ef:34:f3:6f:1d:50:e2:c9:e3:fe:6d:2a:e1:14:1d:88:8f:
ea:fb:4f:78:6e:c0:9f:78:fe:1d:0c:8a:e6:b1:29:77:d0:14:
55:7f:db:0a:4e:f8:f9:62:cd:ce:1e:98:af:61:f6:c7:41:43:
ff:a7:84:a2:d5:d8:6b:67:25:ad:5d:be:ad:79:00:12:bd:71:
e6:d0:45:40:ac:fc:7a:1a:c7:b1:a3:ac:25:b2:18:90:67:af:
ca:4b:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:19:00 2026 by rpki-client