Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: b3RwQnnpKUf0qqSSm3d9gZlT/r6jnl+SirUBks0HGU4=
Subject key identifier: D5:B2:45:C8:73:D4:5A:7C:F7:7F:87:2B:03:01:7F:98:19:5F:68:6C
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 019CAD595492A61C31C2BF9A075786537BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 111A
Signing time: Mon 02 Mar 2026 07:00:38 +0000
Manifest this update: Mon 02 Mar 2026 07:00:38 +0000
Manifest next update: Tue 03 Mar 2026 07:00:38 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: L5dK8tpCdOsU6jQ8ahF0yvUggrn1RwxzNmVZP/T0H4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:54:92:a6:1c:31:c2:bf:9a:07:57:86:53:7b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Mar 2 07:00:38 2026 GMT
Not After : Mar 3 07:00:38 2026 GMT
Subject: CN=d5b245c873d45a7cf77f872b03017f98195f686c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:11:b3:52:24:e4:be:c8:f6:e8:18:2b:b8:
db:90:f8:ba:a8:63:a2:8d:fc:ef:50:dc:9a:f9:14:
fd:c6:65:9c:59:4a:89:b2:83:5d:03:1f:4b:a0:af:
a5:c6:f1:2c:22:12:dd:e0:b0:01:b8:a1:98:f4:26:
3f:43:d0:27:9c:f6:00:95:14:ab:f9:8a:7b:0f:88:
ea:f3:96:c4:60:74:77:b6:b9:08:57:7f:74:f2:a5:
a6:5d:b5:3a:cd:c0:09:0c:4b:25:7d:74:af:fd:c3:
69:e4:13:7b:1e:2f:00:f9:89:a8:20:d4:11:27:eb:
b2:d1:76:03:b1:6f:08:d3:ed:98:a9:45:0c:47:0d:
2a:f7:2f:69:3e:f3:3b:ee:7b:9e:1f:66:a0:ba:f7:
fe:3a:3e:01:a9:41:d2:28:34:89:d7:b8:72:ba:f7:
46:d7:84:7b:6d:81:d9:60:29:18:09:a7:be:55:2a:
68:5d:ec:51:cd:a6:20:3d:5d:40:a5:56:e4:4e:b4:
85:b3:12:d1:6f:5f:58:56:26:bf:7b:c2:47:66:89:
6b:6f:55:8c:86:41:8b:e5:45:f9:c1:86:ab:61:85:
a2:49:a8:3a:58:12:58:8e:e7:4e:50:d3:de:07:8a:
ce:3f:40:a6:f1:ed:c2:4b:ae:2f:c8:df:dd:0b:15:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:45:C8:73:D4:5A:7C:F7:7F:87:2B:03:01:7F:98:19:5F:68:6C
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:11:a9:a0:6f:11:8a:1e:e7:d9:43:dc:1f:fe:c4:f1:1c:0d:
eb:d0:d2:16:77:0f:6e:8b:0d:b0:7c:0d:db:b9:f6:d4:20:3d:
5c:9f:0c:87:ef:97:e2:fd:b2:d6:0b:80:10:2e:26:16:38:2b:
fe:9b:1a:f7:22:e9:ef:98:4a:c9:da:41:48:53:ff:8e:3b:c4:
ec:63:45:9f:d5:0e:f1:2a:6a:16:94:ff:19:4b:bd:fa:cc:86:
3a:d9:0d:84:4e:d4:e0:62:c2:26:8c:69:9d:d6:db:0b:80:42:
78:82:05:7c:79:1f:53:a9:27:a6:c0:ce:27:18:2f:28:51:a8:
eb:90:36:b9:e2:c6:8e:8a:9a:4e:92:54:2b:92:06:f5:be:9e:
2f:77:bc:f1:05:02:1a:0b:17:5f:af:54:ce:8e:66:7d:fa:83:
7a:d7:c8:d5:1f:c8:2a:57:7c:a4:48:90:f3:2a:f6:5b:f1:6e:
07:24:6f:91:f8:56:8c:83:59:e3:75:96:47:a3:03:87:bc:a7:
65:42:3b:13:42:03:a0:6f:b7:48:91:82:0a:7b:ab:7f:c1:67:
50:d9:66:9a:0a:e2:1b:90:9c:fa:7c:30:e7:72:63:0b:96:88:
1e:f6:fe:c7:71:fb:f2:f9:cb:14:5a:67:5c:18:58:ff:aa:2f:
27:f5:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:14 2026 by rpki-client