Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: 7whjoQag6l4y54LsktZUh6XMhG2PTPgG4YDUtB2szMU=
Subject key identifier: A8:1A:9D:CF:9E:17:82:94:A4:A4:93:D0:F9:FF:F1:4E:8B:98:51:BE
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 019FAA1A0BD40F143C198BF1DC35354BCDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 12A6
Signing time: Tue 28 Jul 2026 19:01:01 +0000
Manifest this update: Tue 28 Jul 2026 19:01:01 +0000
Manifest next update: Wed 29 Jul 2026 19:01:01 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: nzIRlJGCrpND7ZtJDlZtlw3LD52rN0thFsh23hTJauo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:0b:d4:0f:14:3c:19:8b:f1:dc:35:35:4b:cd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Jul 28 19:01:01 2026 GMT
Not After : Jul 29 19:01:01 2026 GMT
Subject: CN=a81a9dcf9e178294a4a493d0f9fff14e8b9851be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:90:57:21:14:0a:3e:bc:b3:c2:41:ab:b2:
34:d6:6a:0b:b1:8f:61:b2:17:ab:98:2c:8b:e8:4c:
65:8b:04:50:f6:86:f8:2b:d9:4a:76:ff:6d:f7:e8:
45:ee:93:87:c4:dd:87:6a:8f:47:62:4a:26:b3:70:
e0:5b:49:ec:04:ca:f9:45:61:35:8a:20:15:4c:da:
eb:a1:f4:c0:39:29:45:77:04:ce:51:83:77:a4:3a:
78:6b:59:07:a2:7a:8a:ff:f9:d4:2f:14:55:e1:ed:
55:35:a7:e7:e0:96:04:d4:48:5d:f2:57:a6:27:70:
7a:d9:72:da:52:0a:af:e4:88:bc:64:53:55:2d:6d:
11:45:3e:b9:2c:0d:aa:ff:6c:3d:a2:8e:61:52:c9:
af:58:10:39:22:b7:a5:e5:d6:7f:31:6f:23:63:47:
bc:a1:e1:b7:22:b0:d6:bc:11:a3:1e:4b:ed:39:ef:
ee:9f:57:11:8a:42:65:15:0b:0b:da:f7:39:16:c2:
7f:e3:ae:64:d1:1f:3a:80:66:45:4f:11:18:50:e4:
51:85:dd:69:43:41:6f:16:da:84:0c:a1:3d:eb:f4:
35:30:8d:77:e4:67:d6:b8:7b:29:ec:23:7b:f0:86:
71:23:5f:83:ee:b7:7d:3a:66:3b:ad:c8:3b:34:df:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1A:9D:CF:9E:17:82:94:A4:A4:93:D0:F9:FF:F1:4E:8B:98:51:BE
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:09:61:30:95:9c:b1:15:7c:51:25:c2:c4:e4:58:74:a8:ab:
50:23:4d:88:f9:d0:47:d5:ec:b8:47:49:a5:a9:f4:f2:8e:f5:
55:42:cf:3a:2a:7d:67:8d:6e:4a:79:b3:23:0c:a1:58:cb:7d:
88:f5:5b:20:72:40:96:30:2b:02:c4:92:e8:48:5c:db:26:a0:
f8:ae:e4:96:0c:20:72:7c:3d:3a:0d:d5:08:03:b8:5a:b4:21:
55:0c:eb:8d:59:13:49:fc:ca:e5:b0:ce:bb:55:45:e1:0c:d2:
cf:b1:ed:4b:a2:18:f5:74:27:65:62:66:24:d8:ae:c9:b0:ff:
dc:e5:f0:3c:40:ae:59:9a:e2:2a:69:48:cd:f2:fe:7b:3b:eb:
80:15:01:be:03:6b:5e:b8:fb:79:ba:10:69:65:64:2f:7c:ab:
ca:de:cf:02:09:c7:7d:eb:34:46:a6:41:68:f2:61:08:1b:9f:
21:81:e5:e9:60:7f:ae:44:7d:12:af:ec:57:09:41:08:1e:fa:
c4:e3:14:ed:09:31:96:b9:50:dd:bd:74:85:97:83:80:e0:2f:
b3:e1:b3:73:73:e4:fc:eb:db:fd:5f:d0:98:a1:c4:87:64:fe:
fc:6e:68:18:de:4f:d9:58:82:17:e1:1e:a2:c5:bf:c0:69:9c:
b2:ad:8f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:34:47 2026 by rpki-client