Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: o/rMB/YLW9vZNPEnARIbidJQoialMq92CTDJS6wyMiQ=
Subject key identifier: 43:97:97:83:31:EB:17:D9:4B:6D:BB:0B:9F:3D:76:8F:0F:AD:C6:12
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 01A1C4E8594F739FFDB88A5C90ECFE9DC961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 13BD
Signing time: Tue 10 Nov 2026 10:02:03 +0000
Manifest this update: Tue 10 Nov 2026 10:02:03 +0000
Manifest next update: Wed 11 Nov 2026 10:02:03 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: 9ykAJXcPFLY/EYnRF/II4vPtJYg8IPSHwLUnu87/PJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:e8:59:4f:73:9f:fd:b8:8a:5c:90:ec:fe:9d:c9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Nov 10 10:02:03 2026 GMT
Not After : Nov 11 10:02:03 2026 GMT
Subject: CN=4397978331eb17d94b6dbb0b9f3d768f0fadc612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:d5:91:fe:b7:f3:33:87:39:51:99:28:d7:
e5:c6:b3:79:02:06:5f:65:f1:48:f5:92:65:cc:d8:
e8:0b:05:c3:3b:ba:6e:a4:99:d4:34:0c:4e:97:c3:
17:e3:36:24:e3:68:13:8f:58:50:f0:06:66:80:2c:
93:08:84:82:ac:01:8b:23:b8:86:48:6d:36:66:0d:
ce:96:88:66:67:33:5a:f1:05:18:d9:3b:55:90:a9:
5f:07:98:30:50:13:12:7d:91:c1:e0:0d:64:c5:3d:
40:84:c8:5d:fd:84:ce:ab:c6:3f:7e:04:3e:f8:6f:
05:34:20:b9:43:f3:95:87:86:49:bf:f9:42:68:63:
81:85:38:af:7b:fe:14:4b:67:89:68:96:19:83:bf:
9a:10:32:46:0a:4d:e3:b0:bf:b1:d9:6e:9a:f9:ce:
ab:6b:40:0d:46:c9:44:01:ff:5a:f4:1b:e1:6a:b6:
a9:f7:58:85:6d:75:d7:3d:cc:a8:1c:73:4a:e5:e3:
f3:4a:dd:96:9b:92:f5:a0:a5:e6:33:16:41:66:d5:
6c:4b:23:b1:af:50:ee:f4:51:a9:6e:5b:60:86:a6:
d3:e2:4a:de:68:7c:2f:40:a0:88:d8:34:ed:db:08:
d6:60:98:98:cd:57:4a:f7:46:51:ff:c8:94:e4:fa:
c7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:97:97:83:31:EB:17:D9:4B:6D:BB:0B:9F:3D:76:8F:0F:AD:C6:12
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e9:d1:b5:51:b3:19:ee:fc:1a:bc:42:5e:6f:d2:87:f5:cb:
1a:75:d4:e4:e0:50:ad:46:11:3d:a4:af:66:b4:d3:fe:4b:61:
58:88:c7:7b:cb:8d:df:37:a9:5c:dd:e4:2d:35:c3:73:1b:c3:
3f:a9:b0:91:d5:d9:c9:8e:4c:16:94:48:98:b9:1a:76:3d:02:
97:74:60:99:d9:d9:e3:5a:8a:4d:dd:72:5f:3f:8a:1a:07:80:
a8:b2:51:27:be:e0:40:9f:59:d4:b2:3d:c6:f4:e6:ba:78:dc:
80:f8:dd:46:64:f4:c8:bf:be:27:43:2b:15:49:f5:4c:29:29:
e7:16:57:e4:67:fc:91:67:f9:59:67:0e:e5:1c:89:af:c7:cf:
5d:2a:49:24:1c:ea:33:63:3c:e8:cb:3e:26:45:8e:2b:a6:b6:
3a:02:9c:17:4a:88:cb:f5:f8:e9:e6:b3:84:58:be:aa:21:ac:
ac:38:a3:1c:8c:01:1a:ca:76:9d:be:34:10:c7:69:c1:39:d4:
11:0b:33:a9:ec:27:8a:d2:fb:ad:66:67:1c:05:04:7c:e0:d6:
e3:07:cc:4a:f9:03:35:36:90:17:e1:c9:93:c1:c5:30:d9:65:
29:36:a5:e2:13:79:7f:60:2a:e7:f7:77:c9:cc:6f:be:7d:4a:
c4:61:06:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:46:33 2026 by rpki-client