Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
File: J49i86X4RyKFL8cPBSzxPeojdNA.mft (raw, json)
Hash identifier: hKi77vsrz65ElUyI7W9lz+8bJ7GKBEvcfkR4TBO0a5M=
Subject key identifier: 49:4F:49:D5:B1:D9:B7:FD:6E:C5:D2:19:AE:E7:73:FE:A7:4E:11:B7
Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
Certificate issuer: /CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Certificate serial: 019D9A3E51822C97BB344D6AFE0DA0B1F315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
Manifest number: 0BA2
Signing time: Fri 17 Apr 2026 07:01:08 +0000
Manifest this update: Fri 17 Apr 2026 07:01:08 +0000
Manifest next update: Sat 18 Apr 2026 07:01:08 +0000
Files and hashes: 1: J49i86X4RyKFL8cPBSzxPeojdNA.crl (hash: MU2HIVAU1YqHsw3hB8wLg+zHlcTxYdOENoVps30oMi4=)
2: tjHQL9126jSlMadUbx0UtwRmVpI.roa (hash: KKrhOiqiGWD/PXAF5L7Zxc0Yltf6jS4noyHNe6KHHoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:51:82:2c:97:bb:34:4d:6a:fe:0d:a0:b1:f3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Validity
Not Before: Apr 17 07:01:08 2026 GMT
Not After : Apr 18 07:01:08 2026 GMT
Subject: CN=494f49d5b1d9b7fd6ec5d219aee773fea74e11b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:9b:7d:ec:ec:a1:4a:e9:92:d5:e4:9c:19:
73:98:0c:e2:ca:27:3c:c8:47:c3:95:74:03:4c:a9:
0e:f5:3a:50:2e:35:5d:6d:f5:4f:95:5b:ff:e4:0c:
be:09:56:20:5e:e0:01:97:af:13:dd:68:b6:44:39:
5d:60:72:bf:3b:69:35:01:76:d2:fa:08:4d:f6:c2:
68:77:b3:e1:33:6e:eb:a8:74:ce:12:b8:cb:0d:92:
f8:38:1c:62:d4:d4:94:c7:31:a0:b0:00:92:29:77:
f2:d5:7e:26:d4:45:3c:df:ac:78:37:4a:eb:df:81:
a7:e4:49:24:06:90:8a:09:29:c3:10:d6:24:0e:d4:
ed:74:0c:7f:98:20:50:7a:4e:ce:9c:e3:05:56:2d:
5c:21:8c:e2:c9:9d:e2:c1:ca:30:29:44:13:67:24:
1e:23:a5:69:04:95:83:47:ea:5d:62:c6:7c:a8:c5:
0a:aa:32:a2:5f:86:f8:07:c2:57:8d:09:04:40:8e:
f4:f8:7a:a6:52:52:af:2a:34:81:b8:28:26:7a:a3:
b8:37:e2:18:40:9e:b1:4f:c8:0d:6d:6a:2b:38:37:
c4:54:5a:43:40:be:45:9e:49:7f:e2:f7:a2:7e:81:
04:1b:7e:f3:0a:8e:a9:f6:11:ea:86:72:db:3e:e4:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4F:49:D5:B1:D9:B7:FD:6E:C5:D2:19:AE:E7:73:FE:A7:4E:11:B7
X509v3 Authority Key Identifier:
keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d2:bc:2f:d9:c7:74:5f:9c:d6:70:c5:d7:1c:1c:9c:9d:ea:
bc:dc:20:e1:a9:f9:cc:fd:12:71:1f:c0:b4:34:17:9f:e0:ee:
7a:82:5b:56:a7:bb:2d:a8:84:13:c7:be:ec:b0:ea:ea:c0:97:
ac:64:57:29:cb:95:62:cb:b8:ab:30:d7:49:64:f8:7a:91:a9:
e4:8c:f5:b6:fc:09:e7:a8:f7:5f:39:b0:bd:89:56:25:5c:99:
32:43:d1:f2:4c:61:08:13:32:e8:55:66:f6:cd:51:9e:31:d7:
29:70:8c:0e:20:32:17:75:3a:43:d0:4c:f4:e7:bb:65:2c:c5:
a8:c6:03:5f:c3:2e:25:42:66:60:f4:69:39:cf:b7:72:9b:b7:
bf:3e:6e:1d:a0:20:4d:50:39:d4:08:5c:08:10:aa:93:6f:84:
bb:f7:f0:9d:a8:7c:af:47:c4:3e:d0:3f:6a:21:73:2e:8f:2b:
3b:b1:5f:79:a9:ee:2f:71:54:d9:9b:e4:e0:6e:44:02:39:eb:
01:86:b5:a8:e3:53:1e:35:4c:d7:fb:7e:db:26:9b:32:0b:85:
5a:d3:32:40:b5:eb:52:86:bb:61:f8:99:e8:35:74:74:7c:8e:
60:29:b3:cf:fe:b8:ba:e1:51:d5:77:f5:9f:50:71:de:38:0d:
53:57:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:39 2026 by rpki-client