
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
File: w49sR0pKRBSpySd75Naqrivt6ks.mft (raw, json)
Hash identifier: YMeTEdoocb6hlE3r6EcPtOzwzFHZ1SGphAoVdvcmLNU=
Subject key identifier: D4:1C:49:FF:D3:B3:8F:D4:D6:8F:F3:F6:28:AF:43:4B:8D:39:5F:3B
Authority key identifier: C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
Certificate issuer: /CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Certificate serial: 019F6502D8FF2B7974824EF39D6A9B755866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
Manifest number: 03BD
Signing time: Wed 15 Jul 2026 09:01:53 +0000
Manifest this update: Wed 15 Jul 2026 09:01:53 +0000
Manifest next update: Thu 16 Jul 2026 09:01:53 +0000
Files and hashes: 1: w49sR0pKRBSpySd75Naqrivt6ks.crl (hash: NofK+eODXjYJDkWAvHoDbePOHaj1bYdI89IdCyIkmg8=)
2: yMW3TW9152cW1DYeZYxdZkr-K6A.roa (hash: n3BeZybOUYQWTsEJMiZ9th8Uj9vvq5MfmSdVF/ZPKPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:02:d8:ff:2b:79:74:82:4e:f3:9d:6a:9b:75:58:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Validity
Not Before: Jul 15 09:01:53 2026 GMT
Not After : Jul 16 09:01:53 2026 GMT
Subject: CN=d41c49ffd3b38fd4d68ff3f628af434b8d395f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:21:b1:62:08:cc:ba:9f:5a:cb:d9:21:07:ec:
06:70:45:18:0b:6b:0c:7f:1e:0e:4b:e6:e1:c5:78:
db:cf:37:a2:26:a8:36:a7:84:cc:53:8f:31:d5:0d:
a2:9a:a1:f5:89:07:31:13:33:1d:a3:65:68:a4:99:
07:0f:1e:f2:7a:bf:58:b5:50:45:96:ed:49:4d:71:
f0:4c:e2:f9:3a:f8:ee:96:44:9b:5a:df:33:a8:26:
dc:94:99:13:dd:67:a3:0e:d4:b8:10:b9:7e:85:be:
b0:70:f9:66:1e:3e:12:88:2d:d5:72:a8:b6:34:14:
78:ea:00:a8:ea:5a:23:45:69:2c:ea:e3:cb:16:35:
ea:05:b4:59:64:6d:7c:f5:de:0b:f3:52:57:0e:f0:
06:a2:84:31:13:b4:c4:b2:14:19:0a:b7:36:45:aa:
c4:86:78:a6:36:21:0c:c5:61:f5:76:3a:d1:06:73:
3a:1e:5c:ac:71:2c:40:76:8f:bf:0d:8e:c2:a6:70:
bb:d0:1d:a3:a3:05:53:3b:88:cb:fd:e6:35:b9:5d:
58:b0:86:9e:80:7f:73:8a:5a:41:62:84:75:4e:63:
54:86:6c:63:1e:6b:cc:a3:be:6e:9c:43:81:28:fd:
01:59:b9:2c:f9:f3:7a:07:26:56:fa:3a:f7:0f:fc:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1C:49:FF:D3:B3:8F:D4:D6:8F:F3:F6:28:AF:43:4B:8D:39:5F:3B
X509v3 Authority Key Identifier:
keyid:C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:1c:9c:fc:55:06:c9:09:76:f7:4d:55:8b:cd:88:92:d5:bc:
42:df:8e:0a:92:f4:cc:d1:7d:fd:bf:a8:77:27:f6:95:9f:91:
5e:4d:0d:1a:54:41:92:b7:df:e3:fb:51:b7:7d:12:2e:54:16:
e5:38:67:f1:2f:b7:da:6c:d0:4f:1d:ce:9d:c2:7f:ba:16:8f:
f3:2a:2f:d8:68:6b:9d:a7:43:b6:b7:3d:a4:3e:04:fd:df:0c:
e9:e7:cb:19:d9:fb:72:23:40:79:cf:83:9f:9f:d5:1f:ee:aa:
bd:a2:7c:0b:9b:94:fd:8a:09:a6:46:3d:7e:a3:0f:62:c5:a5:
2a:9f:ab:22:09:d9:93:3b:50:23:f9:40:b4:4c:e4:f4:92:28:
07:71:e2:29:2b:44:0e:21:5a:76:80:85:f0:2f:91:bc:75:b8:
9a:c9:ab:fb:0f:a8:b6:16:4f:f5:b6:17:ee:79:bc:83:56:62:
ac:43:e4:c2:2b:f2:ef:c5:71:c9:9d:bc:89:e8:54:d2:e2:87:
e2:14:57:3d:47:1f:dc:d6:e9:24:a6:7b:9c:26:d9:c0:4e:ea:
ef:41:a2:b4:74:e1:44:6e:3f:75:3d:d0:0f:07:f6:65:00:5a:
6b:7b:ae:f5:3c:c2:65:d8:3f:8f:49:06:1a:70:a4:05:c5:c7:
d8:0f:51:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 14:32:22 2026 by rpki-client