Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.mft
File: 49sxEepZks_aZC-48pyGNUpjrG0.mft (raw, json)
Hash identifier: 5o+KYamyAruaMGoB85/jCWxUmEdVpMeQVM1TWXH9C6g=
Subject key identifier: EB:33:24:DB:9B:DA:28:E3:9D:1F:2E:41:6C:7C:6D:CF:BA:BD:DC:47
Authority key identifier: E3:DB:31:11:EA:59:92:CF:DA:64:2F:B8:F2:9C:86:35:4A:63:AC:6D
Certificate issuer: /CN=e3db3111ea5992cfda642fb8f29c86354a63ac6d
Certificate serial: 019D37531B890127229BEDFCD66168D81338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49sxEepZks_aZC-48pyGNUpjrG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.mft
Manifest number: 53
Signing time: Sun 29 Mar 2026 02:01:26 +0000
Manifest this update: Sun 29 Mar 2026 02:01:26 +0000
Manifest next update: Mon 30 Mar 2026 02:01:26 +0000
Files and hashes: 1: 49sxEepZks_aZC-48pyGNUpjrG0.crl (hash: If5nXR2G744ncgzjonIoEFxkrIxygeI75PdDfLJA+nA=)
2: wtj2zhrszj8EZPv9_c-kD8-d_kw.roa (hash: r5hHxvar05WsnD97m7vdBSbjiHPcNLIO8hNC+KUpW8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/49sxEepZks_aZC-48pyGNUpjrG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:1b:89:01:27:22:9b:ed:fc:d6:61:68:d8:13:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3db3111ea5992cfda642fb8f29c86354a63ac6d
Validity
Not Before: Mar 29 02:01:26 2026 GMT
Not After : Mar 30 02:01:26 2026 GMT
Subject: CN=eb3324db9bda28e39d1f2e416c7c6dcfbabddc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:40:0a:7c:87:b3:5b:73:f9:dd:e3:cf:66:
fd:52:fd:ac:ba:ba:70:9f:be:1d:55:f9:40:a7:c0:
86:c0:8a:3e:b8:dc:71:68:44:03:5c:05:94:77:ab:
17:1e:1d:10:49:54:0b:ab:72:34:f6:ff:08:00:0f:
b7:21:b7:d8:a5:50:55:8d:fa:69:c5:c7:72:77:6f:
35:ff:47:60:42:bd:71:2c:30:38:81:8e:97:60:93:
c0:5b:66:72:66:1f:30:2d:65:bd:1b:3e:08:79:a2:
b9:64:de:87:47:24:77:45:8e:82:93:34:2f:2d:b6:
3e:38:59:b3:b5:b0:78:8b:6e:51:d4:1a:65:95:6b:
61:8a:69:f8:54:5d:04:7f:7b:6e:cb:05:f0:8b:a3:
aa:3f:b3:d5:2d:f3:eb:48:af:66:e4:35:19:1e:60:
1b:0f:a2:25:fe:f6:08:0b:13:18:6d:1f:0a:82:96:
f4:ec:9d:c8:92:6e:16:55:5c:15:c5:d3:9c:34:35:
03:66:a5:da:34:f3:9f:7e:d1:0d:e9:9e:97:cb:fe:
65:75:52:63:63:d3:20:d6:0d:56:e9:fd:29:19:3d:
02:2e:18:d8:68:48:3e:94:10:5d:78:2d:87:d8:6c:
3c:d6:ab:07:48:21:94:22:33:8c:b1:f4:3d:ba:99:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:33:24:DB:9B:DA:28:E3:9D:1F:2E:41:6C:7C:6D:CF:BA:BD:DC:47
X509v3 Authority Key Identifier:
keyid:E3:DB:31:11:EA:59:92:CF:DA:64:2F:B8:F2:9C:86:35:4A:63:AC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49sxEepZks_aZC-48pyGNUpjrG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/59592f-d5bb-4a58-924d-54a5db5ee86c/1/49sxEepZks_aZC-48pyGNUpjrG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c6:f2:ba:65:8b:66:5a:b2:e1:24:7f:62:49:a6:27:2f:92:
f2:46:e9:e8:46:31:ef:1b:b6:18:ac:f3:ce:d9:95:92:97:03:
89:52:66:1b:64:14:75:2d:d8:7f:31:93:82:0a:32:e2:51:79:
bf:b5:d9:b6:6a:a1:5f:50:09:f3:86:4d:6e:8c:98:05:30:cb:
19:70:f3:2f:8c:6c:07:b8:9c:1e:4e:3d:79:69:7a:23:6d:38:
ab:cc:25:3f:f9:e7:7b:58:cd:c2:a9:36:75:46:4e:59:09:40:
79:9f:d5:b1:6c:80:69:8c:10:d7:f1:b5:42:7d:d6:c9:82:c1:
da:78:de:8d:6c:1e:10:fe:84:23:4d:ac:2a:e1:7f:0c:5b:91:
28:73:a6:a8:ef:97:71:b6:19:74:10:c6:f8:9f:a5:f9:24:63:
08:fa:3d:1f:5b:7c:07:14:63:56:c9:ae:1b:ec:01:9c:df:2e:
12:22:83:82:73:97:50:fc:38:b1:8b:65:46:cf:cb:73:08:96:
05:88:42:5d:7b:15:99:16:dd:95:e1:11:ab:72:61:69:b3:ba:
95:94:4b:c8:7b:94:65:ae:a6:8c:75:da:69:7b:7e:5f:54:17:
cc:3d:20:9d:d0:f8:b5:19:22:27:44:0e:1c:63:e4:04:b7:a1:
fd:2c:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:46 2026 by rpki-client