Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier: xC6/zpocz5CRqtc/NQ6ItLrEhPWiy8ToCLpRtStGMAM=
Subject key identifier: E8:A5:E8:CC:87:04:93:56:95:3C:C7:55:7D:D6:53:B2:9E:15:41:6C
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 019D3977FB42A4C00C3A9A1867221BBBAFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number: 0D16
Signing time: Sun 29 Mar 2026 12:00:57 +0000
Manifest this update: Sun 29 Mar 2026 12:00:57 +0000
Manifest next update: Mon 30 Mar 2026 12:00:57 +0000
Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: JzQFjis8WMm4AoX9+VGXz9UT6n9/a1IzobiCpLff4Lc=)
2: hD5yM-bTRcXqw7hsAje6CKQSULU.roa (hash: BoKM+q4JQCN0QltCSwaO5romaCSLzyBz/YnHCsh+0Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:fb:42:a4:c0:0c:3a:9a:18:67:22:1b:bb:af:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Mar 29 12:00:57 2026 GMT
Not After : Mar 30 12:00:57 2026 GMT
Subject: CN=e8a5e8cc87049356953cc7557dd653b29e15416c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:39:c5:8a:7f:dc:d0:7e:4d:c9:9f:bb:96:
a8:15:a1:c8:9d:00:fc:42:03:5b:06:5b:87:6e:c0:
a0:0f:2d:6f:a1:c3:b1:bf:96:67:fe:49:ec:e7:ec:
53:e0:90:b9:de:a6:0c:52:b3:32:b4:77:2d:2a:df:
e6:36:68:8e:1a:65:c7:e7:22:78:4e:36:70:cc:a7:
f1:38:ed:b8:85:70:a2:3b:73:73:ee:2d:f5:ef:56:
6c:a0:5a:a7:ce:cb:72:77:1e:3c:fa:31:a4:81:80:
5c:b6:ea:21:0f:7a:08:cb:c3:ff:8b:11:e2:2c:46:
40:48:38:95:ba:56:f6:16:ae:11:e5:9f:c7:39:ec:
e7:a6:1e:b2:09:f8:97:e0:55:eb:fa:4d:cc:1b:05:
e4:8d:cd:67:fe:d2:e9:b7:8f:be:6a:c9:06:0f:ee:
53:62:d2:e9:3c:08:13:aa:06:b3:ed:21:40:d7:66:
e7:c5:0d:1a:9f:3f:f8:55:dc:05:2f:87:01:13:8b:
c2:32:ea:37:ab:1f:35:18:29:b6:a8:eb:10:02:60:
c7:f5:00:06:9c:32:70:e2:51:38:30:49:33:62:da:
14:9c:99:10:58:3c:85:9a:d2:60:e1:48:94:1a:ab:
88:ae:8e:6b:64:14:ae:b2:0b:67:c9:b0:22:c6:ff:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A5:E8:CC:87:04:93:56:95:3C:C7:55:7D:D6:53:B2:9E:15:41:6C
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:65:92:20:92:50:6f:82:11:6e:b5:76:20:28:f5:ea:af:af:
ae:74:3a:36:42:57:b6:53:3e:37:eb:99:60:41:a8:89:b1:42:
6a:ae:04:6f:fc:8c:0f:51:fd:da:11:2f:1e:e2:2b:70:f1:a7:
cb:d0:67:4c:64:cc:1e:a2:91:0e:0f:c9:98:58:ca:8b:4e:6b:
3b:78:db:89:05:eb:d3:8e:30:46:c0:71:49:06:b0:2b:37:b5:
8f:1d:7c:2c:1e:68:78:7c:b2:b5:fa:6f:60:e8:5d:95:ba:c7:
8e:83:4f:00:ae:91:23:fe:0b:2a:5b:22:e7:4c:64:e9:23:ea:
4d:18:2a:04:f7:d9:36:81:d8:20:7e:00:07:8c:ab:09:c5:85:
01:fa:45:28:80:c6:d3:1c:36:9f:81:9f:62:05:10:f5:83:5c:
27:18:78:57:19:b6:eb:a6:d9:75:bc:0f:0f:b1:68:4a:4e:f4:
9e:5f:e7:b8:81:21:f1:c0:d2:42:b0:87:b3:38:88:ba:b5:dc:
87:71:f1:d4:1c:b6:2d:a9:f2:31:39:b7:7c:26:1e:59:ce:76:
44:0c:17:68:c1:a7:60:ed:18:25:ae:18:7e:a6:93:9c:0a:e1:
34:22:2c:65:52:7a:9d:78:4c:1a:c8:30:c4:5f:e4:11:25:c3:
a3:a9:1b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:10:13 2026 by rpki-client