Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
File: 49HX1DNmpbAGPDdXExnfpDLRUxs.mft (raw, json)
Hash identifier: Vhd//N1BdQNSzrVLIjZV6Eg7EBlgrQC2xu3CsHss38w=
Subject key identifier: A9:26:9E:0A:3D:C5:8F:9A:AE:BE:3A:DE:CE:5E:41:A8:ED:6A:BB:81
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019DB158E73142BFBB74017814231D79E4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
Manifest number: 13
Signing time: Tue 21 Apr 2026 18:41:26 +0000
Manifest this update: Tue 21 Apr 2026 18:41:26 +0000
Manifest next update: Wed 22 Apr 2026 18:41:26 +0000
Files and hashes: 1: 3ctZQUozMKkDVo59fLMZssh8XaA.roa (hash: KSpBuKqiKqBujIhTOJYqoBunSyhHcexE+/SV+7vpRy4=)
2: 49HX1DNmpbAGPDdXExnfpDLRUxs.crl (hash: LcsoXQaqzqcDNcpv4iI5H1EssiOq7OnhjII71qM61OY=)
3: 6y6W7W8j_dSlc57S1luvac1zdrQ.roa (hash: rZpAH8qmJ3sCtaLAax/eniPTJwByfwh5ew5CuQY9/rw=)
4: EwuDBNwsbSMtyx0cZMtM0qPkPMA.roa (hash: UeXhJ2qTzLZJgTHgN9h/HZW4A+wpinm+DBVQ9mkXo+g=)
5: W2hpXQ1A0MT3GUjr32Sgc7VVf5A.roa (hash: YMsNwrZXXy+QRpYjbyRstuKmR56y1+W4eNOMUM8AcKo=)
6: rwlvB_VgdIL7xx3fg1zUzG7Lmvk.roa (hash: Dzsj11IT+d0KSr0YpBwndQ2B8rxfuaWJQea/BdKgCIM=)
7: smqVB5iS3-xOH6UZ-ZLNxj1FoPo.roa (hash: G6TiKgRiRPDB2QgBjo0dGN+Wg+jI7u9eXM++c3IF/Fk=)
8: wRoRQUULK3o7iJPVrE4WjRzz_jA.roa (hash: MJ7xYJKlBl8Xd0fVCX+ZUSxJBE1xvFkBBGg9gxd2itE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 18:41:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:58:e7:31:42:bf:bb:74:01:78:14:23:1d:79:e4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Apr 21 18:41:26 2026 GMT
Not After : Apr 22 18:41:26 2026 GMT
Subject: CN=a9269e0a3dc58f9aaebe3adece5e41a8ed6abb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f6:80:0d:c7:13:91:93:35:5f:2d:d5:88:61:
d8:89:39:d0:ef:3e:32:14:ad:0d:06:71:dd:5b:7a:
04:ee:8d:a4:eb:d8:c3:6d:b9:47:14:a0:3f:a4:d5:
dc:1e:f8:df:81:6d:87:b4:ea:b6:6d:8d:62:f8:26:
fc:e1:0a:4c:ff:55:53:46:d8:45:69:4a:95:00:aa:
34:1f:35:28:08:44:a4:bc:83:27:0d:8c:35:17:de:
a9:78:4d:3c:38:1a:f7:db:21:31:e6:bb:c1:98:03:
76:9e:8b:fa:8c:bc:1a:f3:38:ba:51:22:fa:0c:a3:
b5:a5:92:40:1d:3b:14:ad:70:27:92:5b:f2:94:1f:
01:7a:8b:1d:f6:a6:98:09:0c:6d:20:9f:53:bd:22:
cd:ea:1e:9b:e7:4a:26:8e:33:11:d2:19:33:cf:2a:
15:6b:67:c7:e0:56:97:6d:d0:52:36:5c:d3:58:fa:
b5:78:b5:24:00:81:8f:e3:7f:28:76:73:64:47:fa:
aa:58:cf:3e:dd:f9:c8:c9:ca:b7:d5:f8:09:3a:09:
55:4d:c1:65:57:a7:7c:bd:d4:63:02:50:ef:bb:2d:
ee:43:48:d8:a2:62:6a:ad:24:71:c1:9b:e9:16:40:
d1:ad:86:c8:bb:16:5c:85:53:cf:bb:bd:62:94:c3:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:26:9E:0A:3D:C5:8F:9A:AE:BE:3A:DE:CE:5E:41:A8:ED:6A:BB:81
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:db:6c:b9:bc:30:bb:70:4a:78:e9:3e:dc:40:38:dc:96:36:
de:d8:ba:27:72:15:b9:b5:8f:0b:75:1b:57:a0:e5:32:91:c0:
8b:15:bc:eb:eb:36:69:7c:b0:a4:fe:66:b4:ad:a4:de:71:23:
11:84:d1:2c:b1:6d:c3:f2:60:65:a9:32:7a:86:a9:fe:20:03:
c6:25:b0:ec:3d:48:40:50:d6:59:86:96:6f:87:8c:2a:2b:0b:
7d:eb:c0:26:28:92:af:54:ea:4d:d0:c1:86:9a:dd:52:b6:35:
46:ae:a1:0a:b4:89:b4:eb:6a:f0:96:37:f9:df:ae:85:70:6c:
a1:0a:fa:b3:f5:d4:bd:57:64:16:e9:39:0b:82:43:54:93:85:
a9:e1:2a:34:6f:67:df:8a:e2:ec:8b:a3:ef:61:44:de:cc:e4:
fa:78:7f:c5:da:fd:81:6e:65:79:35:03:95:d1:c6:5a:27:14:
72:7f:44:f9:a7:87:f8:6f:63:16:7a:6b:39:9d:83:89:96:28:
81:dc:a9:04:1d:5c:a1:10:18:c4:64:e9:aa:8b:0e:10:3b:ee:
24:35:f8:ca:0e:fa:67:1f:1e:e9:77:8c:5d:d3:76:74:18:f8:
9e:30:68:e0:78:95:49:01:7e:87:2f:5e:d4:63:b3:56:38:c1:
fc:35:ce:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:05:10 2026 by rpki-client