Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
File: 49CoS6s970HWqqkCjeekddMtEr0.mft (raw, json)
Hash identifier: Nnp7CYXjp2PKnB7PqWa7by3t/cYzKQD3rdAwhNVD/lA=
Subject key identifier: 2D:C9:AD:91:19:B8:20:3B:44:8A:8F:25:3E:B6:CD:CA:14:41:22:F3
Authority key identifier: E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
Certificate issuer: /CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Certificate serial: 019DB1340AF674095C84EF2861A81DC2D759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
Manifest number: 0A90
Signing time: Tue 21 Apr 2026 18:01:10 +0000
Manifest this update: Tue 21 Apr 2026 18:01:10 +0000
Manifest next update: Wed 22 Apr 2026 18:01:10 +0000
Files and hashes: 1: 49CoS6s970HWqqkCjeekddMtEr0.crl (hash: fOkRbeYOebHkSO6Ko/8erQUVhLKbmoifplVFB/Px08U=)
2: B0MLkq51N2DB1BgdY1eQ56es0fs.roa (hash: V/PvhApArnjFZZY5kt89Eh8Mg1SnorBBms+yQHl9/1Y=)
3: U38H1DqbOLfyhC9vUlS7CE-eqkY.roa (hash: hih9v2/80+GAK3ew382sMvVyZE3RudyzOvC7wWTs/S4=)
4: zNJS94Qg6zJgG0ukhEJxGF_OMC0.roa (hash: aV6TdV9v9sN+i6/OTAbHJF/itl6jRzuUd0kDdhEhu30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:34:0a:f6:74:09:5c:84:ef:28:61:a8:1d:c2:d7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Validity
Not Before: Apr 21 18:01:10 2026 GMT
Not After : Apr 22 18:01:10 2026 GMT
Subject: CN=2dc9ad9119b8203b448a8f253eb6cdca144122f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:c7:d2:a9:ce:13:3d:5a:d2:af:ae:5d:68:
72:fe:ef:b9:61:8c:49:dc:17:80:a4:f7:6d:9e:98:
7e:07:da:77:db:3e:0a:7c:6d:4a:46:df:98:8d:d6:
a0:86:f2:20:07:34:94:80:13:7e:26:24:52:08:ed:
22:19:ad:03:66:11:f6:ec:77:e4:c6:2d:2f:95:dd:
2e:27:61:44:8a:ec:65:88:a0:9c:56:46:d4:11:63:
cc:ac:ec:f5:77:54:9e:76:e3:89:33:da:2f:ee:a0:
c7:ab:ce:26:39:be:ea:65:ac:c6:1f:47:b2:f5:80:
7a:d6:80:9c:96:5d:14:93:6c:93:1b:2c:bb:50:1e:
09:c5:01:77:0e:60:6e:6c:90:27:46:81:50:c3:5c:
2b:85:63:3f:d2:fa:4b:d8:b8:0b:35:2e:09:8d:0d:
63:70:f5:73:a7:74:64:c9:ce:dc:57:3f:b5:bb:30:
f3:25:b9:e9:f8:9a:9b:c0:89:b6:b1:25:20:d1:e6:
6c:55:92:7b:db:7b:03:80:bc:9f:a3:90:27:99:d2:
72:41:5a:df:9b:4f:9c:b8:ed:8d:08:f1:1f:5b:ca:
8f:8a:fb:77:95:41:6e:f8:5b:13:13:dd:ba:ab:ba:
5e:32:2b:66:e5:6d:00:e2:91:6a:79:00:1c:89:b6:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C9:AD:91:19:B8:20:3B:44:8A:8F:25:3E:B6:CD:CA:14:41:22:F3
X509v3 Authority Key Identifier:
keyid:E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:33:a3:23:ec:9f:43:92:9d:97:55:a2:fe:e2:1e:d2:ae:fd:
11:b0:2c:b9:d2:95:79:36:63:dc:c3:38:5c:ab:38:95:4e:c7:
22:e8:98:a6:24:b7:56:92:be:d9:32:0b:5d:9a:58:19:a3:ce:
f1:80:ab:1e:e5:2e:df:c9:da:21:2f:f8:b0:40:41:67:7f:42:
ba:4f:07:6c:46:7c:76:ca:78:23:7d:31:e4:50:1e:44:a8:55:
81:0b:29:be:19:34:04:4d:55:f1:2b:11:72:05:4b:93:5c:58:
e7:48:8d:f5:09:6a:e9:82:5e:e7:84:b3:af:54:5c:17:f9:8c:
e4:65:af:c4:9d:51:66:61:8d:e9:b5:51:05:ec:9e:15:6d:9c:
e5:8e:a9:6f:c6:95:1e:8c:3b:01:31:4a:47:e1:4e:e5:73:ab:
8e:3b:e0:35:63:07:e1:75:bf:94:b5:55:fa:11:31:f4:a7:78:
fb:87:69:55:5c:e8:3b:34:05:ec:8c:63:eb:c5:35:66:00:ef:
a0:33:02:92:99:61:d2:75:dc:fe:d2:4a:77:7c:f7:d3:c9:10:
25:e7:c9:d6:99:62:de:7c:ef:76:e1:78:ce:b7:e1:5d:a5:cf:
fc:68:42:94:c6:9e:b9:76:b8:bd:f6:8a:98:bd:62:83:03:52:
5d:8b:36:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:08:23 2026 by rpki-client