Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.mft
File: eKA49MxsIbhivseqXJMX4SWdfaw.mft (raw, json)
Hash identifier: F/LIyjUilZ006d1JcJGCmHlGaj6q5iDjNgBap29vZNo=
Subject key identifier: AC:34:6A:C6:48:1A:3E:01:46:6A:AC:04:69:2B:73:2D:8C:C1:0D:5C
Authority key identifier: 78:A0:38:F4:CC:6C:21:B8:62:BE:C7:AA:5C:93:17:E1:25:9D:7D:AC
Certificate issuer: /CN=78a038f4cc6c21b862bec7aa5c9317e1259d7dac
Certificate serial: 019FA2CDBC4A698B0AF59F8FC680BC9657DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:19 +0000
Manifest this update: Mon 27 Jul 2026 09:00:19 +0000
Manifest next update: Tue 28 Jul 2026 09:00:19 +0000
Files and hashes: 1: BAPEwvLWrCymKkuORRd20zN2KRM.roa (hash: xYjjd2fD6IT/QFAlJG+FXNFTXBwK7Qx9jdl5Cyhg+KE=)
2: F-XzCN7Z6yyf988iOvTKBqMAT9M.roa (hash: ph0B1ggQvIrHcHEAMTFHOb5go7oZA1k/Z917jRVSdfA=)
3: K-Pby2C1ey5Hmw1yKByzvBXih2U.roa (hash: ktjdbh6kCP3XgfCDqDMe5dm3+erjzCc+TQFlq963tyU=)
4: eKA49MxsIbhivseqXJMX4SWdfaw.crl (hash: 0zvyb3BeGdXmUnklnTakW3c4XQ7YZXKRe+LQgJasfR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:bc:4a:69:8b:0a:f5:9f:8f:c6:80:bc:96:57:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a038f4cc6c21b862bec7aa5c9317e1259d7dac
Validity
Not Before: Jul 27 09:00:19 2026 GMT
Not After : Jul 28 09:00:19 2026 GMT
Subject: CN=ac346ac6481a3e01466aac04692b732d8cc10d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:06:18:a3:e9:c9:2c:81:28:e5:38:2f:82:
66:d6:ec:de:45:3f:e3:46:23:4a:bc:c9:ab:81:db:
e4:b8:b2:e2:14:cb:5c:35:ea:6d:81:ef:b9:73:7a:
17:7a:05:12:06:6a:3f:70:53:b1:53:ac:e2:30:92:
25:b5:f4:e3:bf:aa:24:43:8b:85:f7:3c:aa:0a:48:
3b:27:78:2a:a6:57:b4:64:26:a3:58:61:0c:0f:c5:
70:b3:e0:d6:7d:97:4d:34:fd:48:9f:9e:53:d0:5e:
29:30:75:7a:34:3f:9b:fa:60:d8:91:7c:7f:78:7e:
7d:56:0f:a4:86:41:40:0e:44:9a:ac:03:8e:25:85:
ef:09:c3:4d:00:2f:76:e2:bf:13:44:d2:bc:96:ae:
ec:ab:5d:b2:c9:96:ff:75:8c:fb:9d:aa:10:b1:26:
36:ce:12:29:07:59:12:24:f1:8b:fc:64:dd:f0:10:
ea:b2:03:4f:81:51:63:e7:25:46:8f:e7:e1:7d:fc:
9e:ba:1f:f1:7d:0f:6d:40:2d:1b:9a:b9:2b:21:e3:
2b:6d:9d:66:ba:47:16:d4:2f:f5:f7:28:5a:72:52:
ad:6b:f2:15:d5:78:87:11:7a:fe:4d:bf:0a:8a:bf:
ec:89:4e:38:2d:32:39:c3:03:2f:4c:ff:45:b1:f6:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:34:6A:C6:48:1A:3E:01:46:6A:AC:04:69:2B:73:2D:8C:C1:0D:5C
X509v3 Authority Key Identifier:
keyid:78:A0:38:F4:CC:6C:21:B8:62:BE:C7:AA:5C:93:17:E1:25:9D:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b6:15:5c:8c:51:33:c1:0e:e0:b5:9e:af:70:18:bb:e8:22:
78:3f:d0:12:c6:a7:60:a1:66:e5:13:fb:fb:39:2a:57:8a:5b:
fc:50:7a:ff:c0:97:fe:a8:b4:66:94:ee:5c:84:9b:aa:e7:d7:
1f:29:b2:e1:63:70:f4:d7:d0:7f:18:d7:a4:69:84:f7:93:7b:
c7:ed:7f:de:ed:7b:aa:fc:67:2e:a9:3c:d6:a5:c7:79:0c:30:
cf:c6:cd:02:55:2d:a4:94:7e:78:ba:16:53:80:98:6e:83:e9:
c8:96:e0:13:c5:23:3a:54:e8:3e:8d:52:af:41:1c:6d:12:2e:
4c:fd:bc:0b:f7:d8:87:e5:f6:aa:54:b7:a9:1a:db:b0:e5:07:
0a:46:6d:d5:f3:a1:a8:48:02:9a:f7:15:55:6a:af:9e:ba:57:
d5:19:30:e8:44:49:f8:1e:31:03:01:21:61:d1:b7:38:e8:60:
9c:fb:24:30:cc:bc:93:ac:94:2d:00:6a:6d:1f:ab:64:1a:07:
0a:32:c6:40:db:0d:34:ef:5a:23:5f:1a:0e:de:1a:96:b9:12:
f2:46:02:b2:2d:87:a5:1f:ce:fe:ea:12:2a:d0:cf:c6:ab:62:
ba:c7:84:22:ea:a9:ba:ae:97:d5:53:a1:c8:4f:db:7d:85:55:
1e:bc:4f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:30:33 2026 by rpki-client