Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: i56e9i9JdM/6mYh9Y1zE/QWATDi7fO+xybyJZLbronk=
Subject key identifier: 49:A3:6F:96:E0:BC:F8:9E:96:6C:DF:6D:B3:D6:02:F9:BC:3A:9B:EC
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 019F1754C3D71D30DC8AB12852BD3FF8E2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 125A
Signing time: Tue 30 Jun 2026 07:00:58 +0000
Manifest this update: Tue 30 Jun 2026 07:00:58 +0000
Manifest next update: Wed 01 Jul 2026 07:00:58 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: n6jpb0n96Gj+iSeiOEgplh4/DYmYpbYMB23eF0xMBCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:c3:d7:1d:30:dc:8a:b1:28:52:bd:3f:f8:e2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Jun 30 07:00:58 2026 GMT
Not After : Jul 1 07:00:58 2026 GMT
Subject: CN=49a36f96e0bcf89e966cdf6db3d602f9bc3a9bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:b6:5f:79:c5:d3:47:ed:32:81:6c:10:a1:
f0:81:35:ab:26:f7:1c:8f:9f:6e:fd:02:0e:7f:a5:
52:a2:4b:53:86:8c:5c:d9:57:bf:43:91:cd:5f:02:
6f:9f:2d:81:75:c9:46:20:53:cd:59:e5:23:a6:69:
6e:46:d7:a8:af:f2:33:a5:c4:99:c2:de:cb:97:c1:
97:3e:3a:f2:95:90:00:aa:43:58:5e:da:39:eb:08:
01:33:07:f4:17:b4:54:c0:ed:aa:60:c5:1b:78:04:
a8:9a:27:09:83:61:33:15:b4:a7:8e:83:bd:f0:2a:
d0:3a:59:5c:bc:10:dc:97:c3:fa:dd:1d:58:37:9b:
d2:71:5b:f6:2c:e6:7f:c1:7e:a3:d7:23:fc:0f:a3:
5c:ec:70:c1:f6:88:a5:4a:27:83:83:c5:b3:d7:0e:
b4:b5:18:7d:b3:e8:72:67:a3:93:7a:8e:4b:46:07:
9b:7a:0d:c7:f3:c3:32:31:fc:30:aa:7a:b3:b9:f0:
6c:93:e9:f7:5e:53:93:46:b4:75:af:c6:5e:55:f6:
27:42:41:3a:2c:6c:c4:da:93:9e:06:29:28:00:f8:
86:74:4c:22:44:37:92:95:62:2b:fd:b5:18:31:ae:
a7:d7:19:74:8e:73:ee:8b:61:a8:48:2f:bb:10:6a:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A3:6F:96:E0:BC:F8:9E:96:6C:DF:6D:B3:D6:02:F9:BC:3A:9B:EC
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:db:18:6e:1e:dd:cc:43:85:a5:67:a0:54:4b:02:52:a7:dd:
d0:a4:77:8a:41:3f:ef:c8:6c:6c:f3:45:d9:9f:eb:67:db:44:
2b:9c:3d:f4:70:5c:6e:f0:53:5f:54:87:e4:c6:c5:7b:5e:df:
a9:db:c0:3a:47:d3:62:34:a2:16:86:cc:80:43:54:96:3e:2c:
8a:ca:cc:ff:01:35:11:7c:8b:08:61:73:85:0a:5e:8d:4c:b6:
ce:ac:8e:88:db:ff:7d:97:a0:fa:16:3f:ec:da:a5:02:1c:92:
20:cb:e0:08:e0:03:0b:ec:0c:1d:9b:cc:f1:76:32:b0:95:b9:
ba:96:d4:c7:2c:d7:24:fb:ea:a4:67:06:cf:59:6d:84:27:49:
cb:8a:96:78:cc:70:ad:31:57:b0:19:7d:cd:0e:74:a3:d5:16:
e9:4d:4c:fc:8e:d5:7e:f5:a7:49:e2:fc:9d:3d:e9:b5:91:12:
c0:1a:89:86:d8:cb:53:de:a6:da:f3:30:cf:4f:76:f9:39:41:
13:0e:8e:28:8a:d9:f0:6b:89:66:c4:10:d4:55:c2:6b:9b:43:
ab:33:63:3e:65:18:df:de:6c:e1:b0:fc:c7:83:67:bc:f4:46:
01:eb:26:8a:6d:f2:c6:d1:dd:3d:10:0e:4a:8f:09:34:90:3d:
e6:52:06:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:06 2026 by rpki-client