Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: ybQLAHjsoVjqTfGQoJ//uYwoFL50acteTAqbXE0xsZU=
Subject key identifier: 37:86:7A:74:B0:81:51:A2:A5:A1:52:53:44:60:C6:16:9F:DE:5D:81
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 019E2F9680C703ACE34A3BE008500ED22117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 11E2
Signing time: Sat 16 May 2026 07:00:52 +0000
Manifest this update: Sat 16 May 2026 07:00:52 +0000
Manifest next update: Sun 17 May 2026 07:00:52 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: i8TzQfydi+ztvTJ1plmkImur+uI/coQMpL9krY2QJ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:80:c7:03:ac:e3:4a:3b:e0:08:50:0e:d2:21:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: May 16 07:00:52 2026 GMT
Not After : May 17 07:00:52 2026 GMT
Subject: CN=37867a74b08151a2a5a152534460c6169fde5d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:c4:fb:dd:d7:7b:16:a7:80:b8:11:88:e8:
3e:17:aa:43:50:e0:7d:4f:12:c4:bd:89:7d:36:60:
99:4c:f9:c9:25:62:62:60:df:93:10:e7:fe:3e:78:
f4:ce:cd:bb:af:48:01:03:62:67:1c:87:92:c7:ee:
4c:15:e7:67:a7:3a:1a:0b:05:52:48:55:93:45:14:
0a:e8:e7:76:88:c0:c9:67:a3:d0:e3:1c:aa:ff:8a:
89:53:9a:51:33:79:c4:d3:ca:3e:7e:b6:53:72:f0:
29:97:a3:64:e4:6a:98:21:56:3c:ab:05:7e:c7:fc:
08:a8:e7:66:7f:62:ff:4b:e9:e7:73:44:dc:25:cd:
61:f3:af:ab:3a:eb:47:52:ed:78:f5:52:cd:8d:ba:
f4:24:93:58:2d:1c:b3:d8:36:7d:f6:58:7f:a6:c6:
ee:b4:22:90:79:b6:85:1d:78:f4:7d:36:10:40:8f:
9a:cb:48:1c:7b:9f:a3:6b:1d:0f:ea:dd:99:45:96:
0f:85:15:7b:06:07:2e:5c:05:f1:98:d5:6e:b5:fa:
4b:b5:45:00:cf:a3:9c:a9:5a:a3:63:34:42:ae:0b:
24:79:55:47:7f:cb:7f:9a:b2:d2:ba:aa:ae:13:46:
34:0c:78:42:e7:84:08:80:2c:18:22:b9:9d:8e:7b:
83:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:86:7A:74:B0:81:51:A2:A5:A1:52:53:44:60:C6:16:9F:DE:5D:81
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:45:50:9f:c1:18:ef:b4:ab:ee:26:20:fa:a3:db:57:54:9e:
29:48:06:31:dc:9e:59:9f:ce:cf:ce:3d:18:c9:e3:54:3c:45:
e7:52:d4:e8:d6:5e:bd:78:56:38:62:2b:9f:8a:e3:4e:2f:a1:
d6:83:a7:8b:a6:3f:79:b1:14:53:41:7c:ec:04:72:d1:45:62:
65:37:c6:52:b4:50:bb:cd:99:1d:41:4d:45:fa:30:0d:b9:7e:
da:03:6d:63:86:7b:04:4b:7b:78:a0:72:a3:a9:9f:df:52:ad:
96:5c:31:80:b9:89:00:39:2f:a7:88:f3:46:f8:cc:f7:1f:4c:
f0:65:72:9d:41:73:3a:27:78:5e:f9:7e:25:55:7d:8d:97:e7:
8b:24:92:74:0b:df:e2:a5:40:21:a0:86:d1:fc:c6:24:73:b8:
d4:55:05:7b:7f:16:bc:f8:5d:06:04:54:e5:ae:af:d3:7c:f7:
d7:b3:48:1b:ad:7f:f4:6b:2c:a8:30:35:ba:08:9b:f1:74:17:
8a:0a:04:30:f5:17:07:87:ef:36:bb:16:26:a8:e5:86:4b:e6:
5a:97:b7:0c:d6:a9:71:a0:1c:27:09:16:9b:c5:f8:27:d4:26:
e5:c5:40:ea:be:5e:e5:14:29:04:90:6c:b3:ed:a6:a5:b1:31:
df:97:46:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vloDHA6zjSjvgCFAO0iEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDJhMzg1YWQ5MzYwMzYxMzUwN2Q4OTU3Nzg4YmYxYmRj
N2UyMWIwHhcNMjYwNTE2MDcwMDUyWhcNMjYwNTE3MDcwMDUyWjAzMTEwLwYDVQQD
EygzNzg2N2E3NGIwODE1MWEyYTVhMTUyNTM0NDYwYzYxNjlmZGU1ZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTXE+93XexangLgRiOg+F6pDUOB9
TxLEvYl9NmCZTPnJJWJiYN+TEOf+Pnj0zs27r0gBA2JnHIeSx+5MFednpzoaCwVS
SFWTRRQK6Od2iMDJZ6PQ4xyq/4qJU5pRM3nE08o+frZTcvApl6Nk5GqYIVY8qwV+
x/wIqOdmf2L/S+nnc0TcJc1h86+rOutHUu149VLNjbr0JJNYLRyz2DZ99lh/psbu
tCKQebaFHXj0fTYQQI+ay0gce5+jax0P6t2ZRZYPhRV7BgcuXAXxmNVutfpLtUUA
z6OcqVqjYzRCrgskeVVHf8t/mrLSuqquE0Y0DHhC54QIgCwYIrmdjnuD5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeGenSwgVGipaFSU0Rgxhaf3l2BMB8GA1UdIwQY
MBaAFOPSo4Wtk2A2E1B9iVd4i/G9x+IbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYt
ZmVkMmRjM2VjZDcxLzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYtZmVkMmRjM2VjZDcx
LzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUVQn8EY
77Sr7iYg+qPbV1SeKUgGMdyeWZ/Oz849GMnjVDxF51LU6NZevXhWOGIrn4rjTi+h
1oOni6Y/ebEUU0F87ARy0UViZTfGUrRQu82ZHUFNRfowDbl+2gNtY4Z7BEt7eKBy
o6mf31KtllwxgLmJADkvp4jzRvjM9x9M8GVynUFzOid4Xvl+JVV9jZfniySSdAvf
4qVAIaCG0fzGJHO41FUFe38WvPhdBgRU5a6v03z317NIG61/9GssqDA1ugib8XQX
igoEMPUXB4fvNrsWJqjlhkvmWpe3DNapcaAcJwkWm8X4J9Qm5cVA6r5e5RQpBJBs
s+2mpbEx35dGuQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:11:04 2026 by rpki-client