Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: dEmphdzAzJoHexiIzMQbH7yjcTPc/Pr3NON0xlwXNrU=
Subject key identifier: A8:57:CC:48:47:17:12:36:21:46:3D:5C:11:F8:97:D9:58:DB:3E:9B
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 01A00101B39A1FBCCC774124E77401F787F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 12D3
Signing time: Fri 14 Aug 2026 16:01:23 +0000
Manifest this update: Fri 14 Aug 2026 16:01:23 +0000
Manifest next update: Sat 15 Aug 2026 16:01:23 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: kUSA4T4YXZgxUk2SSmrxsk9ASs2sQR76hX4usP0CPww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:b3:9a:1f:bc:cc:77:41:24:e7:74:01:f7:87:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Aug 14 16:01:23 2026 GMT
Not After : Aug 15 16:01:23 2026 GMT
Subject: CN=a857cc484717123621463d5c11f897d958db3e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:11:90:fe:d7:e3:17:34:c2:11:37:b8:ea:
f7:06:ee:68:a6:69:15:42:68:80:dc:22:54:6b:6b:
85:f3:24:fb:a3:85:b6:fd:79:5a:03:5a:42:c8:4d:
ce:6f:51:d9:30:c5:85:fe:6e:3e:ca:40:e6:b0:ab:
20:68:ae:5f:53:b9:a7:09:57:a9:4c:41:91:30:fd:
e3:5c:8f:2a:41:be:19:54:64:9e:09:76:0a:5f:76:
5f:79:a8:ad:36:a0:ac:73:9b:27:c7:27:35:4d:54:
84:0d:68:57:d8:31:48:cc:54:df:0b:d8:f3:8a:dd:
f8:68:67:6c:ad:ef:f1:7b:98:1e:8e:17:d0:fc:fa:
f4:80:93:fe:88:c4:4f:df:7f:2b:da:ff:6e:21:66:
c5:e5:18:e4:15:5b:e3:e9:bc:40:f7:df:0d:76:c7:
1f:9e:a9:9a:9d:79:85:e1:4d:df:ce:4d:b5:82:27:
f5:13:af:90:1c:74:6a:9d:87:64:fa:c8:8e:09:5c:
2b:de:95:57:7e:f8:ef:0e:a2:d3:f2:34:59:35:9d:
22:db:95:f3:b0:c8:4c:4c:ed:bf:2d:d5:b4:68:ea:
ef:61:48:61:97:f3:f8:6f:d3:76:6a:52:43:d5:99:
71:4d:c1:a6:a6:97:ef:85:1b:ac:4e:d9:25:fa:38:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:57:CC:48:47:17:12:36:21:46:3D:5C:11:F8:97:D9:58:DB:3E:9B
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7a:4e:b2:06:1b:60:13:e4:f3:1a:74:8d:04:db:d9:72:2a:
d0:b8:d2:d9:98:45:df:15:bf:42:b8:50:1e:34:19:1e:0e:59:
fc:18:48:74:23:43:18:31:ad:c8:2a:50:67:4f:22:75:ff:2d:
c0:6b:ae:b7:ff:ab:18:80:8c:36:e7:8c:a7:49:8d:f2:89:f2:
ea:02:3b:a3:e4:52:76:13:42:4a:a2:f1:3f:97:c6:69:57:d2:
71:5f:93:5e:dc:db:49:55:b0:74:bb:ff:95:3a:c1:cc:74:11:
eb:58:a1:e6:44:b4:04:5b:67:76:d2:4a:dd:e9:ea:4f:c6:1a:
28:2e:aa:83:f6:93:5f:59:41:4a:90:27:d6:7a:02:d7:f3:e2:
e5:79:58:b3:e4:c4:f2:75:79:97:ef:f3:e7:a1:aa:34:1e:cf:
b2:66:b5:a6:78:0f:bf:73:cb:fc:12:7f:89:3d:3e:2c:4b:04:
33:48:ca:74:e2:ad:70:7c:96:02:b5:00:42:1a:24:d0:fc:24:
e6:bf:6b:58:41:d0:c9:c3:e8:70:79:a2:2a:7d:c7:b8:e4:2d:
4d:19:d5:02:e5:a2:41:9a:2e:0d:75:15:fd:13:5e:d9:74:16:
0f:a5:d6:4d:02:78:49:7a:67:dd:9c:73:33:b1:39:41:c2:eb:
ce:e7:c7:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAbOaH7zMd0Ek53QB94fyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDJhMzg1YWQ5MzYwMzYxMzUwN2Q4OTU3Nzg4YmYxYmRj
N2UyMWIwHhcNMjYwODE0MTYwMTIzWhcNMjYwODE1MTYwMTIzWjAzMTEwLwYDVQQD
EyhhODU3Y2M0ODQ3MTcxMjM2MjE0NjNkNWMxMWY4OTdkOTU4ZGIzZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqcRkP7X4xc0whE3uOr3Bu5opmkV
QmiA3CJUa2uF8yT7o4W2/XlaA1pCyE3Ob1HZMMWF/m4+ykDmsKsgaK5fU7mnCVep
TEGRMP3jXI8qQb4ZVGSeCXYKX3ZfeaitNqCsc5snxyc1TVSEDWhX2DFIzFTfC9jz
it34aGdsre/xe5gejhfQ/Pr0gJP+iMRP338r2v9uIWbF5RjkFVvj6bxA998Ndscf
nqmanXmF4U3fzk21gif1E6+QHHRqnYdk+siOCVwr3pVXfvjvDqLT8jRZNZ0i25Xz
sMhMTO2/LdW0aOrvYUhhl/P4b9N2alJD1ZlxTcGmppfvhRusTtkl+jjnnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhXzEhHFxI2IUY9XBH4l9lY2z6bMB8GA1UdIwQY
MBaAFOPSo4Wtk2A2E1B9iVd4i/G9x+IbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYt
ZmVkMmRjM2VjZDcxLzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYtZmVkMmRjM2VjZDcx
LzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3pOsgYb
YBPk8xp0jQTb2XIq0LjS2ZhF3xW/QrhQHjQZHg5Z/BhIdCNDGDGtyCpQZ08idf8t
wGuut/+rGICMNueMp0mN8ony6gI7o+RSdhNCSqLxP5fGaVfScV+TXtzbSVWwdLv/
lTrBzHQR61ih5kS0BFtndtJK3enqT8YaKC6qg/aTX1lBSpAn1noC1/Pi5XlYs+TE
8nV5l+/z56GqNB7Psma1pngPv3PL/BJ/iT0+LEsEM0jKdOKtcHyWArUAQhok0Pwk
5r9rWEHQycPocHmiKn3HuOQtTRnVAuWiQZouDXUV/RNe2XQWD6XWTQJ4SXpn3Zxz
M7E5QcLrzufHug==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:55 2026 by rpki-client