Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: 2veO3xEfW/5NeGbJbd9KKQdyiPky0390HS5XoxIktkI=
Subject key identifier: AF:31:F3:E5:3E:52:DA:55:DA:EC:5D:4F:36:12:70:A9:BB:A3:73:0C
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 019D386627DCCCACABAD453A9D5A49EB979D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 1162
Signing time: Sun 29 Mar 2026 07:01:52 +0000
Manifest this update: Sun 29 Mar 2026 07:01:52 +0000
Manifest next update: Mon 30 Mar 2026 07:01:52 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: fZLaQ/b81p44uBvvIfEOXoWAHgjrya5YUAsGT1tjcLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:27:dc:cc:ac:ab:ad:45:3a:9d:5a:49:eb:97:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Mar 29 07:01:52 2026 GMT
Not After : Mar 30 07:01:52 2026 GMT
Subject: CN=af31f3e53e52da55daec5d4f361270a9bba3730c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:53:c8:3a:95:ad:98:2c:e7:97:3d:71:be:08:
82:78:6c:a4:a9:b1:9a:2f:47:ce:27:5c:08:64:05:
9b:b1:2c:c5:f1:c6:20:f4:ba:ea:c6:ee:43:d6:64:
b7:d1:c5:c1:d7:04:11:f5:da:05:d2:74:bf:03:72:
48:7c:b3:da:d2:a0:65:9b:c6:ab:2e:eb:2d:5e:66:
4f:57:84:8b:8e:c9:33:22:92:a1:82:51:9f:7f:ce:
6e:5d:25:ba:45:85:b4:cc:31:8e:9c:ed:14:bd:4b:
7a:9e:9c:e0:e7:5f:11:87:47:03:97:27:b7:7d:27:
28:5c:58:1e:8d:db:fe:62:1f:52:38:e7:17:e3:3d:
47:6f:29:9c:d9:29:21:d6:4d:54:09:4b:fc:41:dc:
35:1d:c7:4c:db:94:df:f9:a6:60:1a:f9:45:fd:9d:
ac:36:0c:bb:09:73:a6:fc:67:a7:eb:35:68:ac:7e:
7a:24:2a:5a:ef:e7:38:41:da:0d:9a:f8:4a:05:37:
3d:3b:a7:4f:f4:73:b5:0e:e2:90:27:a1:c9:8c:6e:
a5:b1:4f:da:0c:81:8d:df:2d:7b:8c:d4:1b:02:60:
94:79:b4:0e:ea:c8:dc:1b:69:af:81:9d:1d:66:b1:
7a:ed:f5:7f:5d:fe:84:a1:fc:20:61:30:55:a7:87:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:31:F3:E5:3E:52:DA:55:DA:EC:5D:4F:36:12:70:A9:BB:A3:73:0C
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:dd:6f:5f:ed:74:a3:cf:76:20:d2:c9:46:1d:46:87:e0:a5:
a9:0d:e8:06:bf:4a:12:fb:d9:fe:0e:d6:68:8f:5b:af:ac:15:
00:c0:52:4a:e1:b0:4f:67:76:1a:e4:40:24:1d:da:f2:d0:a6:
0b:6a:ef:69:40:71:47:ba:79:5c:73:ee:1c:9d:46:e3:a3:49:
14:90:15:c2:6c:0a:14:72:5a:6f:d5:82:41:f7:4e:d7:14:6d:
68:5b:8d:ce:00:31:5e:3c:56:69:49:5a:b1:c6:27:c5:8f:61:
4f:7e:70:9a:07:98:16:72:77:04:e4:13:4c:28:1d:de:9c:e9:
82:c2:36:f9:a8:a3:64:5e:21:70:fc:70:6c:b2:be:12:88:a9:
89:d1:ba:e7:a1:22:f3:9a:1d:22:fe:74:c1:35:69:5b:de:c3:
d2:e3:25:ff:a4:29:d5:84:78:06:68:4a:90:ca:08:65:e8:81:
08:a4:17:ec:cc:5e:fa:1d:23:63:17:c2:b2:78:69:4d:30:ff:
ee:05:55:ef:ab:18:85:c1:51:60:90:bf:f4:7d:dc:28:1f:b5:
e4:bc:53:37:96:ab:b5:76:0b:b8:08:fd:3e:87:5d:da:bb:9b:
a8:d0:bd:9b:15:04:f3:0c:44:49:9e:8f:91:e0:ba:07:f6:b2:
50:6b:5c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:35 2026 by rpki-client