Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: Ud8SDvVACccaxHW490krfDKE9JnbKVquESeVQzzfxU8=
Subject key identifier: AB:D3:30:01:02:52:22:05:16:EA:1B:D7:94:2B:32:BC:B8:30:C6:19
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 01A0DB03F02DB207ED18B8300B03C7F58077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 0424
Signing time: Sat 26 Sep 2026 00:01:03 +0000
Manifest this update: Sat 26 Sep 2026 00:01:03 +0000
Manifest next update: Sun 27 Sep 2026 00:01:03 +0000
Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: x0EEJnMrlsx42c1sy+IfK9ZnaMkw0s9Wqs33XcEGGX4=)
3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:03:f0:2d:b2:07:ed:18:b8:30:0b:03:c7:f5:80:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Sep 26 00:01:03 2026 GMT
Not After : Sep 27 00:01:03 2026 GMT
Subject: CN=abd330010252220516ea1bd7942b32bcb830c619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:52:ac:de:c2:f5:15:5b:59:95:e7:35:df:
d4:06:c4:17:4b:0c:18:ac:44:99:91:ba:90:0b:d0:
0d:ba:ea:9e:20:cb:61:ce:29:e5:68:c8:fd:15:24:
07:e6:1b:86:a2:19:75:82:31:3f:52:45:1f:f9:b8:
0d:28:9e:34:06:bc:cf:77:5b:8d:37:70:36:78:25:
bd:16:93:68:92:f9:5e:74:63:09:e6:90:e0:f0:23:
28:c1:b0:35:c5:35:fc:71:5b:db:75:af:b9:88:80:
77:34:77:5c:7a:7c:f9:23:42:d4:2f:fa:7e:9c:bc:
ee:e3:a2:25:c9:40:2b:98:d4:52:83:53:d3:ac:14:
ab:a5:f4:71:84:73:16:af:db:a5:6e:e9:49:10:18:
01:a5:39:83:be:14:05:67:32:b4:72:96:4f:ec:b5:
cd:cd:72:3c:31:e9:6a:d6:36:f5:fa:7e:ef:f1:44:
d5:c8:50:b4:77:fa:08:ea:b5:a6:dc:8f:dd:bc:c3:
95:51:8b:bf:54:09:bc:5e:a5:9c:d5:b7:0d:22:91:
af:51:d5:b2:fc:71:52:8e:e3:28:d4:3f:b8:a2:89:
36:e2:0b:13:ca:3e:85:72:0b:ac:54:f0:24:a1:e5:
ca:06:24:10:b1:8b:cf:86:a1:9b:e6:f7:43:d5:e2:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D3:30:01:02:52:22:05:16:EA:1B:D7:94:2B:32:BC:B8:30:C6:19
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:dd:ba:4a:a8:56:4f:47:83:37:d0:4c:3e:2c:ef:63:0c:db:
81:d7:95:f4:95:c1:9a:74:b9:d9:dc:91:f1:bd:01:a0:c0:7c:
fe:f5:35:18:4f:e6:32:70:b5:37:c3:65:d9:e0:b3:64:41:b6:
73:c1:69:e3:1b:fc:2c:f6:02:18:1b:55:d2:e4:51:7f:4e:c3:
0d:a0:0b:94:de:68:f9:89:d6:83:20:e6:e5:8a:ac:5a:b7:70:
64:0a:b1:3f:cd:76:67:68:d9:3e:43:80:b0:95:ba:31:d3:b8:
40:7d:a1:b8:23:18:b0:45:4f:ee:9e:b2:e2:0c:69:74:6d:4c:
d6:36:f9:98:4c:07:c2:1a:7a:cc:4d:c3:0e:18:c0:26:f6:c6:
00:c2:1d:0c:06:3a:de:af:d5:71:d8:d1:eb:e6:5e:c9:f8:78:
da:d4:91:d3:67:3c:c3:08:4b:8c:ca:df:92:59:2f:c3:d8:b1:
0f:94:2c:f3:98:b0:91:30:1d:f4:0f:c9:ad:9d:b8:84:05:2e:
f2:ba:25:db:c0:9a:0a:31:79:0e:2a:e1:3c:d8:6d:ca:f8:e1:
cf:a1:6a:05:27:b5:4c:a8:ca:db:98:34:ab:76:2b:87:9d:7d:
bf:b1:3b:4e:76:cf:3f:3e:b9:25:ca:e4:b4:41:3b:ef:75:da:
53:26:a9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:07:03 2026 by rpki-client