Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: Q5KCzwMdgyM57XwiOnX5e5qY6YpwbRnz91xaH2QsFqA=
Subject key identifier: 5B:31:D1:F7:2A:6F:77:1D:C2:49:FE:BF:20:22:68:7A:EC:48:CF:D0
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 019D28BB332BCBA57941CA0201DB5E7A0995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 023A
Signing time: Thu 26 Mar 2026 06:00:50 +0000
Manifest this update: Thu 26 Mar 2026 06:00:50 +0000
Manifest next update: Fri 27 Mar 2026 06:00:50 +0000
Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: yWGD4AZ9f/8i0jlp30YwbgNIzMU4Zop/Zjsc1ZoNkmc=)
3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:33:2b:cb:a5:79:41:ca:02:01:db:5e:7a:09:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Mar 26 06:00:50 2026 GMT
Not After : Mar 27 06:00:50 2026 GMT
Subject: CN=5b31d1f72a6f771dc249febf2022687aec48cfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:21:78:4d:e3:53:49:8d:bb:e6:12:15:2e:
37:b4:aa:3e:36:60:af:60:10:f3:c6:b8:00:f9:d4:
9d:2b:f5:77:0b:62:20:85:20:0d:87:ae:52:7a:fc:
cc:30:cf:90:7b:db:00:56:7a:01:60:b2:2e:a0:57:
8f:1d:6b:9c:b4:a5:21:1a:f8:80:04:cc:bb:8a:4d:
2d:fd:5c:c2:8d:90:ed:d8:0c:23:f4:34:4e:eb:03:
b4:92:7c:f1:8b:43:89:b3:17:63:fe:e4:b3:1a:f2:
b4:8b:77:87:0b:4d:ac:b9:0e:cc:74:2c:d5:89:7f:
13:00:4e:b4:d2:cb:f2:ba:e4:65:f0:ea:8c:29:01:
cf:2f:b9:e1:a8:2d:1f:28:78:cc:f7:6b:ca:4d:5b:
5a:92:ce:2a:3d:2f:20:91:aa:cb:d1:61:ff:33:e1:
b1:49:ff:29:9b:18:46:b8:bc:4e:22:09:60:03:4d:
4c:c2:bb:8c:c6:6b:5b:a4:74:fb:08:7e:40:e1:5e:
79:94:0e:f3:08:56:06:04:8e:b9:95:ed:32:d9:15:
3e:65:a7:d2:25:f0:05:97:d7:39:08:8d:5a:07:a0:
dc:0c:9f:be:5c:76:d9:d7:a2:e8:68:97:b9:c9:b6:
5c:7c:09:17:cd:d5:6d:9a:f0:b7:16:34:3e:68:27:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:31:D1:F7:2A:6F:77:1D:C2:49:FE:BF:20:22:68:7A:EC:48:CF:D0
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bb:c0:45:c9:6e:d9:ab:53:47:19:33:6a:79:66:1b:dc:9d:
4c:ca:86:0d:30:c5:f0:97:ff:65:aa:b7:5b:fb:bc:ab:ed:bf:
fb:72:32:8f:d8:bb:9e:2c:77:b3:30:95:4c:22:80:d7:2e:7b:
45:66:44:c2:3c:18:5a:15:fd:00:8e:e8:4e:3b:2d:83:a5:e6:
64:a6:63:cb:8b:9e:ac:b4:94:6a:5b:d5:4b:d6:7a:6e:8c:46:
cf:be:17:0c:37:49:bd:93:f0:d4:3c:cb:61:7c:56:33:93:b1:
ca:a6:d9:a5:c3:df:0d:56:9d:79:a6:dd:97:32:13:3e:cb:61:
62:08:c5:2e:0b:30:d0:6b:35:3f:22:66:bb:82:1d:06:4b:87:
d2:7d:05:6a:09:c8:23:b3:d0:7a:01:fc:6c:65:ba:bb:62:98:
59:38:84:8b:04:d5:5b:d5:e3:d8:ac:1f:fd:7e:e5:93:90:21:
ef:17:ee:9e:38:50:da:72:4e:ae:cb:03:9d:fe:22:fa:c3:8d:
7c:d2:68:3d:81:16:cc:ee:8a:36:97:af:f8:c4:c9:77:53:65:
41:dc:59:04:86:82:6d:85:31:67:46:37:e8:07:00:6a:fd:86:
98:a1:a0:27:47:5e:28:8f:16:c0:56:a3:fc:8c:ac:50:99:c0:
d8:0f:2f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:02 2026 by rpki-client