Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: +1q1rXcvLg0v+vP/lUzSpEOMYJ+k5jfnnkECeKkGbPE=
Subject key identifier: AA:CB:E4:D1:69:22:FB:87:D1:8B:3C:1F:BD:3E:E2:69:F3:8A:0B:16
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 01A0E2BE2CD453A70A8C0E6F92592F988830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 0428
Signing time: Sun 27 Sep 2026 12:01:49 +0000
Manifest this update: Sun 27 Sep 2026 12:01:49 +0000
Manifest next update: Mon 28 Sep 2026 12:01:49 +0000
Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: l3P8f9sNG4zDwCRwmRyc6YLoQjYkeBH277wnCKOHvCk=)
3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:be:2c:d4:53:a7:0a:8c:0e:6f:92:59:2f:98:88:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Sep 27 12:01:49 2026 GMT
Not After : Sep 28 12:01:49 2026 GMT
Subject: CN=aacbe4d16922fb87d18b3c1fbd3ee269f38a0b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:b2:2a:e8:5b:b8:61:06:31:2b:ba:c5:0f:
f3:2d:fe:ca:50:ce:ee:2a:1f:a8:8e:a5:4e:43:bb:
7d:af:2a:93:4c:1c:78:e2:40:3b:aa:52:c7:15:e8:
0e:24:54:e5:b4:e5:1e:78:91:32:8e:f5:c5:23:31:
71:fc:ea:1f:70:cb:62:e9:91:04:64:af:72:24:58:
65:f8:44:a1:7d:c3:6d:3e:aa:20:51:61:db:8c:18:
7b:6f:eb:8d:0f:82:ea:d9:a3:38:33:5b:aa:4c:a5:
5a:54:17:2f:c4:59:13:76:0d:d1:4c:bb:bd:56:1d:
67:ba:0f:35:5f:69:00:33:12:08:0c:d7:9b:82:22:
33:11:59:0e:3e:c0:82:be:e6:a1:85:67:49:f9:25:
37:ff:a6:22:8e:eb:a0:b4:d5:6a:95:ac:d4:b7:34:
28:fa:32:1d:3a:8d:b0:c6:b8:f8:c4:c8:23:ed:2d:
ec:1c:68:96:8b:a2:04:70:9d:43:72:41:b8:83:60:
a9:f2:d6:37:b4:d3:8f:b9:22:1e:95:44:7a:f6:f1:
59:26:73:be:b0:ea:b0:ef:0c:3d:dd:1a:98:c7:13:
19:e2:49:fa:26:3f:45:fa:5d:1c:3d:94:16:01:97:
ea:9b:b8:1d:6c:08:c5:98:dd:98:44:c3:f4:43:a6:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CB:E4:D1:69:22:FB:87:D1:8B:3C:1F:BD:3E:E2:69:F3:8A:0B:16
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a1:1c:c6:d0:36:2b:d2:ea:9e:70:bb:c7:8f:bb:2c:00:ec:
73:c8:4e:a5:4b:2c:db:fb:8c:22:f0:2e:f8:be:6f:7f:05:f8:
43:2d:67:c1:0e:57:6b:12:44:40:35:fd:d0:a8:92:4f:6d:11:
0e:19:d2:92:10:30:b1:dd:f2:35:9a:12:78:c7:c0:93:41:e4:
1c:73:0d:52:89:11:63:2a:ee:92:a0:16:5d:1e:19:02:5d:3d:
44:d1:85:cb:1e:87:70:1a:ac:98:58:3e:03:4b:8d:3c:73:b6:
8a:4e:5e:20:73:9a:1f:e4:06:36:41:32:de:8e:2c:c0:fe:78:
58:09:d0:25:06:01:cc:d1:0e:fd:2b:51:73:d0:31:97:b9:08:
81:8c:73:b5:ba:49:bd:f7:e4:6d:31:a9:98:b5:b3:ec:63:c2:
5f:2e:24:24:6d:70:58:cd:6e:1d:5b:ab:ce:de:1d:9e:a5:8a:
27:1e:53:94:df:53:90:7d:ed:cc:85:63:41:ee:0b:bb:7d:a6:
0b:68:ce:0f:77:89:ca:ec:25:c3:07:7b:72:23:c8:0f:94:de:
6d:f1:2a:99:07:81:3f:5e:ae:28:3f:96:39:22:cb:08:f8:8d:
29:8c:88:47:4d:1f:12:33:0c:6c:d9:ba:29:8c:d0:9e:73:03:
da:e6:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:04:02 2026 by rpki-client