Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: sbObXhqbzJmcj6j+psdrSHbU7lzpaipKNRrpbVgjjxE=
Subject key identifier: B8:54:7F:96:E0:85:96:97:95:BA:B4:2C:F7:61:AD:D8:AD:80:5A:67
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 019E1DFE15F5CF033D3A1BA4B7C5CB5BB97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 02B9
Signing time: Tue 12 May 2026 21:00:51 +0000
Manifest this update: Tue 12 May 2026 21:00:51 +0000
Manifest next update: Wed 13 May 2026 21:00:51 +0000
Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: /Efu8PdqHMxXPzqXNvz5eseVRcGRYeOICpGmQusL9DU=)
3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:15:f5:cf:03:3d:3a:1b:a4:b7:c5:cb:5b:b9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: May 12 21:00:51 2026 GMT
Not After : May 13 21:00:51 2026 GMT
Subject: CN=b8547f96e085969795bab42cf761add8ad805a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:79:4f:3d:49:8a:d2:ab:6c:69:01:04:55:
3d:95:3c:e0:53:99:5f:57:50:7a:4d:4c:a0:13:ac:
db:88:b7:bd:d5:6a:dd:1a:17:74:67:0e:dd:7d:95:
0b:32:04:3b:3e:6a:a1:b0:88:e6:63:53:72:05:01:
32:fc:cf:af:35:e3:23:b8:ce:3d:c3:cd:b5:0e:7d:
2c:56:46:4f:fd:8a:12:18:c0:57:b3:d2:1a:67:89:
8a:8f:5a:33:03:9a:55:99:f9:46:8d:bb:ac:73:53:
22:c6:61:ef:a7:55:4f:00:ab:06:d8:cd:93:74:5f:
7b:9e:f1:68:7c:6b:95:0d:c3:e4:20:aa:d9:19:fe:
9f:59:05:bb:93:32:27:d2:86:c1:f9:37:b6:ce:c7:
29:e1:01:91:d3:2f:39:f7:dc:e0:b0:5e:d0:6e:1a:
7c:e5:d9:24:45:e3:f3:5a:ad:89:f6:e5:4b:bf:f9:
d8:89:cd:95:cd:47:ae:54:ca:a4:de:3f:bb:f1:cc:
3d:f8:47:fd:7f:e2:d6:ff:83:7c:d7:cd:69:7b:81:
7f:7b:15:d3:fb:cc:3f:1a:aa:a3:e1:94:0c:99:51:
67:d8:48:1d:48:d5:7c:65:44:bf:f4:52:25:ae:ff:
94:70:3f:86:02:bd:79:1a:e5:6d:5a:13:1e:20:f9:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:54:7F:96:E0:85:96:97:95:BA:B4:2C:F7:61:AD:D8:AD:80:5A:67
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cb:b2:b0:f7:a9:dd:f9:85:25:83:b9:b1:7e:ca:ae:f6:ab:
ee:97:4b:8b:0e:7c:e3:d3:e4:92:cd:17:b5:96:d1:bb:bf:9e:
b2:61:cf:5e:f1:3b:f8:6b:a9:b9:ef:60:9f:21:e8:1d:df:1a:
27:0e:27:46:18:7d:b7:28:51:d1:45:46:bf:b0:02:86:7f:df:
ff:88:f5:d2:19:69:5b:ea:80:7f:cc:00:f3:07:80:f4:cd:a9:
78:ca:b1:90:73:6d:00:9f:75:da:67:f0:84:e4:1f:b9:98:bb:
f9:bb:f4:b4:1d:fa:d5:8d:ac:9e:f5:c1:ce:7f:db:fb:ff:3e:
7c:3b:93:48:a5:e3:a6:01:60:6f:4e:3d:c8:2b:7e:3e:0c:c4:
ff:a0:40:59:3d:c6:33:92:f4:7f:78:e4:4f:69:a4:7f:1d:2b:
ff:13:81:75:d4:92:08:a8:a2:cd:95:7d:1b:6e:12:68:3c:62:
26:94:db:e6:1e:b1:5c:2d:85:44:02:6f:b3:cd:28:6f:6e:31:
2b:16:d3:12:3e:11:75:1f:f2:60:6d:e0:5c:2a:fc:9b:fe:f3:
0b:9d:8f:28:df:e3:fa:b4:3d:fc:a8:a6:c9:80:06:f4:4c:b2:
1e:6f:01:80:07:76:26:cc:82:67:12:92:87:a4:5d:a5:12:87:
0b:9c:46:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:39:56 2026 by rpki-client