Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier: OpESezXYhX9162kReHFV2fFrl3YNbToU2RWE925yY8g=
Subject key identifier: 8A:84:87:75:CD:AD:6A:B3:29:3A:60:B4:30:92:AD:42:10:C3:81:E9
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 019E1E35D02301612DF99003FA7DBCCCE625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number: 0D4B
Signing time: Tue 12 May 2026 22:01:43 +0000
Manifest this update: Tue 12 May 2026 22:01:43 +0000
Manifest next update: Wed 13 May 2026 22:01:43 +0000
Files and hashes: 1: YNGfrZvagg4O4FGkVhnBiiruLx0.roa (hash: /ltwcx7I+h2VdXqUCtGZD3WsmcEgqxtyYnfei2/3ZlQ=)
2: kVcl-lsZR6xyXsxO8aWh944dJv8.roa (hash: wO+8xB9lCvBU2gIRiYR9ejf9p/0a0RGT/tmuLIRs2LY=)
3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: YyN9eF54FibAVq24U/+jjq4HVv0HeyBs/UdkY/2D40o=)
4: oK8DgClRz_oA4VjYTOJycO25RE8.roa (hash: HL0prlO8v1UmrZWNdBDiYE7Jz5klWeZulY7cNTFYDKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:d0:23:01:61:2d:f9:90:03:fa:7d:bc:cc:e6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: May 12 22:01:43 2026 GMT
Not After : May 13 22:01:43 2026 GMT
Subject: CN=8a848775cdad6ab3293a60b43092ad4210c381e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:a2:4e:f2:4d:33:f0:c1:96:6e:9a:c6:0b:
14:8d:3c:2c:57:42:b7:2e:26:e2:71:24:02:a3:1d:
58:fd:05:5d:61:b4:8c:85:56:50:81:e6:0d:8b:bd:
f8:e8:b9:13:e9:3e:73:7c:a2:d6:b4:6b:88:ea:7f:
9d:1a:97:0e:47:59:6c:93:6c:77:2d:96:e6:56:a5:
d4:dc:44:32:b1:0e:27:68:32:3f:1d:36:91:bf:39:
34:f8:7d:27:5b:1a:92:ae:32:39:a5:44:b8:cc:42:
3c:99:bf:58:5e:84:ea:6f:96:c8:64:78:00:5c:05:
ee:5e:63:ea:78:fe:03:45:18:9b:6b:ef:2c:8b:9f:
b4:59:b0:cf:ab:05:59:7d:91:2c:d2:8f:eb:c7:27:
e4:2c:a2:f8:21:f0:94:5d:3f:85:18:ee:32:29:c5:
86:63:71:7f:24:21:62:7f:af:51:e2:68:61:38:61:
f1:be:c7:f5:48:00:ca:83:04:06:64:f9:31:c8:9e:
e8:37:80:96:ba:b3:4a:48:8f:c9:bf:d3:f7:e3:7d:
3d:fb:09:b6:5a:80:96:56:a4:e0:11:bf:29:4f:8e:
03:9b:e4:09:cd:57:50:0a:77:7e:37:e4:eb:99:63:
d3:c5:70:5a:9a:d1:c6:74:87:bd:dd:c9:05:88:f2:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:84:87:75:CD:AD:6A:B3:29:3A:60:B4:30:92:AD:42:10:C3:81:E9
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:00:cf:8f:a8:f4:f5:d6:9d:5c:90:b0:65:85:0f:8a:90:a4:
69:94:03:3d:c1:c3:48:bf:45:ce:b6:ae:f8:e6:60:5e:e7:54:
02:86:36:cd:38:2f:e2:c2:1e:39:c6:98:30:b4:f0:86:24:69:
56:a9:c1:0d:a3:90:68:b9:f9:2f:ae:29:b2:45:a8:af:9e:7c:
56:16:9f:b9:3f:a7:02:68:ce:97:df:5a:f9:d2:e7:e5:0e:3d:
1e:ea:7c:e2:d6:b7:08:1c:f8:53:c5:59:0f:2a:65:91:cb:05:
b9:40:5f:ec:35:2a:ea:42:41:d0:f4:9d:6d:64:bb:c1:d4:b3:
eb:9d:75:ab:c3:49:29:4c:37:7e:d1:73:0a:94:1e:0a:17:b4:
96:3a:c6:4a:3a:c2:0d:9d:c8:b0:bb:88:14:05:98:ce:1b:92:
cd:b3:d6:7f:5f:92:b8:25:b6:d9:e0:26:68:77:37:93:22:35:
c4:d6:4e:03:46:17:a1:a2:a9:1a:b7:68:7a:9f:ae:c3:1a:6c:
b7:a1:4f:12:f4:49:57:58:2a:d4:85:0c:9e:9e:da:0a:79:54:
0b:6d:54:32:18:7f:b5:47:6c:ec:a2:02:80:f2:bc:a3:ae:1e:
06:a5:a2:72:1a:3b:ec:5e:ae:1a:11:a8:23:66:bc:36:d0:a3:
29:f2:be:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNdAjAWEt+ZAD+n28zOYlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODZiZDg4MmU0NzZlNDY5ODMxOGYzNzA3MTJmNzFjMmJm
NTBkZmMwHhcNMjYwNTEyMjIwMTQzWhcNMjYwNTEzMjIwMTQzWjAzMTEwLwYDVQQD
Eyg4YTg0ODc3NWNkYWQ2YWIzMjkzYTYwYjQzMDkyYWQ0MjEwYzM4MWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/uiTvJNM/DBlm6axgsUjTwsV0K3
LibicSQCox1Y/QVdYbSMhVZQgeYNi7346LkT6T5zfKLWtGuI6n+dGpcOR1lsk2x3
LZbmVqXU3EQysQ4naDI/HTaRvzk0+H0nWxqSrjI5pUS4zEI8mb9YXoTqb5bIZHgA
XAXuXmPqeP4DRRiba+8si5+0WbDPqwVZfZEs0o/rxyfkLKL4IfCUXT+FGO4yKcWG
Y3F/JCFif69R4mhhOGHxvsf1SADKgwQGZPkxyJ7oN4CWurNKSI/Jv9P34309+wm2
WoCWVqTgEb8pT44Dm+QJzVdQCnd+N+TrmWPTxXBamtHGdIe93ckFiPJEmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqEh3XNrWqzKTpgtDCSrUIQw4HpMB8GA1UdIwQY
MBaAFJuGvYguR25GmDGPNwcS9xwr9Q38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQt
YmZjNzNkZDBiYmI2LzEvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQtYmZjNzNkZDBiYmI2
LzEvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwDPj6j0
9dadXJCwZYUPipCkaZQDPcHDSL9Fzrau+OZgXudUAoY2zTgv4sIeOcaYMLTwhiRp
VqnBDaOQaLn5L64pskWor558VhafuT+nAmjOl99a+dLn5Q49Hup84ta3CBz4U8VZ
DyplkcsFuUBf7DUq6kJB0PSdbWS7wdSz6511q8NJKUw3ftFzCpQeChe0ljrGSjrC
DZ3IsLuIFAWYzhuSzbPWf1+SuCW22eAmaHc3kyI1xNZOA0YXoaKpGrdoep+uwxps
t6FPEvRJV1gq1IUMnp7aCnlUC21UMhh/tUds7KICgPK8o64eBqWicho77F6uGhGo
I2a8NtCjKfK+YQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:59:17 2026 by rpki-client