Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier: cyLc6r5vq2S5BjdpsKebdXQAGkO6ZvpCQxE58MTychI=
Subject key identifier: 31:6F:35:6B:D1:25:AE:03:69:57:0B:E4:D7:52:74:A7:23:1B:99:99
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 019F8F10F8DC3306FEA26A4918FECA100632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number: 12D6
Signing time: Thu 23 Jul 2026 13:01:21 +0000
Manifest this update: Thu 23 Jul 2026 13:01:21 +0000
Manifest next update: Fri 24 Jul 2026 13:01:21 +0000
Files and hashes: 1: 0549ZLBzM4beeKAOhluORbZXoyA.roa (hash: WowH9si60Z2zpExgKOKJlrVy2XcJuZgBQ4vzt0r71L4=)
2: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: WQKAjNgaX89aQKiP22nXQnnC8xF192QTZu/3S+V0i8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:f8:dc:33:06:fe:a2:6a:49:18:fe:ca:10:06:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: Jul 23 13:01:21 2026 GMT
Not After : Jul 24 13:01:21 2026 GMT
Subject: CN=316f356bd125ae0369570be4d75274a7231b9999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:2f:3e:f6:a4:fd:7c:eb:11:fe:ff:38:7f:
a0:f7:87:01:ad:62:a9:9e:6d:5c:c9:ae:e4:6e:4c:
96:a5:28:e0:8c:9b:6b:dd:08:e1:ad:30:36:1f:6f:
5e:e5:74:6b:c1:a9:fa:ff:39:8c:06:96:93:e6:1e:
6f:6e:45:c5:3f:d2:df:2b:62:ca:d6:53:08:eb:fb:
48:ff:cf:a3:15:0a:10:29:21:ee:ef:b4:06:e1:7c:
e1:1b:d6:1e:1f:2a:c5:b3:29:ed:47:ca:f9:06:ac:
c3:1f:a6:69:8e:b9:e7:64:92:2e:eb:c4:35:9e:87:
0b:31:60:98:16:99:a2:da:d2:e4:49:32:4c:3c:83:
06:f5:a8:59:4a:02:77:cf:80:7f:d6:cf:93:7b:2a:
4e:f8:9d:1e:6b:6c:6d:4b:39:9c:4d:9e:81:b5:ff:
3d:83:37:eb:ff:17:e4:14:a5:79:9d:ce:f0:7d:7a:
d6:1f:56:50:18:25:16:35:a4:19:3c:ae:65:53:32:
18:61:81:1c:df:35:99:e5:63:a6:be:72:6d:2b:cf:
ba:b1:21:ad:33:c8:32:c2:1c:40:84:ad:99:61:81:
7f:18:25:06:4b:73:19:2f:a7:63:8d:2d:37:1a:ef:
99:26:6b:09:f3:e5:87:b2:ad:26:b9:36:22:25:a6:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6F:35:6B:D1:25:AE:03:69:57:0B:E4:D7:52:74:A7:23:1B:99:99
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:de:5c:63:34:ae:b1:2e:66:b2:8d:ee:6e:a7:7a:58:ea:83:
39:fe:06:62:0a:b6:0b:f7:90:2c:81:b0:6c:74:90:9b:0e:20:
0d:b9:bc:54:57:d7:48:cd:e6:7a:3f:1d:3f:ca:da:3c:a8:e1:
83:c5:5e:e3:5c:62:39:a1:a8:c5:f4:08:89:95:4a:b4:c4:51:
eb:34:11:58:73:9c:74:8c:2a:bc:94:f0:bd:5b:43:b7:34:a3:
cd:62:d9:35:3e:03:65:d9:77:a9:7b:20:b5:43:dc:8d:2d:cc:
ff:3c:58:0e:fd:23:d8:ea:b1:4c:81:b9:bb:2f:a5:ff:64:3e:
5b:20:a5:a5:3f:44:b8:68:22:f4:b1:f5:82:48:fd:c8:a4:af:
6e:2f:30:76:8b:01:71:e0:fe:95:a1:99:67:d2:0c:fa:94:d5:
91:8f:71:7e:bc:ac:70:f5:b5:7a:11:a5:78:07:36:00:00:1d:
ec:b1:88:c3:a6:04:13:3f:af:bd:c8:bc:e6:9d:c3:94:da:5c:
16:46:73:19:3e:2a:dd:c1:59:74:e5:99:34:e2:7e:fd:11:f2:
ad:2a:c1:c2:65:c4:00:60:92:75:95:2e:7c:18:0a:a9:ee:ad:
b4:09:9f:0b:43:60:3e:be:31:9a:9f:2b:33:85:8d:14:39:c3:
56:26:3c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:36 2026 by rpki-client