Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier: 0j5i0Z6h3NMRePE5os5mHpWbc8rJggepLnJ43SNbL60=
Subject key identifier: B7:FF:95:54:EB:DB:CA:AB:77:F3:DC:6D:CE:76:AE:C0:AF:CC:B7:84
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 019E1E34F1D96CF374CF8AE790433415AAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number: 1217
Signing time: Tue 12 May 2026 22:00:46 +0000
Manifest this update: Tue 12 May 2026 22:00:46 +0000
Manifest next update: Wed 13 May 2026 22:00:46 +0000
Files and hashes: 1: 0549ZLBzM4beeKAOhluORbZXoyA.roa (hash: WowH9si60Z2zpExgKOKJlrVy2XcJuZgBQ4vzt0r71L4=)
2: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: R+2aOmPwNOLo35ZKadS62MMsxjy1kBIwEFKp/o8O61M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:f1:d9:6c:f3:74:cf:8a:e7:90:43:34:15:aa:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: May 12 22:00:46 2026 GMT
Not After : May 13 22:00:46 2026 GMT
Subject: CN=b7ff9554ebdbcaab77f3dc6dce76aec0afccb784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:6e:46:f9:a8:27:35:18:92:83:26:3d:90:
d5:1d:eb:47:b0:ee:66:92:65:99:e5:d5:09:35:e5:
23:8d:ae:fc:82:66:b4:ff:d4:83:08:c3:8c:88:17:
6c:4f:1e:e8:17:22:91:9f:28:5c:9b:dc:97:8e:39:
4c:b6:d5:c6:21:57:bd:f8:42:ee:70:fc:c1:48:92:
9e:4b:db:0a:fc:47:16:30:91:04:84:d9:75:f9:82:
75:49:28:a0:a8:ba:89:b4:5f:3f:92:14:60:aa:79:
62:21:3c:ee:27:8e:84:ff:77:e4:b4:1a:80:1b:3a:
9e:ef:68:19:5d:44:1d:0e:20:52:d3:d1:b3:61:f9:
66:61:30:9b:22:07:26:9b:b2:18:c9:c4:39:47:6d:
00:14:fa:1b:d0:34:e6:d4:ff:02:83:3f:f9:ba:2e:
d2:6d:88:76:88:ff:84:15:f0:cb:ad:db:56:34:19:
32:7f:25:29:34:99:11:0c:f5:66:31:b3:1d:42:d6:
15:cb:a6:06:c6:df:b1:f1:29:3f:92:c8:85:61:e4:
7a:d5:b3:f7:f1:bd:da:47:33:e3:b2:bf:17:db:e7:
00:81:0a:cb:77:c4:78:d7:b7:55:9a:c0:46:ce:03:
f0:9b:b5:d2:24:fb:ce:13:84:b4:b1:89:18:c3:2e:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FF:95:54:EB:DB:CA:AB:77:F3:DC:6D:CE:76:AE:C0:AF:CC:B7:84
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:78:c5:7e:25:11:11:f3:c8:fa:b2:4a:ad:a7:c5:67:a4:75:
1a:5e:12:b1:68:51:e0:c9:65:d0:ef:05:ab:58:d9:67:b2:49:
44:b3:54:c2:44:29:d8:97:f1:89:ee:9a:0b:71:3b:c0:1a:20:
7d:3c:ad:28:ed:c7:26:03:df:2c:80:a5:e1:87:a4:89:c2:34:
ad:06:51:d2:09:05:f3:0f:fc:f4:a3:94:14:ea:ea:0b:3b:8a:
0a:a2:48:3e:42:e3:31:8e:82:21:6f:6b:9c:90:51:03:dc:44:
46:18:46:be:3a:47:10:e1:13:7b:9b:41:32:91:bc:e3:cb:5b:
1e:9b:0c:b8:c4:d0:bb:cc:4f:96:3c:84:04:e9:fa:27:90:5b:
01:c6:8c:d9:d0:c3:42:cb:89:e5:fb:d2:d7:8a:7b:c9:9f:9e:
94:1c:68:2d:2f:7d:f8:56:73:bd:81:1c:c8:96:12:1a:74:f9:
32:65:d5:8f:b3:3d:c1:c4:77:51:26:f8:cf:cf:12:08:5a:47:
fb:df:8b:5b:5b:04:f5:82:5c:be:80:6e:41:e9:7b:9f:dd:7e:
60:ac:71:97:92:24:e9:88:a0:59:4a:00:af:29:1a:1d:db:2a:
6f:5a:f8:bc:d5:d5:4b:61:f5:cd:fa:c4:f6:57:55:fd:ef:87:
97:03:ad:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:04 2026 by rpki-client