Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier: fgerG5NwYYpDnkDUDn+RqcZoNQq8rLrNvFJCc5sKRN4=
Subject key identifier: 12:1A:BF:99:7D:4C:DF:A3:6D:9A:C1:63:60:91:D1:F7:81:C7:17:44
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 01A0D19245E15229E2B609147B96BB89C4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number: 137D
Signing time: Thu 24 Sep 2026 04:00:19 +0000
Manifest this update: Thu 24 Sep 2026 04:00:19 +0000
Manifest next update: Fri 25 Sep 2026 04:00:19 +0000
Files and hashes: 1: 0549ZLBzM4beeKAOhluORbZXoyA.roa (hash: WowH9si60Z2zpExgKOKJlrVy2XcJuZgBQ4vzt0r71L4=)
2: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: w3mn2QSXBgHKwijEyCWEUhUAFkeOkquPr6/bHYnJSa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:45:e1:52:29:e2:b6:09:14:7b:96:bb:89:c4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: Sep 24 04:00:19 2026 GMT
Not After : Sep 25 04:00:19 2026 GMT
Subject: CN=121abf997d4cdfa36d9ac1636091d1f781c71744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d6:4f:a9:7a:c6:5d:db:7b:b3:a9:db:c3:4c:
f3:db:d2:17:a4:8e:de:47:2d:88:a6:35:dc:a9:42:
f6:34:3d:15:b8:f9:f6:47:04:53:f7:09:38:ef:30:
49:03:62:c9:be:09:08:f4:77:62:08:95:32:28:64:
cc:55:02:a2:a9:c9:06:9b:f6:24:65:32:8a:79:a0:
13:cc:35:ad:2d:6b:ec:ec:28:01:ad:eb:3c:85:4f:
57:16:34:bb:fc:43:fe:03:1e:f6:04:60:6c:59:74:
fa:62:09:e8:66:23:0c:eb:dc:d0:1f:a9:57:f2:c4:
59:b9:3a:8f:d3:80:15:92:60:16:5f:32:41:72:c1:
f8:43:0d:13:64:b1:b5:33:19:55:40:db:89:1f:c9:
0c:a7:e4:9c:b7:6b:ae:b5:03:46:86:16:fe:31:3c:
3e:d1:82:91:9b:90:2f:e0:d4:f3:bf:ee:d0:d9:f2:
11:34:3b:ef:15:ef:28:0e:b1:11:4c:5d:8f:6d:f9:
da:9e:fd:95:9a:bf:02:f7:3d:74:e9:90:96:19:74:
3e:c8:27:6c:89:30:00:77:36:0a:06:69:02:9a:d1:
9b:82:4a:f5:bd:84:7b:77:ec:2c:06:2e:9a:b2:8e:
f2:ec:9b:7d:f3:9a:99:12:f0:60:75:3d:05:4f:6e:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1A:BF:99:7D:4C:DF:A3:6D:9A:C1:63:60:91:D1:F7:81:C7:17:44
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4d:83:ea:23:37:4d:36:f6:fa:22:6e:a8:dc:6e:6a:c2:2e:
a7:6c:2c:47:47:39:4a:e3:e1:fd:6b:63:25:dc:90:7c:e1:14:
6e:21:35:de:a8:ec:08:7d:cd:38:ab:04:57:a3:6d:3c:72:00:
32:59:c8:11:87:ca:2a:19:d4:1c:a9:a7:16:50:28:8e:be:af:
a6:7e:6c:a4:ac:38:ba:d7:f2:66:57:ae:d1:4b:da:9e:92:82:
8a:12:ed:6b:a4:06:51:f7:9a:65:e0:a9:63:c2:e4:78:f2:25:
31:54:98:b4:31:6a:7c:48:e1:13:f1:a8:2d:66:b9:29:bb:61:
b0:14:76:de:ed:85:f9:40:fb:2e:08:f7:47:51:33:84:30:c7:
93:db:a9:2c:39:af:64:09:2f:1d:9c:0a:5d:b1:15:30:aa:23:
f7:66:af:13:0d:5d:ee:d3:b1:7d:f2:c3:8a:bd:0f:a7:bf:04:
62:39:20:92:92:25:4f:eb:bb:d7:c1:d9:71:65:59:47:54:43:
6f:57:71:31:36:3d:d9:fd:a5:8a:e2:85:cb:31:5f:6e:eb:ac:
5e:4b:b4:e9:19:9a:43:5e:b6:36:56:10:63:5e:28:13:14:02:
8b:d8:66:b7:4d:e3:4a:ec:a0:ce:9c:e3:46:8a:13:c3:63:49:
b4:fb:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:55:21 2026 by rpki-client