Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: IrOlvX8IK80hvT9A1AChPFGW8RnNE5gATmFPDvaTvfA=
Subject key identifier: 24:0D:DE:85:F7:7E:D9:F5:4E:0B:B7:5D:3D:3E:2F:6E:C9:1A:81:57
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 019FA9E31940CBCB20788D28E5187EF2760D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 0386
Signing time: Tue 28 Jul 2026 18:01:00 +0000
Manifest this update: Tue 28 Jul 2026 18:01:00 +0000
Manifest next update: Wed 29 Jul 2026 18:01:00 +0000
Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: WCdKDIJBt0oJ7L+WfZ4oJ8XE5ro+Z2Z0ZnWuzUuALro=)
3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:19:40:cb:cb:20:78:8d:28:e5:18:7e:f2:76:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Jul 28 18:01:00 2026 GMT
Not After : Jul 29 18:01:00 2026 GMT
Subject: CN=240dde85f77ed9f54e0bb75d3d3e2f6ec91a8157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:7b:34:aa:86:7a:56:78:9e:68:1f:57:ea:
d5:32:60:a7:fd:7e:62:47:ef:3b:ca:bd:00:5f:b3:
72:05:b0:8b:d7:43:96:97:9f:81:67:df:04:df:24:
9e:4f:e2:cb:39:6f:79:0c:c2:2e:9e:26:ad:c6:65:
d0:03:5f:ea:37:3a:ee:6e:76:d4:7e:2e:78:7c:67:
c2:d9:3f:a9:8d:ab:09:fb:a6:75:b7:46:15:13:19:
00:de:1c:1a:16:71:de:23:af:58:7f:52:3b:4b:d5:
e5:83:b7:8d:c6:f2:a6:fd:34:5b:cf:a4:70:d1:a2:
44:99:a8:79:bf:5b:b0:ef:4e:03:a5:85:86:40:ae:
e6:06:39:37:ac:e0:5e:71:b1:b4:2d:a9:dd:f9:11:
48:bf:77:9d:91:9d:ed:22:bf:99:31:ed:47:d1:c2:
d2:ae:33:0d:26:5d:86:24:5a:19:a3:52:8c:cb:a8:
6c:2f:0f:39:e2:11:05:78:75:4e:19:30:d1:17:11:
d3:53:b8:98:19:26:fd:47:7c:b4:86:5f:b9:08:c6:
ea:de:c1:78:47:72:8e:eb:f5:47:81:45:31:01:dd:
9c:cc:03:a6:65:18:cc:66:f8:0d:34:51:a7:d8:5c:
2c:cd:25:80:73:80:8e:a9:a9:e7:f6:83:fb:80:ea:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0D:DE:85:F7:7E:D9:F5:4E:0B:B7:5D:3D:3E:2F:6E:C9:1A:81:57
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a3:f1:1a:4e:94:fd:a2:39:61:01:e8:de:98:0a:33:49:6a:
86:f9:42:28:42:72:f3:ff:c9:71:43:9d:aa:84:28:1e:47:c2:
ce:53:a5:47:14:1b:db:74:f9:12:27:37:08:80:c4:8d:52:fd:
7e:c6:74:8c:ca:77:db:0f:d3:3d:68:12:58:32:2b:ac:dc:05:
95:fd:26:ae:2c:8b:7b:b7:a6:1c:f3:93:9c:40:ae:d3:b4:56:
3a:5c:e8:5b:dd:ca:40:65:97:7e:3f:6d:8f:47:78:1c:90:bc:
fd:8c:3b:0d:88:0c:0b:b5:bc:ea:1a:ff:db:13:bb:e0:49:ba:
18:cb:54:1e:20:de:80:45:a8:33:d0:67:b9:da:07:7e:6d:66:
bc:7f:5d:c5:ce:e4:5c:9b:33:7d:f1:b4:9b:3f:fb:21:46:74:
b1:3f:1a:15:1d:9a:bf:4a:d4:1e:b1:1d:36:37:3b:9a:96:dc:
be:84:ee:49:29:f1:43:e5:47:31:d2:ac:90:b8:55:b3:01:1b:
bd:05:c1:8c:35:64:79:88:f7:1a:da:15:10:50:17:45:08:1b:
6a:0a:68:3f:cd:3a:d6:82:f4:38:90:37:7e:a3:7a:15:37:b9:
03:e3:54:89:bf:d8:36:a3:fd:f8:b3:b0:21:de:4f:06:c7:50:
72:bf:29:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:56:37 2026 by rpki-client