Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: Fj07Xe/m7FYzzWavhRZ8cvj27nks3JWKOK7eWanJjjE=
Subject key identifier: 22:FA:58:35:4E:00:2B:36:AD:BE:8A:E2:E5:31:B6:4C:4C:1B:47:B2
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 019CAB346E8E91933A3A4FDAB43E2C823A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 01F9
Signing time: Sun 01 Mar 2026 21:01:05 +0000
Manifest this update: Sun 01 Mar 2026 21:01:05 +0000
Manifest next update: Mon 02 Mar 2026 21:01:05 +0000
Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: 9IVSWROP85791AKzecpDAZ3MDvDBhARe8OKYMqhv9Q4=)
3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6e:8e:91:93:3a:3a:4f:da:b4:3e:2c:82:3a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Mar 1 21:01:05 2026 GMT
Not After : Mar 2 21:01:05 2026 GMT
Subject: CN=22fa58354e002b36adbe8ae2e531b64c4c1b47b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:09:fd:de:a5:16:88:bb:26:e9:50:f4:63:
a7:d6:3a:b0:a1:3c:ea:10:4d:64:f5:0d:4e:d4:5e:
0d:d0:e9:8e:fc:53:5d:e7:71:6b:7d:10:89:db:05:
b7:fb:3b:80:21:db:0e:2f:0e:bd:70:72:7d:84:8f:
76:9f:38:cc:c7:cd:27:0a:a1:af:3e:c7:16:4e:9e:
a7:65:8c:e1:31:ef:ba:73:31:69:15:a3:77:af:cc:
d3:7a:9c:55:27:5a:68:86:27:01:3f:64:df:ed:c4:
a3:f7:40:38:63:61:c7:49:8a:ad:07:fa:d5:5c:38:
b9:8d:fd:c8:37:bb:4b:5d:ff:68:65:62:e0:da:ee:
0f:45:23:0e:6a:1b:4a:a7:af:74:79:87:63:dc:6e:
4f:60:6d:be:67:11:94:5b:33:a1:82:0e:bf:c3:78:
7f:3f:0c:0f:ce:90:64:10:18:4a:62:74:8a:06:80:
a8:ad:68:6e:e7:63:63:fe:d9:ef:40:05:90:a4:28:
75:a8:bf:76:1b:3f:8f:3d:7d:79:e0:a8:05:f8:bc:
d5:78:6f:fd:9f:70:c1:fd:45:e0:b3:5d:09:b7:b6:
23:d2:5f:20:e3:bc:5d:0e:3c:20:d2:bf:b0:07:f3:
02:7c:29:35:f1:a8:77:5a:75:e8:ef:41:b1:1e:08:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FA:58:35:4E:00:2B:36:AD:BE:8A:E2:E5:31:B6:4C:4C:1B:47:B2
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:03:d8:bd:8a:4e:a7:f1:b7:57:64:e9:fa:f7:a2:13:ec:78:
d5:6e:2b:c0:e3:f8:5d:56:7f:2c:ec:32:cb:a2:63:da:91:9a:
09:45:fd:e0:a7:c0:88:99:8f:78:5e:ea:ec:e6:13:fe:90:cf:
57:2c:f9:b4:6e:77:20:15:81:ce:b0:84:08:21:f2:78:52:75:
84:de:c3:bf:7f:04:4c:a5:20:bd:35:d8:dd:bb:a5:5a:47:5a:
7e:f0:5b:e4:e7:0e:76:80:bc:b1:d0:55:89:56:71:f8:c0:e1:
33:2e:4a:50:fa:2d:5e:8e:50:c2:0a:5b:59:f1:78:b6:d4:4c:
08:bc:5c:c9:36:d9:69:a0:b9:40:34:30:64:26:ea:bb:e9:b2:
8f:f9:cc:10:89:ee:5e:33:e0:6b:9e:dc:82:20:2e:78:20:3a:
9a:06:6b:85:fd:67:6e:dd:e3:f9:ed:b6:2e:95:7f:bc:d3:ae:
5e:57:f8:f7:ba:be:82:7b:9c:bc:58:3b:13:1c:37:ec:b0:eb:
87:51:c6:45:4f:29:22:8d:44:5f:59:07:1f:70:62:37:be:22:
63:07:26:fe:67:7c:83:a4:1b:17:f5:48:5f:0a:2b:15:db:38:
a6:21:dc:25:9d:97:68:4f:ad:3f:4a:e2:bd:48:3b:37:db:3f:
fc:b4:f3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:22 2026 by rpki-client