Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: c8iXWC8V03NOCMiQl6OyAT7++z3oDCsHD888XHjcGiI=
Subject key identifier: D5:98:E7:10:65:87:D7:83:11:20:31:BF:AA:6A:61:1B:8B:AF:65:8C
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 019D9AAB873A58BFE07509B993C324417A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 0275
Signing time: Fri 17 Apr 2026 09:00:25 +0000
Manifest this update: Fri 17 Apr 2026 09:00:25 +0000
Manifest next update: Sat 18 Apr 2026 09:00:25 +0000
Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: hUSBZIlcXsNq0jTocg8b0jlOB+7FOVyV+vyBNWbsb9Q=)
3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:87:3a:58:bf:e0:75:09:b9:93:c3:24:41:7a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Apr 17 09:00:25 2026 GMT
Not After : Apr 18 09:00:25 2026 GMT
Subject: CN=d598e7106587d783112031bfaa6a611b8baf658c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:9a:dc:1a:44:35:fc:e5:6d:97:3d:1b:c3:
ed:94:b8:a0:ef:b2:2c:13:33:5e:b4:d7:89:27:38:
fc:05:b3:a5:27:ac:80:92:53:fc:c4:64:9f:ae:3c:
48:63:a1:69:78:c8:0a:02:82:da:6d:c8:fa:5e:e3:
3e:ff:da:50:33:f3:ba:b8:d3:89:14:1d:35:70:02:
b2:be:74:98:5c:cf:47:49:dc:1f:23:a2:7f:06:62:
9f:83:01:36:f1:c0:c4:2b:d5:64:27:a9:21:cf:20:
fb:68:f5:ad:d3:59:71:57:cc:65:3d:35:80:8b:a1:
3b:d0:af:a4:cd:4d:49:cc:f5:0d:b1:43:c0:d6:d3:
01:ac:b2:4c:cd:94:3a:ef:40:c1:4b:b8:af:a0:64:
87:5d:9a:92:d4:15:17:57:04:07:fc:46:2e:9d:87:
95:04:62:12:60:26:45:34:ed:48:13:eb:61:40:43:
ce:4a:b5:41:15:b8:b5:66:bc:39:9e:53:fa:b9:8a:
a7:79:d6:09:db:42:a9:44:71:22:7b:67:11:e7:46:
e7:42:bd:95:52:6e:a6:03:68:9d:d1:fc:4f:c0:ce:
27:bb:c3:91:b1:93:ee:50:97:78:3e:1b:c0:03:21:
75:9a:1e:98:21:06:a8:2c:6c:26:59:e4:0f:a7:fb:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:98:E7:10:65:87:D7:83:11:20:31:BF:AA:6A:61:1B:8B:AF:65:8C
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e1:05:e4:ea:80:f7:3c:ce:b8:ae:67:95:15:75:b1:f2:eb:
3c:ee:e8:70:4b:12:f6:70:f5:72:6e:90:10:80:64:d2:a2:cd:
34:b8:a3:e5:5d:48:95:1c:09:88:cf:88:dc:4f:40:fd:06:ac:
db:c7:01:70:ce:63:b7:c4:ad:5a:f5:8f:a4:1b:f1:1f:d4:44:
e6:bc:9c:e1:c6:24:9a:48:85:b2:50:e6:14:1c:87:00:43:81:
e7:24:f6:82:ad:8b:f0:04:f3:fb:4d:68:76:cf:a4:1f:d0:4f:
f4:f0:a8:10:bc:5d:04:dd:03:2b:de:8b:f8:58:3b:e7:6c:75:
98:33:16:b7:bc:09:8b:75:37:2f:dd:2a:b4:8b:5e:ea:66:af:
88:92:ba:3f:99:bc:39:62:a5:3d:14:ac:dc:c9:85:1b:22:93:
ac:98:57:64:d5:ba:fd:12:04:4b:62:10:73:0a:51:aa:be:e0:
c8:31:03:9a:f0:ff:04:fe:86:e5:c5:8f:1f:54:2d:7e:2a:e6:
73:d5:f3:7a:c9:42:9e:82:f0:92:89:4b:7a:56:4d:78:b4:c2:
ae:65:33:bb:a7:73:28:5b:46:25:b2:9d:80:d1:7a:4e:78:74:
2d:0b:34:a4:14:7c:db:d5:3d:26:75:e1:94:69:da:5f:2d:65:
f7:5e:3f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:12 2026 by rpki-client