Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier: fZXZhFIQav56PP2ZL6rwg0f5oJl1DvjYd/yD6IBfCwQ=
Subject key identifier: 5F:D2:6B:75:D2:51:8C:A1:B7:0A:95:8D:F8:8D:A5:D3:0B:1B:47:34
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 019FAA1A22228D042EB59AAF4C56C700015C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number: 12E4
Signing time: Tue 28 Jul 2026 19:01:07 +0000
Manifest this update: Tue 28 Jul 2026 19:01:07 +0000
Manifest next update: Wed 29 Jul 2026 19:01:07 +0000
Files and hashes: 1: 0549ZLBzM4beeKAOhluORbZXoyA.roa (hash: WowH9si60Z2zpExgKOKJlrVy2XcJuZgBQ4vzt0r71L4=)
2: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: wYWxZmF36mobT/gZ0JStxMhRMss3O4wpXRcgQjcK544=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:22:22:8d:04:2e:b5:9a:af:4c:56:c7:00:01:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: Jul 28 19:01:07 2026 GMT
Not After : Jul 29 19:01:07 2026 GMT
Subject: CN=5fd26b75d2518ca1b70a958df88da5d30b1b4734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:57:a2:d5:a0:8f:36:e0:95:54:d7:f0:8e:
e2:72:52:7c:3e:2c:55:5d:d2:72:6a:8d:b4:77:3e:
40:b6:4e:14:e4:1a:0a:75:60:c4:d1:97:12:5b:e9:
40:94:78:79:8b:0d:49:fc:43:7c:18:cd:4b:38:f4:
b7:a4:09:8b:32:e7:36:c4:ee:0f:f2:12:b7:60:89:
45:d6:c6:69:c6:30:04:3f:a5:53:2f:cf:90:ce:a3:
76:0b:d2:26:d7:0c:26:49:68:94:68:88:10:eb:68:
a5:6b:0d:7f:49:ab:c7:a5:f0:3a:65:5c:61:f8:5c:
05:5b:b2:fc:b4:38:39:13:1b:93:33:da:da:3b:a4:
f8:82:df:3b:3a:10:b9:11:b8:c4:82:c2:e1:fc:57:
39:43:91:50:7c:5e:b3:37:b3:b2:26:4c:9d:80:05:
55:7f:b9:8a:57:b5:ba:77:2e:1a:04:71:6c:99:3d:
d2:f3:dd:3b:38:cc:72:46:66:6c:11:80:81:2d:48:
d8:f0:8d:ce:b0:b8:ce:ad:f2:8b:70:32:1a:45:08:
c9:b1:ff:e1:11:7c:06:a6:a8:71:58:5d:10:18:7d:
47:41:7d:34:89:64:6b:67:aa:68:60:4a:2a:41:54:
e8:ca:f2:77:31:2f:c5:17:72:d2:a9:49:fa:c4:db:
4d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D2:6B:75:D2:51:8C:A1:B7:0A:95:8D:F8:8D:A5:D3:0B:1B:47:34
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:83:2c:2d:c8:ac:6d:00:98:56:3a:8e:eb:8a:cf:1f:da:fd:
05:36:d7:f7:f1:e2:9f:a2:4b:02:1f:36:fe:fe:27:d8:7b:2a:
6b:53:f3:c8:2d:f6:1e:5e:f8:c4:30:99:3e:f5:42:ea:11:f1:
fc:1a:ac:06:47:91:db:1e:54:86:57:0c:18:b3:b1:e0:43:48:
68:7a:83:06:04:f0:62:03:05:89:87:ec:6e:bf:e6:ac:b7:b2:
ec:be:66:91:d4:78:b9:6f:44:09:1c:44:00:e8:03:6e:03:66:
5c:cb:a4:0f:0a:d1:4c:0a:ae:18:6c:ea:12:2c:3d:f2:00:04:
c4:1b:3a:11:36:43:ad:f3:2c:09:af:dc:76:6b:96:1c:e5:d0:
40:ea:a9:4a:da:7c:0f:5c:16:91:55:c5:5a:e8:2a:ab:94:51:
9f:2b:44:73:94:92:e1:ae:27:98:a6:6e:22:ed:25:e1:f2:fe:
dd:c2:fb:7c:97:85:5d:35:cf:c7:a1:48:34:d2:cc:3a:c1:b4:
96:4e:d6:c7:9c:58:4d:dd:32:18:8b:32:75:05:15:91:48:31:
44:3b:70:1d:7f:3c:f6:df:a2:b1:ce:b1:fa:74:0d:35:5d:2e:
6c:42:48:b3:33:71:72:ce:94:c6:dd:a0:0e:6b:03:f6:a0:07:
7e:32:c4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:06 2026 by rpki-client