Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: kueu7tabx04Y2K/22kWScPbqQLsu9DRpLWPG/i/vTj8=
Subject key identifier: 2B:39:D9:9E:68:B5:6F:74:53:7D:09:DA:DB:05:D4:E5:5F:FF:86:53
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 019D3A1C53BF666BA07F42D68DB96A831D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 0243
Signing time: Sun 29 Mar 2026 15:00:28 +0000
Manifest this update: Sun 29 Mar 2026 15:00:28 +0000
Manifest next update: Mon 30 Mar 2026 15:00:28 +0000
Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: TSX4Au1X8rJX3JKAHvWIF8maWjyx2qlTJIjnKutj3ZY=)
3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:53:bf:66:6b:a0:7f:42:d6:8d:b9:6a:83:1d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Mar 29 15:00:28 2026 GMT
Not After : Mar 30 15:00:28 2026 GMT
Subject: CN=2b39d99e68b56f74537d09dadb05d4e55fff8653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:1d:c7:6b:56:ae:64:42:ab:f1:60:dd:8c:
1a:f2:c3:68:08:a4:44:2e:e0:ad:dd:6e:a3:a9:06:
1c:8f:a8:5f:06:d1:39:25:21:fd:5d:33:37:4b:04:
43:cc:93:6f:72:17:da:67:83:b6:1f:b3:cd:ef:49:
7a:4e:1d:39:7c:43:73:dd:e3:5e:15:eb:46:dd:71:
ed:79:ac:62:02:6c:6b:0f:32:fc:1d:bc:75:f8:2e:
b7:6e:c8:ef:06:55:8a:ee:fa:9a:ac:69:51:f3:06:
84:3a:87:14:92:61:6a:fe:e8:5c:ba:a8:c4:c6:0a:
4c:97:2c:57:6f:2d:13:e2:1b:11:21:99:c3:88:9c:
29:a3:2e:82:eb:e7:9b:d7:54:3d:57:cd:80:ba:c5:
5b:2a:48:e9:e3:f4:bc:0a:06:ce:e4:a9:b2:ee:cb:
25:59:da:48:14:e7:75:b9:c2:eb:34:24:60:3f:d5:
62:0f:b5:72:9d:1a:4c:7a:7c:eb:0d:ff:0d:dc:5f:
65:4d:10:61:dd:e2:84:3a:82:b6:f5:9f:61:34:e2:
53:9c:e2:49:60:7e:75:cc:b9:ec:da:98:27:49:37:
93:2c:f6:a9:41:64:da:7e:85:da:09:b5:6e:2f:1c:
ce:76:a3:32:8b:7a:53:3b:a2:aa:f8:35:ff:f8:93:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:39:D9:9E:68:B5:6F:74:53:7D:09:DA:DB:05:D4:E5:5F:FF:86:53
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2e:08:10:ad:c3:e9:33:c7:df:6e:f7:09:fd:81:5e:e9:c4:
c5:d4:d2:56:9b:f0:58:48:2e:e1:46:70:24:1c:31:95:37:a1:
25:7e:83:13:6e:df:ff:54:66:15:71:36:66:4f:b7:a0:c3:ed:
51:76:a9:6a:b8:99:78:4c:90:bf:47:4e:21:fa:41:4c:2d:c4:
1b:11:f6:24:9b:07:f2:5f:64:9e:d1:7c:08:22:e7:40:4d:94:
54:d9:61:95:76:43:62:c0:78:05:ba:45:f1:90:4d:30:1f:15:
da:72:6d:1a:4b:77:51:10:1b:3b:d5:3b:6d:77:7c:ed:38:5f:
c9:34:79:a0:f2:51:7b:b5:11:6c:e5:bb:1f:de:5d:16:e7:1e:
c8:37:10:6c:98:45:d0:7d:34:a2:93:9a:92:ca:e7:fd:92:1f:
ac:3e:ed:e2:e8:9c:a4:34:1c:f4:93:9d:8e:bc:58:6c:43:06:
aa:de:e7:6c:42:42:26:ca:c2:37:b7:d9:87:4c:07:89:ee:b5:
02:69:f6:ec:57:47:6d:8d:5c:90:ab:12:d1:87:85:b8:d5:95:
ab:dc:cb:5f:3a:8e:e9:b3:d8:4b:fe:32:a3:f1:24:8d:bc:4b:
3b:b6:e4:95:fb:7c:b5:99:b1:ab:8b:5b:8d:f4:16:07:de:49:
0e:a2:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:19 2026 by rpki-client