Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: mOKYFx+Fr0uxfox3IwLPxpsoCreYeiewhoDBd5T/60o=
Subject key identifier: 1A:30:E0:B2:70:1A:CF:08:57:3A:5F:7F:7B:27:1D:C0:6D:97:8D:49
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 01A089E81BB9A9413793C80021B6BDBB8CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 03FA
Signing time: Thu 10 Sep 2026 06:01:24 +0000
Manifest this update: Thu 10 Sep 2026 06:01:24 +0000
Manifest next update: Fri 11 Sep 2026 06:01:24 +0000
Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: 70lqYzzaM6vxsR3OKvRHLTnclNZz5qf9DrZR9eL32Mk=)
3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e8:1b:b9:a9:41:37:93:c8:00:21:b6:bd:bb:8c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Sep 10 06:01:24 2026 GMT
Not After : Sep 11 06:01:24 2026 GMT
Subject: CN=1a30e0b2701acf08573a5f7f7b271dc06d978d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:9f:e9:3f:68:e2:8a:82:24:eb:ff:f0:e4:
b2:8d:09:4e:cd:b4:dc:89:14:85:46:b5:35:b9:bf:
3c:7b:78:41:bd:fb:95:bf:5a:99:0b:e5:96:1a:8e:
fc:6e:d6:56:e9:5d:99:ec:e3:8d:c9:fc:23:ba:01:
a0:67:56:74:07:8d:ff:86:13:c0:9c:0a:d2:7c:47:
d4:aa:a9:6e:cc:9d:90:b8:bc:b0:56:cd:f2:b2:74:
78:88:01:3d:e8:aa:7a:35:93:01:c1:03:fd:2f:88:
f5:ea:2e:8e:e1:22:87:4a:1b:37:94:4d:9c:93:59:
6a:71:1e:8d:f0:cf:43:47:a1:79:ad:78:f8:10:38:
5c:aa:e9:a2:49:8c:8b:0c:30:4a:4d:3e:71:d0:69:
92:d8:54:f7:3b:8e:2a:24:17:bd:2e:87:a9:74:a4:
67:5b:1a:53:4d:38:76:e3:c3:f9:e3:39:89:69:1e:
36:f0:e7:bc:44:ea:b3:df:42:c6:05:34:86:ed:52:
ab:da:2f:e5:a6:b8:10:27:aa:39:dd:9c:be:7a:7b:
7f:3a:88:3e:08:e4:31:6b:40:31:4a:bf:d9:4b:d4:
0c:da:87:70:c8:50:9f:c7:27:be:4b:41:1a:50:05:
f1:1d:33:65:6d:e7:10:03:b5:7d:ad:c1:32:61:47:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:30:E0:B2:70:1A:CF:08:57:3A:5F:7F:7B:27:1D:C0:6D:97:8D:49
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f7:57:c4:c8:a8:5b:ec:ed:72:9d:fe:fb:eb:d1:79:7c:f2:
da:28:dc:25:a5:8a:21:40:7c:06:a5:2f:f0:f2:c2:d5:2a:ee:
0d:5a:a7:d9:22:7e:7c:87:96:6c:11:4e:a4:ac:d2:80:18:65:
b5:0b:f9:33:dd:f1:9f:c1:c6:22:29:a5:9f:d7:c5:16:a8:28:
17:9c:97:cc:ab:6e:d2:f5:35:ef:e2:0c:0d:bd:17:2e:44:00:
2e:b2:2f:7f:9f:06:bb:26:e8:1d:a6:7f:27:00:c7:58:8d:a2:
d8:8a:53:bc:67:02:7f:fe:30:aa:0f:45:fe:0e:6f:1e:0b:17:
4e:e6:54:16:86:69:87:88:2c:6a:20:5a:3d:c9:ab:9d:9d:87:
85:2c:97:4a:7b:37:c3:69:f5:b5:a8:17:9b:49:ff:e6:98:c2:
21:f7:6a:4f:39:91:21:60:3b:61:f4:83:a3:de:10:66:c3:82:
56:d4:0f:4c:cb:33:6d:6a:77:b1:29:99:54:43:72:4e:5b:b0:
bc:7e:60:5b:e5:d1:7f:bc:1d:04:43:59:62:d9:13:ea:ac:75:
b0:b9:9b:20:20:4a:1e:48:77:ad:bc:0c:23:8f:67:90:88:26:
67:0f:2b:d6:a3:bd:48:04:6a:c4:54:81:e9:c0:13:a0:af:81:
1e:eb:02:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:16 2026 by rpki-client