Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: Gw9JTEDUxuocKvC1xzIGbfsiFCGZLREz7HkPg3oOs/A=
Subject key identifier: 89:6D:44:88:96:11:14:B5:3B:86:62:89:A4:C3:DE:F1:82:3D:BC:96
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 01A17B4D047C851E3E93E0B41E03DEF78ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 0477
Signing time: Tue 27 Oct 2026 03:00:07 +0000
Manifest this update: Tue 27 Oct 2026 03:00:07 +0000
Manifest next update: Wed 28 Oct 2026 03:00:07 +0000
Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: /f2374lbp/nNM31Otit8xdEs+F/RvhKMJ8B0fp9aMZ0=)
3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:04:7c:85:1e:3e:93:e0:b4:1e:03:de:f7:8a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Oct 27 03:00:07 2026 GMT
Not After : Oct 28 03:00:07 2026 GMT
Subject: CN=896d4488961114b53b866289a4c3def1823dbc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:f4:5b:ed:55:d3:52:af:f3:09:30:cf:e4:
26:08:6b:b3:34:ee:83:12:81:b8:9c:cc:35:0f:a9:
e3:07:77:1c:4e:00:a2:46:42:a9:fe:08:6f:76:3a:
78:26:88:ea:10:4c:2f:35:e9:3f:0d:eb:8d:19:8b:
57:f7:73:63:8c:98:c0:62:f8:7f:e8:64:d7:9c:a6:
58:1f:10:b0:e7:50:d3:49:61:d6:14:1c:f2:5b:88:
2c:70:1d:de:9a:38:e6:0e:87:94:a0:3c:b6:7d:ac:
93:53:ed:69:37:4a:e0:8f:e0:cc:16:0b:a8:b3:08:
7b:0a:7b:fc:47:24:c5:2b:b6:86:71:26:80:4a:69:
15:d6:2b:fd:bc:b4:9f:df:65:dc:d9:69:7a:86:8f:
a3:0b:70:11:a9:a0:12:01:01:e2:07:30:c6:49:16:
d0:b5:e1:73:37:45:9d:46:23:89:e7:e7:88:03:a3:
d2:af:fc:88:31:77:c0:55:f6:13:ca:70:75:84:a1:
6d:6f:88:88:38:cb:dc:65:a2:0b:3f:14:4a:c6:ec:
d9:66:44:55:55:df:ce:d0:57:21:3c:f4:9c:7d:4c:
b1:d3:ee:57:fd:a6:49:45:3f:68:42:ad:85:03:f7:
55:4e:23:a8:09:a1:ee:82:a4:dd:ee:3c:d1:23:7f:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6D:44:88:96:11:14:B5:3B:86:62:89:A4:C3:DE:F1:82:3D:BC:96
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0b:b3:38:b9:1c:c2:28:aa:58:ab:b1:bf:4b:4d:8b:72:c4:
18:13:3d:43:99:2c:6b:77:e3:82:f4:08:fe:8a:ea:14:bf:67:
2f:52:bd:86:d5:17:51:16:04:92:fc:ab:85:f5:5f:40:cb:4f:
a6:91:62:1a:ff:23:c5:05:98:34:48:93:73:09:21:a7:42:71:
c9:16:d0:c0:3b:22:a8:05:ef:87:38:e7:45:3d:22:64:98:e9:
d0:9d:77:13:da:9c:3e:bb:8d:25:93:2b:70:70:52:3d:1f:14:
a5:30:5d:33:60:7a:3c:43:0f:6e:39:e9:a0:97:17:3b:ca:75:
93:42:ea:8c:bf:e2:57:22:10:ca:86:41:7d:86:b8:3f:a7:e7:
25:67:dd:bb:6c:e1:32:c6:95:e9:bb:e0:07:0a:90:d2:fa:96:
03:f1:b9:8e:ce:e9:6e:b4:83:4c:a4:eb:27:d0:a2:56:44:2e:
93:ef:25:06:a7:81:42:8a:b2:24:b2:dd:d5:aa:69:1d:34:75:
bb:fb:07:98:0b:94:a8:61:fe:d7:e6:ee:6d:49:f7:33:41:2e:
f9:88:35:c3:80:55:54:97:99:1c:b5:90:fa:34:77:e1:70:52:
7c:f3:8f:12:38:f0:c3:27:70:8b:05:a3:39:10:20:e7:eb:78:
7c:51:7d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:20:36 2026 by rpki-client