Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: DS/45B6rgHZ9YUPz697bFH0zUeR1Atxr7R0Jsk0lfrE=
Subject key identifier: C1:52:CA:83:FC:47:48:D8:2C:A6:F1:A2:C7:8E:88:AF:36:E4:41:94
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 019FA2297B8CC1CE552CC9AE70782CA8E134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 0382
Signing time: Mon 27 Jul 2026 06:00:55 +0000
Manifest this update: Mon 27 Jul 2026 06:00:55 +0000
Manifest next update: Tue 28 Jul 2026 06:00:55 +0000
Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: bUV/AjahTNyFTssQ9x7fEKE7SawxHcdkbulZpzubWFs=)
3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:7b:8c:c1:ce:55:2c:c9:ae:70:78:2c:a8:e1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Jul 27 06:00:55 2026 GMT
Not After : Jul 28 06:00:55 2026 GMT
Subject: CN=c152ca83fc4748d82ca6f1a2c78e88af36e44194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:fc:be:bd:25:e9:af:97:b3:62:69:95:78:
49:3f:55:a8:83:db:e4:3c:be:7e:71:38:61:e6:a0:
e4:af:8d:f5:d0:7b:f7:e2:5e:a3:16:43:5a:28:1f:
5f:0c:82:56:81:34:1c:e8:84:9e:da:fe:74:bd:82:
b4:09:4e:b3:b7:2f:d0:82:c4:92:b8:74:2e:0f:2e:
76:9d:dd:cc:c5:87:a1:a8:37:08:1b:e8:07:3d:2b:
2e:90:e5:27:54:23:00:32:92:18:5d:a8:38:d7:da:
53:45:cd:54:ef:1a:52:38:cc:b1:38:27:aa:9f:27:
c4:ff:24:ce:c7:ee:bc:9b:30:53:3e:b1:48:b8:21:
55:0d:e2:ea:39:b9:d8:0e:eb:64:21:d8:5b:e2:74:
d8:57:88:62:dc:a0:2a:9d:c9:3c:b4:29:10:76:f1:
08:ab:9d:db:1d:92:b9:31:2d:70:0b:7d:fe:a7:f7:
49:c5:80:ac:df:f1:90:9e:f8:99:35:c5:93:78:a7:
59:8c:1b:f3:f4:17:3d:91:b0:53:00:4a:28:dd:b4:
9e:a3:90:41:a5:e5:31:8e:18:bb:b1:6b:11:36:45:
28:81:e2:86:2b:7f:c4:e8:5c:da:c6:e4:8a:a7:f0:
86:7a:e8:43:ae:f8:46:22:bd:38:09:5f:6c:7b:21:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:52:CA:83:FC:47:48:D8:2C:A6:F1:A2:C7:8E:88:AF:36:E4:41:94
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:eb:66:78:2c:1d:02:bd:73:cb:de:93:1d:4d:50:66:d6:40:
a9:15:6b:cb:8e:81:05:95:71:9e:08:16:b0:d8:c4:12:88:e1:
2b:40:34:f0:1a:fd:e0:a8:26:0c:75:19:3b:7d:f6:d9:a8:a0:
54:23:9a:0d:3c:ad:79:2b:4c:05:85:58:46:dc:78:16:f7:de:
5c:6d:69:f5:5c:c3:fe:90:ed:84:12:b7:3b:44:11:db:4d:75:
0c:11:8f:e0:05:fe:fe:f3:67:7b:c5:09:7c:ad:33:b5:08:1a:
55:00:1c:45:5e:cd:e8:10:25:0d:d1:be:51:e4:e1:7e:24:52:
27:84:23:39:44:e2:6d:5f:1a:d2:8c:c6:86:12:9b:1e:50:36:
81:d6:c2:73:75:72:70:d5:64:e5:11:f9:78:49:0a:7b:ec:24:
c7:12:ed:e2:08:f6:e3:94:08:c8:cb:25:c6:2c:cf:dc:74:b5:
c0:c3:5f:18:c2:ce:0f:af:81:22:b1:73:50:8f:c5:0a:b3:58:
d4:4f:cd:c5:bf:54:ba:99:a4:19:ce:70:ff:cd:c4:2d:32:0d:
f0:e7:30:5e:6f:2d:fc:08:90:c4:8e:b9:f0:82:93:66:5e:42:
52:02:eb:ed:5e:47:e4:49:d4:0c:c7:b1:3a:7a:91:52:63:46:
da:12:e0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:54:20 2026 by rpki-client