Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: IN4vDnhGgzj7ZFp9806AGAaqJtn+Llf8m/IPJYZ3jkQ=
Subject key identifier: 7C:47:D7:54:76:4D:DD:63:63:99:37:CB:71:30:63:D4:5E:23:04:97
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 019A22C0967C7E842E2B834CFE6308196547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: A9
Signing time: Sun 26 Oct 2025 23:00:37 +0000
Manifest this update: Sun 26 Oct 2025 23:00:37 +0000
Manifest next update: Mon 27 Oct 2025 23:00:37 +0000
Files and hashes: 1: 2l62dAKm04WNCR-je-bPkSJnLtk.roa (hash: nr1ofanqNDye36o5ymwo4drebXuJubRmduTbD4ErXCA=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: MVpRdXx7ZP3PBkI9YqJN42UocAMG/Ht9zU0oaGZbV0k=)
3: KZbQxsiRHs5YN9o-TB41tup8grs.roa (hash: lbxZF46nVuZIlOO3tq5CMkFz19fAyL6hszjHRAwWgM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:96:7c:7e:84:2e:2b:83:4c:fe:63:08:19:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Oct 26 23:00:37 2025 GMT
Not After : Oct 27 23:00:37 2025 GMT
Subject: CN=7c47d754764ddd63639937cb713063d45e230497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:50:ce:e8:8a:d4:87:17:de:63:07:8b:b3:
f4:f6:2c:d3:96:5d:51:7f:44:d6:76:9e:91:c4:67:
4c:da:56:91:4c:81:ae:8a:84:0e:9f:42:fc:ac:52:
10:0f:d0:88:0f:ca:60:6d:ef:41:ff:b0:69:80:eb:
ef:d8:b7:96:41:63:52:a9:3d:ed:e5:a4:a7:af:18:
4b:7f:0e:49:e5:46:39:d6:8e:0a:be:ca:2f:03:7a:
23:d7:26:6b:b6:06:be:c2:cf:e4:b0:ea:2b:3f:3b:
c6:cd:0e:52:a4:b7:22:88:b5:37:4f:d0:49:9e:0f:
45:6e:fc:71:61:ac:9e:4f:71:f0:0f:20:e2:4b:1b:
3a:eb:24:e2:50:b0:cc:32:09:db:9c:82:69:7d:c7:
08:8e:4e:34:b3:46:0b:19:ec:66:f4:50:4a:06:54:
11:92:51:16:f7:90:0d:94:03:ef:4b:87:4d:ae:4a:
f7:7f:eb:9d:7e:22:c9:cb:41:f7:74:e3:b4:c3:f3:
ea:f2:4b:43:d9:f2:85:4a:e5:f6:a2:37:c9:e5:43:
1d:e5:b0:15:fa:52:96:5e:00:72:ff:8d:0a:37:10:
c1:a9:b7:51:92:aa:13:93:d0:e3:c3:a2:af:27:42:
35:a0:d4:81:8f:33:95:a3:a0:8d:32:03:cb:b8:63:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:47:D7:54:76:4D:DD:63:63:99:37:CB:71:30:63:D4:5E:23:04:97
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5f:31:ba:1c:6f:88:72:f0:f4:cb:97:9c:44:c0:6e:e5:a2:
63:91:88:f0:78:6f:38:9f:c4:ad:31:d1:07:67:96:12:0e:c6:
23:06:8c:f3:7b:57:57:33:13:96:89:ea:a8:54:98:6c:75:23:
b8:2b:86:78:ce:f3:cb:ef:41:71:11:57:a7:f3:dc:bc:01:71:
9b:4e:61:3c:da:ae:2c:67:e4:28:84:39:c7:18:14:85:fb:8f:
de:3f:f4:82:65:d5:00:ff:86:0e:b1:48:7f:1a:c2:f8:01:a3:
f2:2f:0d:ae:04:d1:50:1b:36:0b:1c:3c:1f:d5:22:01:fe:db:
06:d3:c1:a6:aa:d1:53:d6:a7:b3:5e:09:72:12:8b:d0:44:7c:
e0:cc:9d:3b:37:cd:2b:e0:95:aa:cf:6c:0b:d7:88:d3:89:fb:
7c:3a:3c:b0:7f:21:7d:c7:14:f1:79:63:8a:78:32:ce:44:1c:
a6:b6:f9:7b:fe:e6:0a:d7:60:4e:c1:80:f6:b5:71:fc:5c:f3:
78:23:4b:9c:59:fd:0c:4b:c1:b0:26:74:d6:e6:1c:b0:f9:f0:
b2:0b:7b:11:81:dc:5b:ad:d5:d6:2d:0b:ca:e6:d7:84:8f:be:
fc:53:33:5a:21:4c:1a:06:05:27:f8:57:3e:fa:1d:9d:3a:6c:
8c:ce:48:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiwJZ8foQuK4NM/mMIGWVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwM2Y1NTAwYWVmZTZhYjRkYmRlMTI0MDczYTM3YmMwZGMz
MzFlODAwHhcNMjUxMDI2MjMwMDM3WhcNMjUxMDI3MjMwMDM3WjAzMTEwLwYDVQQD
Eyg3YzQ3ZDc1NDc2NGRkZDYzNjM5OTM3Y2I3MTMwNjNkNDVlMjMwNDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48ZQzuiK1IcX3mMHi7P09izTll1R
f0TWdp6RxGdM2laRTIGuioQOn0L8rFIQD9CID8pgbe9B/7BpgOvv2LeWQWNSqT3t
5aSnrxhLfw5J5UY51o4KvsovA3oj1yZrtga+ws/ksOorPzvGzQ5SpLciiLU3T9BJ
ng9FbvxxYayeT3HwDyDiSxs66yTiULDMMgnbnIJpfccIjk40s0YLGexm9FBKBlQR
klEW95ANlAPvS4dNrkr3f+udfiLJy0H3dOO0w/Pq8ktD2fKFSuX2ojfJ5UMd5bAV
+lKWXgBy/40KNxDBqbdRkqoTk9Djw6KvJ0I1oNSBjzOVo6CNMgPLuGP9mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxH11R2Td1jY5k3y3EwY9ReIwSXMB8GA1UdIwQY
MBaAFOA/VQCu/mq0294SQHOje8DcMx6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDct
M2FjNTY1ZGNkZjczLzEvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDctM2FjNTY1ZGNkZjcz
LzEvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd18xuhxv
iHLw9MuXnETAbuWiY5GI8HhvOJ/ErTHRB2eWEg7GIwaM83tXVzMTlonqqFSYbHUj
uCuGeM7zy+9BcRFXp/PcvAFxm05hPNquLGfkKIQ5xxgUhfuP3j/0gmXVAP+GDrFI
fxrC+AGj8i8NrgTRUBs2Cxw8H9UiAf7bBtPBpqrRU9ans14JchKL0ER84MydOzfN
K+CVqs9sC9eI04n7fDo8sH8hfccU8XljingyzkQcprb5e/7mCtdgTsGA9rVx/Fzz
eCNLnFn9DEvBsCZ01uYcsPnwsgt7EYHcW63V1i0LyubXhI++/FMzWiFMGgYFJ/hX
PvodnTpsjM5IdA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:22 2025 by rpki-client