Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: NoN3Ka4zZuL7b2+CnU/IuUi16291Z0l0XuLKIeEoTQ4=
Subject key identifier: F1:0D:94:10:00:D8:7C:49:9B:A8:7A:35:8D:C8:AE:9B:5E:14:4C:DE
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 019EBA6B5C924A339F22ED5906367CE66315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 030A
Signing time: Fri 12 Jun 2026 06:00:58 +0000
Manifest this update: Fri 12 Jun 2026 06:00:58 +0000
Manifest next update: Sat 13 Jun 2026 06:00:58 +0000
Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: mHDo8jQqP/BNjSay0kAGZk944cptFiqkCDLZPLYtQq0=)
3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:6b:5c:92:4a:33:9f:22:ed:59:06:36:7c:e6:63:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Jun 12 06:00:58 2026 GMT
Not After : Jun 13 06:00:58 2026 GMT
Subject: CN=f10d941000d87c499ba87a358dc8ae9b5e144cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:3c:1f:80:74:f6:15:8e:50:29:9e:e8:b9:
a4:d2:f6:6c:67:47:22:04:5c:a9:66:ad:86:78:02:
a5:86:45:5d:6b:46:28:9a:cd:5a:5a:7d:52:4b:ed:
ca:e9:f7:70:28:09:f3:e3:f5:88:4c:e3:6b:dc:17:
14:cc:f2:c4:55:c0:e4:a0:50:57:6c:42:aa:77:de:
21:ef:d4:16:c9:b7:f6:d6:68:4b:e9:cc:93:08:53:
3c:16:60:5f:25:00:46:41:ec:1e:ad:58:70:c4:24:
c4:9d:bf:37:d9:f6:fa:61:ab:23:eb:6e:d6:16:ab:
54:42:13:b7:a1:c5:c1:b6:fc:9b:eb:c0:74:00:53:
fe:48:1c:85:0c:ff:68:a1:15:b7:00:a4:4c:58:1c:
62:f9:f4:bf:31:18:f8:33:91:25:c0:bf:9d:b0:a5:
72:60:b4:4e:ea:8f:eb:75:8e:7c:7f:83:a3:97:d5:
1b:40:db:8c:df:e5:d8:fa:88:82:23:0e:3a:29:57:
4c:44:79:8c:34:6c:5c:ff:2a:66:7d:05:c9:b4:7e:
58:a5:10:e0:95:bc:ca:06:b9:24:d7:06:1f:aa:69:
0d:33:ea:b9:20:e1:ae:cd:56:07:ba:e7:e0:20:21:
3f:c2:35:e2:fd:4c:58:41:2d:10:49:9a:d8:5b:85:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0D:94:10:00:D8:7C:49:9B:A8:7A:35:8D:C8:AE:9B:5E:14:4C:DE
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1e:ce:70:34:0a:d4:42:13:d6:bf:74:ab:5f:2b:cf:ae:ee:
dc:76:ba:be:c4:56:ae:fa:c0:d2:e0:0b:af:a2:aa:bc:52:ae:
19:79:83:52:e1:2f:cc:93:35:fc:bb:79:d3:f2:30:bf:e5:ae:
86:99:d5:aa:11:cf:17:44:30:1b:e2:87:63:f9:1b:e3:ff:b5:
53:0e:c1:9e:79:40:49:1d:0a:db:d0:91:bc:26:c7:7b:d2:73:
26:3e:c4:76:1f:e8:12:c2:7b:86:bb:5f:85:21:b0:2f:e1:df:
bf:08:fa:45:b8:b0:c2:e6:71:0b:42:b0:03:d3:17:79:38:4f:
75:cb:55:6b:bf:8c:ce:d4:1a:59:b4:45:d9:3d:dc:a7:b1:25:
f3:b4:23:c9:1f:07:f4:d3:91:2c:52:00:d2:5f:ea:66:54:e0:
b1:59:9b:96:ce:b1:ec:18:27:f4:2e:d5:fa:34:9e:66:38:65:
58:ce:16:f0:4c:bc:fb:17:1d:c2:17:34:e0:1f:e6:51:70:24:
26:9e:98:e1:7a:bf:7f:74:cc:46:4d:05:8e:0b:e5:f4:60:68:
30:0a:02:45:f0:14:bd:17:02:99:d9:28:1f:72:d8:49:5c:47:
02:6e:5d:e6:df:84:96:a8:71:33:a8:91:74:e1:90:2d:eb:54:
6e:18:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:52:05 2026 by rpki-client