Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: gvCrSTVrOgsuBBKFooTBnxVXgTd8tR1XJUS6bpZ02ro=
Subject key identifier: 73:92:05:7A:76:D7:53:D5:20:67:A5:0D:5A:9F:9B:30:79:FE:6C:55
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 019EB87CAAA91E347BC3022DA4805542D504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 0309
Signing time: Thu 11 Jun 2026 21:00:38 +0000
Manifest this update: Thu 11 Jun 2026 21:00:38 +0000
Manifest next update: Fri 12 Jun 2026 21:00:38 +0000
Files and hashes: 1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: bfyM9sRoEvEWJxGpKRe/RT5msQMg5qQsbp5HMGX9CHQ=)
3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:aa:a9:1e:34:7b:c3:02:2d:a4:80:55:42:d5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Jun 11 21:00:38 2026 GMT
Not After : Jun 12 21:00:38 2026 GMT
Subject: CN=7392057a76d753d52067a50d5a9f9b3079fe6c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:73:e1:12:3e:6f:76:f2:2d:7d:d7:2a:90:1d:
d9:86:3a:66:83:fc:23:a5:13:3e:38:ca:bf:72:1d:
f3:fb:ba:4e:60:61:c8:00:b4:fe:c0:2a:a9:39:2d:
2b:08:61:94:21:a3:ca:7b:8d:3b:6a:f8:3d:34:04:
bb:3d:cf:74:ae:f7:49:74:3c:6f:ce:98:d9:dc:b3:
13:4e:1a:a8:e5:7d:78:f7:b1:36:f9:39:f5:f2:ce:
54:eb:c5:5d:65:46:37:23:1f:09:64:c6:d5:46:2c:
01:5c:61:62:d3:ca:e2:c1:97:af:00:db:25:ff:64:
76:b4:1c:af:71:73:f0:7f:3f:c8:06:e8:ba:9a:74:
4a:3d:27:76:dd:49:1c:f3:4c:bc:43:0e:9f:8d:12:
33:d8:d4:2f:e7:d6:57:e7:46:f8:31:c5:d2:a1:09:
93:9e:ff:c1:f6:db:30:58:c1:1f:e6:d1:02:0f:ec:
78:1d:6f:fe:73:b0:96:b6:09:c4:3f:97:a5:f4:2d:
45:ec:61:46:04:87:f6:90:d0:95:31:10:a6:b0:93:
a2:40:67:12:b0:d9:19:32:3c:33:2d:ed:33:2c:a9:
59:cb:15:11:f7:58:21:07:b5:c8:bd:46:68:40:7c:
00:9a:a9:ca:ad:8d:35:5b:2b:af:48:08:6e:66:ff:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:92:05:7A:76:D7:53:D5:20:67:A5:0D:5A:9F:9B:30:79:FE:6C:55
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b7:2f:94:ee:b1:b3:01:e7:b7:ef:bf:cf:e1:b9:74:62:d9:
06:26:d3:d4:1c:ee:07:59:d3:5f:8d:eb:3a:df:36:62:a7:9b:
75:2c:8e:d5:6b:b2:61:2d:49:71:3f:ca:2b:a4:00:d4:ba:d0:
16:5d:4d:da:b5:94:ae:b0:1b:eb:84:6b:d4:93:28:7a:98:01:
76:62:d5:e4:41:67:f4:fa:59:e3:e5:2b:7d:fe:fe:96:4a:2e:
5f:f9:80:c8:02:4c:29:ea:9f:e6:4c:57:41:a9:69:77:43:50:
f0:0a:07:2f:55:9c:ae:f3:75:e9:ca:f7:3e:8c:03:67:d3:6e:
21:29:24:7e:b7:78:88:9b:9c:7e:b8:31:00:be:2f:5c:99:10:
44:08:28:04:4d:19:5c:77:21:b9:97:bb:05:30:b7:a2:0c:1b:
28:ac:be:4f:45:54:15:87:ef:e0:8b:ec:b1:3c:9c:7e:a6:39:
66:2f:0d:e6:cd:63:59:c0:81:26:c1:84:d1:b5:7d:bd:ab:7f:
da:fc:2b:31:09:01:3c:c5:73:30:4b:4b:e3:b8:46:04:4e:9a:
48:14:86:76:13:89:ce:ce:4d:8b:bf:bf:99:04:cc:11:d0:81:
15:13:13:8f:0b:f6:26:e6:9e:07:73:00:cb:c7:ae:d6:93:64:
14:51:d6:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fKqpHjR7wwItpIBVQtUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwM2Y1NTAwYWVmZTZhYjRkYmRlMTI0MDczYTM3YmMwZGMz
MzFlODAwHhcNMjYwNjExMjEwMDM4WhcNMjYwNjEyMjEwMDM4WjAzMTEwLwYDVQQD
Eyg3MzkyMDU3YTc2ZDc1M2Q1MjA2N2E1MGQ1YTlmOWIzMDc5ZmU2YzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXPhEj5vdvItfdcqkB3Zhjpmg/wj
pRM+OMq/ch3z+7pOYGHIALT+wCqpOS0rCGGUIaPKe407avg9NAS7Pc90rvdJdDxv
zpjZ3LMTThqo5X1497E2+Tn18s5U68VdZUY3Ix8JZMbVRiwBXGFi08riwZevANsl
/2R2tByvcXPwfz/IBui6mnRKPSd23Ukc80y8Qw6fjRIz2NQv59ZX50b4McXSoQmT
nv/B9tswWMEf5tECD+x4HW/+c7CWtgnEP5el9C1F7GFGBIf2kNCVMRCmsJOiQGcS
sNkZMjwzLe0zLKlZyxUR91ghB7XIvUZoQHwAmqnKrY01WyuvSAhuZv/3HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOSBXp211PVIGelDVqfmzB5/mxVMB8GA1UdIwQY
MBaAFOA/VQCu/mq0294SQHOje8DcMx6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDct
M2FjNTY1ZGNkZjczLzEvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8yN2RiN2ItYzBhMi00ODkyLTkwNDctM2FjNTY1ZGNkZjcz
LzEvNEQ5VkFLNy1hclRiM2hKQWM2Tjd3Tnd6SG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrcvlO6x
swHnt++/z+G5dGLZBibT1BzuB1nTX43rOt82YqebdSyO1WuyYS1JcT/KK6QA1LrQ
Fl1N2rWUrrAb64Rr1JMoepgBdmLV5EFn9PpZ4+Urff7+lkouX/mAyAJMKeqf5kxX
Qalpd0NQ8AoHL1WcrvN16cr3PowDZ9NuISkkfrd4iJucfrgxAL4vXJkQRAgoBE0Z
XHchuZe7BTC3ogwbKKy+T0VUFYfv4IvssTycfqY5Zi8N5s1jWcCBJsGE0bV9vat/
2vwrMQkBPMVzMEtL47hGBE6aSBSGdhOJzs5Ni7+/mQTMEdCBFRMTjwv2JuaeB3MA
y8eu1pNkFFHW5g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:45:15 2026 by rpki-client