Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b67173-f418-4414-b646-eff480de292c/1/ma4-RPvT5B5VGf7YzxRT5hOvxY0.mft
File: ma4-RPvT5B5VGf7YzxRT5hOvxY0.mft (raw, json)
Hash identifier: wnNr//WvKOwmy/ByN5o+o25sz5udZIHZ2fGkH6qzWG0=
Subject key identifier: 74:D7:84:45:19:11:17:EC:D2:41:6F:A8:93:6D:41:99:74:A0:D7:47
Authority key identifier: 99:AE:3E:44:FB:D3:E4:1E:55:19:FE:D8:CF:14:53:E6:13:AF:C5:8D
Certificate issuer: /CN=99ae3e44fbd3e41e5519fed8cf1453e613afc58d
Certificate serial: 019D3A547A7362713A1F82398E897A32F5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ma4-RPvT5B5VGf7YzxRT5hOvxY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b67173-f418-4414-b646-eff480de292c/1/ma4-RPvT5B5VGf7YzxRT5hOvxY0.mft
Manifest number: 41
Signing time: Sun 29 Mar 2026 16:01:48 +0000
Manifest this update: Sun 29 Mar 2026 16:01:48 +0000
Manifest next update: Mon 30 Mar 2026 16:01:48 +0000
Files and hashes: 1: d3d-8DfBXkXh-CsoFFvbcgSBMGc.roa (hash: 8bWopo4EeW+xYrINja/gBls8HNZwloLWf9YEWg3g1+U=)
2: ma4-RPvT5B5VGf7YzxRT5hOvxY0.crl (hash: 5R1tUQB0RyGoXIlSPmdtg9RksfokyP1avoXz/nF/bAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b67173-f418-4414-b646-eff480de292c/1/ma4-RPvT5B5VGf7YzxRT5hOvxY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b67173-f418-4414-b646-eff480de292c/1/ma4-RPvT5B5VGf7YzxRT5hOvxY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ma4-RPvT5B5VGf7YzxRT5hOvxY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:7a:73:62:71:3a:1f:82:39:8e:89:7a:32:f5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ae3e44fbd3e41e5519fed8cf1453e613afc58d
Validity
Not Before: Mar 29 16:01:48 2026 GMT
Not After : Mar 30 16:01:48 2026 GMT
Subject: CN=74d78445191117ecd2416fa8936d419974a0d747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:0b:df:cc:d2:3e:81:8e:5c:a4:58:2e:b1:
86:87:48:0a:7e:26:12:fe:99:15:07:76:78:cf:09:
85:31:39:5a:46:9d:2b:3b:f0:5b:36:bd:42:7c:50:
f6:39:ae:b9:f9:74:3d:9a:02:4d:2c:13:df:56:91:
6c:05:47:5e:4b:a7:65:9e:52:9e:a8:31:67:d2:51:
4c:f6:28:9c:1e:90:e5:40:17:8e:37:03:b7:32:f2:
30:6d:4a:22:82:e9:ed:41:66:14:8c:03:ce:2c:f2:
77:32:ab:82:be:eb:98:4d:57:e4:d4:48:0e:ee:01:
28:00:9f:9c:e5:2c:cf:29:36:78:c3:6d:62:1c:43:
59:5d:d7:49:a8:0d:95:58:4b:5c:ef:d9:f0:7f:62:
46:e6:c9:92:6e:79:3d:1a:3c:d2:46:4a:2c:b1:b8:
0b:2f:8f:4e:f9:d3:b1:29:fb:1e:5b:df:3b:52:d0:
b3:ca:0d:fa:20:bf:d1:ba:96:78:53:93:2c:6a:fe:
62:84:c1:9d:51:65:64:ea:86:ec:e1:15:75:8e:9d:
20:aa:6c:b6:50:f6:e8:3f:f9:90:13:1c:a3:64:57:
09:1a:c8:92:fd:d8:39:c2:a4:e8:0e:41:97:d0:2e:
5d:92:cd:3e:3c:89:ed:58:25:4a:f8:9d:64:76:ed:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D7:84:45:19:11:17:EC:D2:41:6F:A8:93:6D:41:99:74:A0:D7:47
X509v3 Authority Key Identifier:
keyid:99:AE:3E:44:FB:D3:E4:1E:55:19:FE:D8:CF:14:53:E6:13:AF:C5:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ma4-RPvT5B5VGf7YzxRT5hOvxY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b67173-f418-4414-b646-eff480de292c/1/ma4-RPvT5B5VGf7YzxRT5hOvxY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b67173-f418-4414-b646-eff480de292c/1/ma4-RPvT5B5VGf7YzxRT5hOvxY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:42:c9:41:3d:a6:95:ff:d8:df:b3:b7:3e:c9:14:c5:8f:2b:
1e:27:60:0c:ee:9f:8a:0b:7b:78:3c:3d:48:a6:83:10:4b:b7:
68:8b:f2:a2:e5:5d:33:44:d1:28:99:da:cd:2c:e2:3c:b4:45:
aa:96:c0:59:5d:ba:2f:9e:84:6b:37:89:ee:50:1a:ce:6e:44:
87:f9:b5:85:f4:ea:f9:68:c7:e8:88:5b:8d:88:fd:a5:d4:45:
6b:20:64:0c:4f:9a:07:27:7b:3e:ec:0e:fe:49:5e:84:4a:f7:
16:d2:38:cc:ec:6f:1f:2b:eb:e2:2a:7a:2e:1d:e8:2b:f2:9f:
72:14:33:a9:84:ad:fe:61:6c:fe:e0:99:25:35:55:ea:d5:e4:
1f:f6:80:9f:82:80:c2:f5:0c:df:43:2f:4d:a6:94:29:32:2c:
0c:d9:f3:74:b4:75:15:a3:1f:70:42:45:d3:a5:e5:5f:4e:57:
5d:14:2e:ff:13:cb:e5:95:68:43:59:95:63:a6:ff:64:f1:4c:
a8:46:b7:69:a3:1d:a3:5b:d2:0d:ef:08:2e:72:76:a7:f8:0e:
ae:38:7f:cc:de:9d:4a:d4:76:6b:e8:47:d6:50:4f:56:ea:35:
2c:f1:4c:81:9d:f0:db:61:19:ec:f3:dc:3d:70:8a:ed:09:9a:
05:ca:61:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:18 2026 by rpki-client