Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier: /rKBS9uHo3ZRYnl7VnzfWUVcwBWIt9o8V67KO7FsW74=
Subject key identifier: 7D:54:2D:8D:CC:91:C1:B7:8B:61:DE:D4:3C:99:AF:1B:BC:3C:B7:4B
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 019DB21022BE9A341665238FEDBA16341279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number: 11DF
Signing time: Tue 21 Apr 2026 22:01:35 +0000
Manifest this update: Tue 21 Apr 2026 22:01:35 +0000
Manifest next update: Wed 22 Apr 2026 22:01:35 +0000
Files and hashes: 1: 0549ZLBzM4beeKAOhluORbZXoyA.roa (hash: WowH9si60Z2zpExgKOKJlrVy2XcJuZgBQ4vzt0r71L4=)
2: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: 6KSv4b+lIDFlqFza6maarV0VEGerYoyoDnevcK/qnkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:10:22:be:9a:34:16:65:23:8f:ed:ba:16:34:12:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: Apr 21 22:01:35 2026 GMT
Not After : Apr 22 22:01:35 2026 GMT
Subject: CN=7d542d8dcc91c1b78b61ded43c99af1bbc3cb74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:38:ea:59:10:7c:68:f9:0b:b6:20:d6:a4:
a0:fc:c5:44:0f:5d:68:58:9e:be:e9:87:c6:16:c5:
5c:d3:d2:57:a6:eb:9b:ef:d2:34:3a:76:4e:9c:91:
db:bc:7e:52:d8:bd:bb:ca:ed:b5:0f:c3:b2:59:d7:
cc:f9:b0:d5:40:ed:e3:00:7a:c6:41:23:af:38:84:
ae:04:8a:f2:c9:90:0d:78:fa:43:56:a1:dc:af:a8:
5e:03:a8:77:c8:fd:dc:71:6f:66:68:55:c6:b9:30:
67:7f:32:a3:98:48:00:50:18:9e:54:55:8d:2d:ea:
20:3c:29:41:2e:25:71:81:05:cc:b2:b6:80:e8:7c:
56:19:70:85:2f:66:51:b9:81:54:e8:e9:44:0b:a8:
39:d5:3b:22:10:a1:56:da:e2:8c:0b:6c:d3:a3:e0:
97:8f:35:a6:ee:d3:67:cf:9b:9d:a7:6a:fb:ca:82:
98:1b:cb:86:a0:3e:b3:bc:f9:62:c8:b6:cd:f3:c5:
9c:42:91:bc:6d:25:26:24:32:42:a3:51:d9:24:a8:
0b:3d:33:24:ea:78:ad:1a:5a:47:07:04:c1:39:80:
e4:d3:7e:36:30:4e:71:6d:85:6f:77:ec:6f:50:10:
0b:6d:0e:aa:8f:10:79:48:e6:9e:5e:55:50:5c:54:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:54:2D:8D:CC:91:C1:B7:8B:61:DE:D4:3C:99:AF:1B:BC:3C:B7:4B
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5b:b0:41:4a:87:86:b4:d9:c4:5a:6a:e3:e2:33:b3:28:fd:
68:f8:cc:4b:11:c1:da:7f:06:bc:2b:30:2c:87:63:0a:a2:80:
df:56:53:b9:95:5f:19:27:fa:23:d3:eb:6c:bf:67:b4:2d:47:
91:f3:c0:a2:5f:42:d7:65:6b:cd:c1:a8:19:07:de:9b:9d:0c:
45:d7:74:76:59:a9:b8:cf:9b:15:02:f9:53:2b:77:62:28:d8:
e6:f1:3b:a2:75:be:47:16:31:29:09:45:cf:ce:0d:20:17:80:
0e:0c:3a:c9:e8:75:df:e2:3b:96:2d:79:1e:2d:78:ef:7d:89:
0d:ec:28:b7:17:58:4d:d1:15:19:c2:f4:d2:67:7d:f6:ac:5d:
53:dd:f2:39:3a:ee:dc:db:39:36:c1:e4:31:61:84:24:dc:8b:
85:80:1c:7f:17:36:25:71:29:54:6f:d1:2a:da:2f:e7:ac:c7:
2f:50:02:25:a8:f5:94:7a:9e:a9:04:00:26:b8:92:4e:3e:ff:
b9:01:52:9c:f4:c5:58:98:68:43:38:74:19:d5:a2:be:a6:4a:
a1:2a:2f:bd:c2:cd:19:8e:a9:c8:b8:0b:4d:2d:99:5f:80:0a:
98:1f:7d:f2:6e:41:9f:16:a4:fa:d6:3f:99:70:62:e1:88:44:
26:7d:ff:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:26:52 2026 by rpki-client