Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
File: Q4_ikN9rauztheCiyTg4FcOZYr4.mft (raw, json)
Hash identifier: eWbMIgtSJdjgljxxBVpQrPmo9ScQ7nuGtorHND/wMlM=
Subject key identifier: 32:CF:83:C7:2D:64:E4:EB:AE:70:D6:6F:9C:62:81:A4:91:63:77:5E
Authority key identifier: 43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
Certificate issuer: /CN=438fe290df6b6aeced85e0a2c9383815c39962be
Certificate serial: 01A1005A6C218F7D4BC4462F7FADE6398792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
Manifest number: FE
Signing time: Sat 03 Oct 2026 06:01:28 +0000
Manifest this update: Sat 03 Oct 2026 06:01:28 +0000
Manifest next update: Sun 04 Oct 2026 06:01:28 +0000
Files and hashes: 1: O5hsMdJTfPAzmaKfTpZiqj_CLKU.roa (hash: A55AVgMICSKylOppE+N1sSsiijjF/irpmh+Efa773iM=)
2: Q4_ikN9rauztheCiyTg4FcOZYr4.crl (hash: Y23Tej2CLQq2Xc/lGrpSNt7Xsk9kDdoDmKtNfEfM5WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5a:6c:21:8f:7d:4b:c4:46:2f:7f:ad:e6:39:87:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438fe290df6b6aeced85e0a2c9383815c39962be
Validity
Not Before: Oct 3 06:01:28 2026 GMT
Not After : Oct 4 06:01:28 2026 GMT
Subject: CN=32cf83c72d64e4ebae70d66f9c6281a49163775e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:81:92:28:e7:55:f3:eb:29:16:51:08:d8:
0a:d1:37:ca:79:af:bb:ea:bc:16:45:2a:ee:19:6a:
a3:c1:0e:70:5c:1c:44:02:50:c2:40:ed:23:4a:f9:
97:3a:5e:a0:0a:66:03:f7:27:ef:d9:2b:1f:fd:25:
1d:cd:0b:c2:9c:16:14:39:2b:c2:2c:be:78:1b:b6:
32:2d:2d:e3:cc:12:f6:84:17:af:5c:6d:97:a2:3c:
80:74:7e:11:ba:d3:6d:bd:22:90:89:8b:57:b0:40:
58:4b:3b:a3:59:61:c5:94:50:83:f8:92:4f:0d:88:
ce:ff:26:2e:89:48:6c:32:b2:f4:83:7a:db:06:ab:
44:2e:eb:81:95:62:4d:8d:e8:94:ce:18:2e:44:67:
a8:e6:22:bc:4c:73:c7:ac:b5:54:c7:63:62:20:64:
65:01:fb:57:70:6e:ab:69:17:79:8d:30:f3:44:40:
1c:13:38:e1:ed:24:19:b0:90:4b:4a:6a:85:25:b7:
e4:85:a7:36:31:2a:aa:d7:72:92:1c:e2:0c:38:1c:
e2:f5:3c:06:c2:41:b8:2f:a4:26:dc:55:51:50:57:
d1:f5:0e:3a:10:ea:e9:bf:10:8a:43:15:da:c3:39:
d2:25:f6:a5:eb:b3:04:0e:62:98:0b:84:3f:e0:62:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CF:83:C7:2D:64:E4:EB:AE:70:D6:6F:9C:62:81:A4:91:63:77:5E
X509v3 Authority Key Identifier:
keyid:43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:28:9d:19:1a:b2:60:75:2d:ea:e0:9a:00:7c:fa:d5:d0:15:
c7:46:75:75:df:1e:18:33:e5:15:13:f2:67:23:c2:90:cc:14:
b4:dc:fe:0a:fa:2c:01:26:ab:24:f7:24:94:c7:e5:37:f3:93:
01:ee:1e:6e:e2:ad:7b:43:12:2e:e9:29:51:4b:bc:27:3c:ec:
02:b5:29:0c:11:83:89:35:91:8f:12:2d:6e:58:4f:21:7c:ab:
7a:da:e9:34:fe:f1:ed:24:e0:ca:ca:9c:b2:5c:89:3d:b9:69:
5a:5d:9e:1b:ec:63:06:ef:bd:52:c2:e5:c5:cc:71:cb:3c:56:
1f:ce:89:4e:fc:d4:10:bb:20:2c:53:14:8e:86:d6:0e:23:12:
6f:b3:2d:45:f6:a5:10:22:42:bd:69:b6:0a:c7:df:5c:3f:8d:
89:20:7d:4f:36:f0:cd:2e:0f:42:cf:03:e8:b7:a6:a1:b7:df:
ef:50:69:de:90:8c:86:08:e7:88:a9:f6:46:96:82:b6:1d:bd:
37:e9:0d:f8:82:4d:43:66:a3:a9:b6:1a:0a:81:3f:69:8b:1c:
c3:bf:24:9f:77:0d:01:cc:9f:70:e1:d2:50:83:e9:2c:e9:20:
7d:f8:15:07:ca:9e:ab:a6:56:71:c6:71:1c:fc:4a:86:e2:f1:
13:0c:ad:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:20:02 2026 by rpki-client