Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
File: Q4_ikN9rauztheCiyTg4FcOZYr4.mft (raw, json)
Hash identifier: UCBsrgzO1LrUQisS/Uelrb8LTho8BERKeHKPUS6Iu2k=
Subject key identifier: 98:09:D7:ED:02:CD:7E:61:A6:CF:6A:14:73:4C:14:7A:6A:46:DD:A4
Authority key identifier: 43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
Certificate issuer: /CN=438fe290df6b6aeced85e0a2c9383815c39962be
Certificate serial: 019F916C9EF57D1A4EDEE0356E9615BD05BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:42 +0000
Manifest this update: Fri 24 Jul 2026 00:00:42 +0000
Manifest next update: Sat 25 Jul 2026 00:00:42 +0000
Files and hashes: 1: O5hsMdJTfPAzmaKfTpZiqj_CLKU.roa (hash: A55AVgMICSKylOppE+N1sSsiijjF/irpmh+Efa773iM=)
2: Q4_ikN9rauztheCiyTg4FcOZYr4.crl (hash: PVVz8vYkZ7xfTMFTAsdpD+NPdERJJ6vL5mggSenfv0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:9e:f5:7d:1a:4e:de:e0:35:6e:96:15:bd:05:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438fe290df6b6aeced85e0a2c9383815c39962be
Validity
Not Before: Jul 24 00:00:42 2026 GMT
Not After : Jul 25 00:00:42 2026 GMT
Subject: CN=9809d7ed02cd7e61a6cf6a14734c147a6a46dda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:2f:10:92:22:c9:78:f5:36:b5:58:70:6e:
53:92:07:c4:1f:c5:e6:00:eb:cb:9c:01:b1:0a:c3:
69:a0:fc:81:93:b4:5d:27:8c:6a:21:97:da:0c:21:
a1:d8:b0:37:ac:1f:3e:36:3e:be:a3:a0:b4:fc:34:
00:97:4e:2a:fb:2d:e7:45:d4:8c:77:19:96:d4:4f:
b2:82:a5:04:3a:c8:49:3d:58:02:13:ad:f6:35:d4:
75:6c:fa:c7:90:80:8f:6d:fb:ec:33:a7:ce:15:95:
84:07:bf:c0:68:c5:f3:40:36:c2:09:d1:7e:0b:7f:
62:6e:55:1f:04:cb:12:6d:13:32:d8:14:7f:0e:56:
f5:49:40:89:88:82:c3:43:e6:b8:41:1c:a5:11:cb:
2e:b0:cc:ec:db:ca:5d:1d:88:69:9f:81:cd:14:30:
9f:da:28:f1:65:70:d1:56:2b:ea:af:84:a7:c2:7f:
dd:1a:a0:0f:e6:fc:9f:77:05:ba:d7:8e:1e:d8:5f:
53:57:8a:8a:56:67:22:ec:6e:8a:e7:b3:6b:36:c2:
a5:33:26:67:cc:0d:df:aa:3a:0f:53:7a:f6:6f:6c:
4e:57:78:20:6b:79:05:e1:d3:eb:6f:8d:ca:9a:da:
94:7e:85:82:13:5c:8d:86:74:94:d1:2d:4f:13:5d:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:D7:ED:02:CD:7E:61:A6:CF:6A:14:73:4C:14:7A:6A:46:DD:A4
X509v3 Authority Key Identifier:
keyid:43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:33:5a:00:ee:d7:83:2f:93:08:6e:70:de:82:f8:61:95:39:
c3:63:08:da:fd:55:b2:b5:13:11:0d:d5:5c:90:16:a4:c4:31:
2d:94:8d:a5:8d:28:9e:de:56:6a:e5:4f:13:28:99:bf:42:33:
5a:33:d9:14:79:e0:96:73:f1:43:64:c8:09:c1:cf:a1:c2:0f:
11:90:9d:0f:93:6f:bd:3f:11:81:88:fc:ba:31:48:9b:39:d6:
5f:5f:c3:64:90:b2:bd:a5:4f:d8:0d:e1:54:46:e3:74:bb:e5:
37:68:30:68:f3:bf:a3:af:4b:21:4a:e8:2a:36:6f:2b:ba:db:
ed:c3:83:4f:2a:a5:9a:c9:bd:ea:4c:be:97:f2:e2:b1:e2:3b:
66:64:64:dd:47:2b:dc:31:c0:61:72:63:9a:15:80:6b:2a:da:
b9:89:8f:e4:51:33:14:92:88:c6:a4:2a:c1:0f:ac:14:6b:34:
9f:66:a0:1a:0c:46:aa:61:f4:17:b1:4e:90:fc:65:06:da:b1:
fd:ed:e3:93:3f:63:e4:13:bd:b6:3c:0a:53:f7:a5:9b:f3:e7:
3b:49:fc:25:75:46:a2:00:e8:4d:01:a4:e5:10:39:07:e2:18:
02:86:e0:ef:dc:30:51:44:59:d8:00:ed:d6:69:1f:10:5f:fd:
72:25:1e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:16 2026 by rpki-client