
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier: 8nm53HkIl5FlZySKbc4bDYLNaG6tcyNlRNFc1Q9xlq8=
Subject key identifier: 9B:D9:09:F7:0E:97:73:78:4F:B9:D8:7D:99:C6:EF:40:E0:58:47:51
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial: 019E1D901723A1D610DDF663EA712EA8C506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number: 1970
Signing time: Tue 12 May 2026 19:00:42 +0000
Manifest this update: Tue 12 May 2026 19:00:42 +0000
Manifest next update: Wed 13 May 2026 19:00:42 +0000
Files and hashes: 1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: bhcIlHRmMgaInXJvlfDxnYR6yIPpkhz57484BIEcTE8=)
2: 6GUIWwZxGI0_11LUAF2nyD6ApTM.asa (hash: o9hRLFlhcdetNherJ5nziP+ejI2p5Hk/AOSB3fzCgR8=)
3: JMUe3al0pklathcu47XaPUqkjyY.roa (hash: WrIFwPH2vXkQmPfNJ4EO/lLH8xEpJfsA80i818mNAGc=)
4: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=)
5: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=)
6: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=)
7: oXoPTYurY49QqvkxsHQ2CgBlClU.roa (hash: Kxe3xBPSsleK+MNWwV9JxVc3F9bwuG0O+lg8Wsxfj3Y=)
8: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=)
9: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:17:23:a1:d6:10:dd:f6:63:ea:71:2e:a8:c5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Validity
Not Before: May 12 19:00:42 2026 GMT
Not After : May 13 19:00:42 2026 GMT
Subject: CN=9bd909f70e9773784fb9d87d99c6ef40e0584751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:a3:bc:ba:2c:1f:c9:6f:9a:d6:77:e0:86:
d3:47:4c:c3:aa:0d:6b:af:c3:05:3d:e4:bc:3d:b0:
dd:43:72:4e:82:a4:2c:80:49:4d:18:17:02:66:b0:
3b:74:18:ef:b2:c0:39:4d:9a:c2:61:86:3b:f7:93:
92:03:1d:f5:c3:f0:a2:43:07:65:2f:9d:ce:49:c8:
ab:1b:2d:58:a2:78:b8:36:eb:5d:5e:26:ca:2d:95:
54:1d:e4:6f:66:cb:f6:19:26:9c:25:51:ac:3a:4d:
20:9c:ef:46:48:7b:ac:52:a3:92:54:da:28:8b:a5:
dd:32:9b:34:86:44:ad:c7:6a:83:c0:b3:c8:25:96:
9c:1b:38:7c:31:7d:5f:25:12:c0:ee:df:05:7e:1c:
f2:c5:0a:02:b2:28:05:ab:73:b6:77:90:f6:de:ca:
96:34:b8:ec:c2:6a:62:1d:9f:96:f7:0c:6b:13:2d:
ae:30:77:37:fb:4d:20:61:e9:09:6c:8a:b8:41:f4:
fa:89:c0:17:a5:ea:65:8f:fd:3f:7f:f3:6f:58:25:
87:14:c9:85:90:c8:a4:03:5a:54:57:0d:5a:0f:62:
ff:0a:ea:f9:f1:e8:7e:cc:ed:70:a0:36:c5:2b:43:
f2:b5:5c:11:58:f5:42:99:2c:a7:33:22:ca:01:67:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D9:09:F7:0E:97:73:78:4F:B9:D8:7D:99:C6:EF:40:E0:58:47:51
X509v3 Authority Key Identifier:
keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a9:24:37:44:4d:cd:c7:86:80:db:c5:6b:c3:06:b2:76:11:
bf:f3:2d:b5:3c:e1:c5:17:68:14:90:1d:4f:70:78:d9:1e:c8:
b0:0a:a3:5a:e6:2d:88:93:e9:50:c6:39:09:34:36:9a:e6:85:
01:5e:af:dc:a7:cd:20:9e:32:5c:cd:6e:a9:03:c5:c7:39:b6:
a2:51:ad:64:c8:57:95:cd:96:ab:45:59:7e:db:ae:f2:7b:c2:
1e:40:bf:af:ad:33:e0:15:6c:6e:7c:d7:0b:29:20:3b:6f:c4:
a3:1f:d5:12:6e:91:51:08:f4:15:89:95:b0:6a:b7:0d:b1:94:
6e:ea:e6:cb:2c:97:3c:39:08:c6:32:0f:6d:34:04:a9:6a:67:
6e:6d:f2:fc:07:fe:2e:82:89:06:33:79:84:ae:58:da:fa:af:
0b:24:97:3b:3f:0d:5a:41:d4:18:e3:29:84:60:88:5c:ca:1e:
38:d7:c5:ce:03:2c:9a:ac:5c:ef:82:6d:ed:5c:30:a5:91:f2:
9c:b3:ee:db:7c:be:59:fc:3d:eb:36:e2:be:90:31:9f:09:19:
d8:14:aa:a9:83:9c:d5:ca:93:6d:b1:99:a8:4d:a9:f9:80:b3:
52:46:85:64:fa:cb:0b:98:ab:b6:3d:d4:74:d0:fe:35:54:74:
f5:ec:48:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:03 2026 by rpki-client