Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: 5dNLvGp9otQyaHCALEN8ajEERV/XojxHcjc3iWHUSo8=
Subject key identifier: C5:5A:CB:8C:15:83:03:96:22:04:A1:42:63:25:68:28:81:2D:1D:43
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 01A0EC2EDBFB97F9EFECCA7D99078151CB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 1A80
Signing time: Tue 29 Sep 2026 08:01:28 +0000
Manifest this update: Tue 29 Sep 2026 08:01:28 +0000
Manifest next update: Wed 30 Sep 2026 08:01:28 +0000
Files and hashes: 1: 6adJkufM2vCd-z5ZhfO9iFInD5I.roa (hash: eStOI3RXAw0Itmdq+ACmIjyoC4OiC/7VPLcYAGLEjE8=)
2: WpjjTnaqAZv75i8pt4da5AeyrG8.roa (hash: zVLZyAPVL7um6st0K7rE7n1hsZMqjYHJuIbZn63Z38s=)
3: wzFUmExrbfhJGO9J_KmqSJOAv_s.roa (hash: EUfocXXtzQ4PPAMu6osjSAolxe2DCe3wU+6Eub2eN14=)
4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: 3cQfFKB2HaJljpxGmtit/ft7/E3wUiv3WDmgr9Sxy70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:db:fb:97:f9:ef:ec:ca:7d:99:07:81:51:cb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Sep 29 08:01:28 2026 GMT
Not After : Sep 30 08:01:28 2026 GMT
Subject: CN=c55acb8c158303962204a14263256828812d1d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:30:de:6d:ef:57:ca:e7:dc:13:c9:5b:1b:
ed:8d:2f:0f:74:ab:8d:c9:75:15:50:e7:5e:64:dc:
55:83:5d:71:77:42:95:d3:43:db:84:62:d8:92:26:
64:2b:03:16:a6:e3:3d:4d:41:9b:0a:ee:73:d8:66:
54:25:07:dd:40:be:a3:d9:f2:fd:3b:44:89:a2:f8:
0c:75:21:2c:7f:90:a3:52:46:48:d8:af:7b:a1:1c:
f5:4e:20:ac:e5:3f:c3:9d:29:60:93:2f:9d:a4:9f:
ca:29:1b:3f:50:4a:61:d7:65:f7:0c:10:43:91:f3:
65:f3:14:5a:03:75:6e:7a:00:10:70:7b:ac:d2:e7:
7d:cd:9a:f0:fb:8b:f9:d8:19:6e:28:20:20:87:aa:
19:d4:4a:70:d2:07:cf:89:96:d1:36:9f:4b:f1:b9:
c4:5e:25:46:65:c3:5f:94:d2:61:7c:34:90:13:36:
97:ed:1c:fb:f7:ae:3f:50:40:55:21:78:33:a3:f5:
df:80:ac:30:a3:50:95:36:de:4d:86:72:7c:0a:b4:
fd:a2:b0:a5:a2:bf:e9:12:46:a9:9d:f7:ef:0e:1c:
44:68:45:ca:10:23:63:09:8a:fb:5a:0c:e4:b3:05:
a6:26:98:04:76:00:e8:57:97:e0:9a:1f:4f:55:02:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5A:CB:8C:15:83:03:96:22:04:A1:42:63:25:68:28:81:2D:1D:43
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:62:d8:f8:45:73:55:b8:0d:5e:95:b5:a5:2f:29:a2:e1:8c:
fe:11:db:24:2f:84:78:58:25:16:58:e4:b2:5b:c7:06:e9:62:
9c:21:21:f0:c1:73:cc:a8:a2:8f:15:cb:2e:1b:38:b5:2c:ab:
59:1c:02:d3:02:a4:fd:79:fa:88:76:9c:5a:a9:9f:dc:0c:c7:
b9:5b:76:56:82:5c:64:ba:ec:44:8e:a4:d0:47:6c:4d:f6:9e:
b5:1e:9b:70:27:9a:0b:18:71:6a:f0:7b:6e:fc:b0:f1:36:98:
71:30:e4:45:d3:de:b7:b7:05:0b:ea:b8:11:3f:d8:e7:75:1e:
f7:d9:0c:4e:39:e7:1d:cf:4d:b4:eb:7a:aa:6c:e4:7c:2c:99:
4b:d6:85:2e:26:f0:07:cd:54:e3:db:83:6a:84:5b:00:04:58:
87:75:2d:1a:e1:ef:37:2d:f5:a8:75:f6:38:1c:0d:27:89:d6:
83:51:d5:47:9a:16:a1:ca:85:3f:4a:b5:64:f0:c4:41:54:59:
8d:16:47:e9:02:3c:18:06:ab:6d:5d:e1:e8:36:4b:f0:12:9c:
8c:c1:25:b3:1e:3f:80:f3:37:09:0c:01:a6:f5:b2:e6:8d:5d:
04:39:2b:26:f4:cb:bd:d3:e6:ee:3b:14:ad:8f:3a:9b:8b:d0:
4c:8c:be:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:21:40 2026 by rpki-client