Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier: tjd0tNENFvTMgE4aH9Ju8sNIvYJahi0Gk2OjS/0C7mM=
Subject key identifier: 34:F2:C3:6F:42:BD:33:C3:83:35:14:6F:E9:BC:FD:F5:E9:1B:B5:1E
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial: 01A134480ABA0FC69813FFA1D994D8ADEB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number: 1A9E
Signing time: Tue 13 Oct 2026 08:01:38 +0000
Manifest this update: Tue 13 Oct 2026 08:01:38 +0000
Manifest next update: Wed 14 Oct 2026 08:01:38 +0000
Files and hashes: 1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: p9Nv/10B0RNlhHlu9rgIEJS4XAvHfgqYRTkEd2+CQlE=)
2: TJP6k57F2KKffGkzwtmw00x9OYg.asa (hash: t56zBc/7gOvS31JdBZtqJ5AR4Nq7Y+BSjxkOYEV3eVo=)
3: s1nZMiUxX0KPp0wicgV40W2ekpo.roa (hash: 8p4KiLqCejQsqzTHF1lizxvoE/Y1cv0plDRwFdt2vFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:48:0a:ba:0f:c6:98:13:ff:a1:d9:94:d8:ad:eb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Validity
Not Before: Oct 13 08:01:38 2026 GMT
Not After : Oct 14 08:01:38 2026 GMT
Subject: CN=34f2c36f42bd33c38335146fe9bcfdf5e91bb51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:29:89:74:b4:1b:ac:2a:7e:1b:6f:4d:88:
01:dc:ce:4a:23:e9:42:60:29:09:29:85:58:9c:b5:
3c:d7:6a:c8:52:8f:42:7a:82:69:c0:1b:82:69:ac:
49:eb:63:ac:da:3e:9b:1d:aa:44:2b:87:a2:a4:2f:
bd:a3:41:f7:ab:b2:ed:29:16:e8:50:fd:d2:08:12:
c3:21:97:e0:3e:95:d2:28:c5:5c:01:86:b0:2f:87:
2f:0b:22:c1:aa:4d:d8:55:eb:b2:e3:8a:76:73:1d:
c6:a7:d9:73:e4:2a:13:46:1a:9e:fc:14:77:5f:54:
a0:a5:e4:a4:a2:21:57:fd:56:55:44:fe:78:b1:d9:
8e:bd:91:e5:b5:09:e7:13:0a:2e:43:f2:2a:94:c5:
4a:80:cf:88:76:65:13:b2:93:fc:a8:1f:98:cf:eb:
44:e1:37:c1:5c:92:63:6b:42:cc:62:c8:cc:09:39:
d9:0d:db:78:df:84:f7:ec:54:95:9b:4a:f7:0a:a5:
e7:88:64:bd:f5:1b:90:b3:ef:8b:67:d2:77:cd:3e:
56:37:0a:f3:36:3a:85:09:48:48:13:c7:15:6e:29:
c1:87:bd:0c:cd:1c:b3:f7:24:c8:0c:12:56:e3:1c:
ef:88:66:47:87:0f:dc:ad:7f:b8:aa:56:6e:9f:fa:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F2:C3:6F:42:BD:33:C3:83:35:14:6F:E9:BC:FD:F5:E9:1B:B5:1E
X509v3 Authority Key Identifier:
keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3c:82:4f:de:43:3d:97:f5:d1:fc:24:cf:a0:aa:6e:e4:47:
9c:c3:e7:55:d3:f7:0f:0c:0c:b6:8d:7a:87:f3:89:11:cf:3c:
64:b5:08:20:c2:69:31:eb:f8:6d:e3:94:5e:90:2e:78:e1:69:
36:75:be:76:83:46:d6:3f:79:4f:af:9b:5f:04:bc:e4:52:3d:
53:03:9c:30:b8:b2:7d:ab:fe:5e:44:a4:df:fa:93:50:27:6a:
8e:de:e8:76:84:83:33:37:f4:e0:07:d2:cb:2e:d1:ac:d6:f6:
a6:ab:47:4c:ec:6f:56:06:a1:49:5b:82:9d:63:f4:e1:64:c9:
44:1e:a2:aa:f6:ac:c0:a4:30:f7:fe:ff:46:13:7a:d8:17:cb:
e8:99:63:d7:36:20:04:a1:e9:59:d1:bc:fd:e1:a2:46:01:1b:
9f:7b:cd:f0:a6:4e:77:24:f1:a8:29:3c:88:c9:2e:e2:43:e8:
63:03:57:18:78:d9:71:1c:a5:67:13:1e:92:b7:db:2f:ad:ab:
02:3d:5c:57:89:71:46:7b:3a:93:5c:0b:18:cb:4f:63:46:78:
7f:67:8c:1e:e1:46:a3:b3:80:c3:db:76:d1:9c:71:91:6a:75:
44:81:a9:2e:05:6f:8b:57:0e:a6:aa:01:f0:ca:96:6f:64:2a:
ac:96:3d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:05:41 2026 by rpki-client