Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier: GTA9H2T2ply73JKm8Mv9++OcNUgKXBMaMvrbPyAzqRE=
Subject key identifier: 4C:A4:56:4E:07:7C:D0:A7:01:A8:44:0C:AF:A4:96:79:3F:66:2C:49
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial: 019D2A72C083BD39CDD884630E73EFE88B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number: 08E9
Signing time: Thu 26 Mar 2026 14:00:56 +0000
Manifest this update: Thu 26 Mar 2026 14:00:56 +0000
Manifest next update: Fri 27 Mar 2026 14:00:56 +0000
Files and hashes: 1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: tXAKTL8Zn8nLU7YWPvrxqtFLsceZHocF6ZKh/wkU6SQ=)
2: VBelpQwcAQaQvThvEwysdwbgrak.roa (hash: UGGt4tB1S8FTbx+5vNuFXFdkEAnx40jxbwqWiMzAMAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:c0:83:bd:39:cd:d8:84:63:0e:73:ef:e8:8b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Validity
Not Before: Mar 26 14:00:56 2026 GMT
Not After : Mar 27 14:00:56 2026 GMT
Subject: CN=4ca4564e077cd0a701a8440cafa496793f662c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:88:9d:83:1c:25:eb:78:a5:4f:6f:0a:2b:
65:93:0f:9d:c5:b7:7f:13:a3:ac:e0:94:e9:47:7c:
e9:96:be:b8:54:1d:35:89:e7:ca:ee:07:30:63:cf:
32:af:15:3b:90:91:8a:e9:9c:f3:73:4d:e1:82:b8:
4a:1d:2c:ac:71:b9:93:82:8e:49:d8:0d:c4:79:bc:
ff:da:05:cf:1a:b9:f5:92:b0:2d:c1:ff:5a:a5:c6:
d2:ad:34:05:fd:f5:6a:28:3d:2a:e6:d3:1f:db:15:
3b:f3:92:09:3c:9f:e2:cb:a0:89:04:62:e0:ec:60:
70:22:1b:1e:9e:97:cd:d9:f8:ec:29:3f:a6:11:67:
a2:df:0b:c7:b7:18:ee:fc:c1:0a:0a:28:38:ec:6b:
bb:fc:a3:ea:d6:08:9d:7a:df:d2:31:e1:e9:b5:ad:
66:ef:76:aa:0d:c2:db:94:31:3c:1e:c2:9b:23:49:
3f:12:a9:66:69:1a:8d:e7:af:40:c3:54:69:de:f1:
4e:7a:ce:2b:c6:e0:98:7f:7b:33:7e:b5:e1:ee:34:
0e:e6:3f:97:84:e6:56:1b:a5:d1:9c:8a:b3:b5:bf:
2e:77:ea:5d:c6:0b:d3:be:8d:cd:be:c6:54:a1:e7:
f2:02:a3:42:0f:b8:cb:3e:4b:86:93:3d:d1:dd:56:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A4:56:4E:07:7C:D0:A7:01:A8:44:0C:AF:A4:96:79:3F:66:2C:49
X509v3 Authority Key Identifier:
keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:de:e5:2d:5c:e7:2e:a9:cc:c1:14:8d:60:c6:96:2a:94:63:
18:30:58:2a:bd:89:67:55:b5:c3:13:40:78:90:d3:14:8d:3b:
54:a7:2f:07:f4:18:45:1d:d1:2f:52:22:bb:e2:55:07:fb:cd:
c6:98:4c:ed:d0:d8:10:fe:60:6c:18:b9:37:31:7d:d8:44:13:
fa:b4:38:ae:f0:bd:82:a9:7a:a5:ca:b0:12:2e:8e:77:bb:65:
6b:8b:82:d6:42:f9:6a:0b:84:77:9a:2c:28:76:83:e8:2d:19:
c3:ae:bf:80:af:4d:57:bd:30:44:dc:ac:88:b4:ae:15:bd:39:
99:39:42:8a:f4:22:5a:be:15:78:be:c7:35:80:50:5b:ad:5a:
f2:e1:82:0b:be:7d:fc:57:ba:da:01:d2:82:8f:74:fe:37:bf:
52:1a:96:fb:b0:3a:d7:af:da:da:1e:a0:48:32:cb:76:06:dc:
e5:e7:32:72:5d:f9:f3:db:1b:ec:05:21:97:bb:89:6b:13:f4:
a8:4a:30:bd:04:02:f4:97:1c:6d:ef:3f:c9:28:e4:56:96:24:
e3:b1:32:20:d5:53:0c:b8:5f:32:75:f4:be:aa:69:81:42:39:
f3:81:ff:c9:eb:1d:ea:37:27:59:0a:4b:f4:56:5a:01:de:f8:
8d:d0:17:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:16:55 2026 by rpki-client