Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier: i21co1tnq9tZ1RjNvvYNx4aLO9y+BD7Mjz5fBjRzKeY=
Subject key identifier: 61:AE:DE:D8:A2:1F:87:E2:DE:98:73:F3:4D:7E:45:92:FA:5B:A4:92
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial: 019E21A3C871909C2F303AE9F0B4F8EA0A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number: 0969
Signing time: Wed 13 May 2026 14:00:42 +0000
Manifest this update: Wed 13 May 2026 14:00:42 +0000
Manifest next update: Thu 14 May 2026 14:00:42 +0000
Files and hashes: 1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: a4V7m3qcPRQxcl1f/bDDqAVIcYaFaPjH44V/zyTcEVg=)
2: VBelpQwcAQaQvThvEwysdwbgrak.roa (hash: UGGt4tB1S8FTbx+5vNuFXFdkEAnx40jxbwqWiMzAMAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a3:c8:71:90:9c:2f:30:3a:e9:f0:b4:f8:ea:0a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Validity
Not Before: May 13 14:00:42 2026 GMT
Not After : May 14 14:00:42 2026 GMT
Subject: CN=61aeded8a21f87e2de9873f34d7e4592fa5ba492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:29:c1:4b:e6:3b:6b:01:fd:e5:05:8f:91:
4c:6e:d2:d7:35:f1:85:bc:dd:e2:d9:f0:ee:28:f4:
e8:df:bc:87:c1:c7:38:36:bb:66:14:88:62:d8:3b:
ea:8c:c7:05:87:01:12:73:e4:e5:1d:6b:61:55:4d:
e0:f1:1e:ff:28:bd:5d:db:ee:32:7a:ee:f8:5e:b2:
4e:7e:82:a4:e8:ee:85:34:be:82:73:77:64:71:0c:
a4:1a:39:70:72:75:9b:0a:31:ba:bf:9f:f7:5b:f4:
51:83:a1:f0:10:cb:2f:08:23:3a:73:62:84:c3:62:
43:1f:d1:08:c9:0b:25:57:f2:56:e9:95:81:2c:d9:
f0:df:b7:44:12:06:cf:33:25:41:f4:55:0a:ed:e4:
3d:d6:04:35:5d:58:0e:38:f1:4e:4b:f2:1f:24:22:
59:06:ba:01:28:e8:22:a7:4c:6c:fd:40:8b:98:7e:
fd:4a:08:16:35:8e:63:e9:68:91:7f:d5:6b:d3:7c:
d0:fb:9f:16:e1:a8:49:56:fa:54:80:d4:55:69:61:
e6:c0:96:b6:8a:e1:39:3a:a4:e8:e0:6f:8b:76:b1:
5f:ca:fb:30:22:f3:68:f1:ad:00:6d:58:e5:e0:2f:
6b:32:22:b1:d8:80:06:a7:59:ba:db:f1:56:bd:62:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AE:DE:D8:A2:1F:87:E2:DE:98:73:F3:4D:7E:45:92:FA:5B:A4:92
X509v3 Authority Key Identifier:
keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:de:22:d7:76:b5:04:f8:ee:77:2d:37:77:22:ce:af:74:71:
e8:3d:90:d8:90:df:fa:d2:f0:b0:f1:57:ec:21:fb:e0:ea:76:
78:62:9a:5a:a1:7a:8a:52:b8:8a:f4:d2:6f:d5:93:0d:30:1d:
51:ab:2e:db:4a:fc:f7:40:0a:7d:88:ee:ed:2b:8f:ef:79:ab:
f5:3c:bd:c5:1d:74:b5:a1:3f:63:75:8e:8d:33:6a:7b:51:03:
0e:f3:dc:df:63:8c:d8:59:75:e6:51:36:d0:09:26:96:37:9b:
49:de:41:21:10:48:e2:d0:05:53:1b:99:60:06:29:18:4e:19:
69:ce:58:8a:97:28:8d:69:21:db:0d:41:8f:5c:22:a1:ca:8d:
65:fd:54:84:f3:fa:77:3d:69:89:73:c5:1b:64:ea:b2:87:19:
a3:e3:09:66:d9:9d:7a:b2:6f:07:e2:6d:de:c7:2d:94:b6:51:
f1:e0:36:3a:9f:c3:2d:52:33:12:2c:be:d9:90:4e:40:2d:0b:
60:8d:0d:50:87:b4:ef:27:c1:c8:17:23:05:85:20:f5:ce:7c:
17:86:e9:8d:59:d3:64:de:40:a5:77:bd:ce:67:0a:2a:92:fd:
39:93:e2:86:26:67:fe:dc:b7:cf:a0:ad:0c:54:c5:b6:34:33:
fc:ae:f8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:58:37 2026 by rpki-client