Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
File: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft (raw, json)
Hash identifier: noDCm5/jXL2MsyEE7dleSNOGeiGkW4FFE+n8Evswzc4=
Subject key identifier: 4E:65:E0:4B:AD:7C:9F:EA:75:85:CD:E5:AC:CC:3A:F7:09:56:37:A3
Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
Certificate issuer: /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Certificate serial: 01A0CD7ECB3BB642D7AC0AA56FCE50056D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
Manifest number: 1128
Signing time: Wed 23 Sep 2026 09:00:33 +0000
Manifest this update: Wed 23 Sep 2026 09:00:33 +0000
Manifest next update: Thu 24 Sep 2026 09:00:33 +0000
Files and hashes: 1: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl (hash: 9MxVBDFAebypmqW9YJ4R9atbHfTrYd/RarLoY6kZr6c=)
2: WrzCt0ggh7iZD0VHwtwqCx9fUjw.roa (hash: rSWhgeEnr5lWgG/XFNR90qaps5z/LuCtc8T7p4q2CNw=)
3: eIvH6RZh5CBBaCpwmTzlC7bIiGI.roa (hash: Gjo99d741c5L53QhsfOcyUVX8zjxEGGwTqWyZMoY2Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:cb:3b:b6:42:d7:ac:0a:a5:6f:ce:50:05:6d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Validity
Not Before: Sep 23 09:00:33 2026 GMT
Not After : Sep 24 09:00:33 2026 GMT
Subject: CN=4e65e04bad7c9fea7585cde5accc3af7095637a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d7:55:de:32:a1:ab:1b:b6:5b:9e:be:9b:45:
f1:bb:c5:73:85:ba:cc:e8:3c:ba:fe:b1:ba:bf:44:
a4:4e:00:bc:a5:8e:92:03:90:cc:b3:55:c4:4a:6f:
61:6f:0a:6d:91:8e:70:56:42:6b:1b:af:9e:62:b7:
99:27:72:f5:22:f7:5a:5f:82:cf:c8:f6:1b:cc:5e:
9b:1a:28:27:04:7e:f2:0e:f0:10:8b:b3:eb:af:f2:
e4:0c:37:5c:49:64:09:7c:71:48:a3:0f:8a:ce:d6:
02:b3:74:59:41:55:e7:8a:92:12:11:69:09:98:57:
67:62:3c:1a:d2:f2:52:29:b9:bd:b8:18:6c:0a:44:
cb:ab:08:c0:89:d8:e4:b6:85:8e:57:01:e8:01:1c:
3f:79:09:af:e4:f5:c9:d8:d9:71:8d:f5:03:e3:95:
1e:49:9d:85:95:6f:07:b3:7a:7c:d8:81:76:1c:b8:
85:ea:a8:7f:ef:08:82:41:cf:9f:19:89:fc:c9:dd:
93:1b:d5:d5:6f:4d:eb:b0:14:3d:f2:bf:2f:1c:50:
3a:79:b7:08:93:3f:10:3b:9e:9c:0f:e8:b2:d5:1c:
bf:db:64:27:ab:da:1f:c8:f4:1d:83:35:b2:b9:d0:
ea:ae:ee:bd:a3:49:75:1a:d1:ac:f8:45:9c:cd:0e:
57:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:65:E0:4B:AD:7C:9F:EA:75:85:CD:E5:AC:CC:3A:F7:09:56:37:A3
X509v3 Authority Key Identifier:
keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:12:76:aa:6b:6c:14:9a:87:3a:b3:8c:50:7d:cd:f2:a5:71:
03:de:46:bb:6c:82:8c:68:f8:5d:19:eb:75:cc:38:42:a1:2e:
56:6b:43:22:67:c9:1c:13:c1:ff:da:76:43:c0:8c:d3:04:67:
9f:a6:a0:cf:b7:d8:ce:35:ed:40:4f:87:c9:7d:e0:db:12:54:
74:cd:9d:4e:36:cb:46:61:a1:aa:a3:8e:5c:ef:4b:3f:52:aa:
83:a8:f4:2a:79:7f:a1:d4:1b:c1:a6:bd:ad:f9:4a:05:55:83:
8e:9b:ca:54:b3:50:ca:e8:90:09:7b:74:25:9f:57:ef:17:e8:
3c:28:ac:94:a4:04:43:0b:8b:34:be:c2:53:c7:68:2b:a9:77:
09:4b:4c:3b:50:c1:69:26:d1:49:6c:b7:4c:cf:b3:6f:89:e5:
f5:79:d9:3e:5b:87:cf:00:8a:36:db:c9:d8:a1:bc:84:04:03:
d8:fc:33:ed:07:ef:a4:8b:0a:27:a6:9a:e8:c8:fe:b3:92:50:
ac:fb:d5:eb:e0:11:35:0e:c9:f0:2c:77:84:d9:ce:53:1e:87:
1e:ab:02:02:c3:a8:f1:e8:2a:82:7a:0a:de:be:57:9a:ff:0c:
d5:aa:03:21:de:6a:81:3e:95:14:a8:b7:e0:ca:8f:79:b1:3e:
85:a9:88:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNfss7tkLXrAqlb85QBW2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMGZiYjliM2NkMWMyMTZhZGM2OTllNWVkYWQ1ZjUzMWQ5
YWZjYjYwHhcNMjYwOTIzMDkwMDMzWhcNMjYwOTI0MDkwMDMzWjAzMTEwLwYDVQQD
Eyg0ZTY1ZTA0YmFkN2M5ZmVhNzU4NWNkZTVhY2NjM2FmNzA5NTYzN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NdV3jKhqxu2W56+m0Xxu8VzhbrM
6Dy6/rG6v0SkTgC8pY6SA5DMs1XESm9hbwptkY5wVkJrG6+eYreZJ3L1IvdaX4LP
yPYbzF6bGignBH7yDvAQi7Prr/LkDDdcSWQJfHFIow+KztYCs3RZQVXnipISEWkJ
mFdnYjwa0vJSKbm9uBhsCkTLqwjAidjktoWOVwHoARw/eQmv5PXJ2NlxjfUD45Ue
SZ2FlW8Hs3p82IF2HLiF6qh/7wiCQc+fGYn8yd2TG9XVb03rsBQ98r8vHFA6ebcI
kz8QO56cD+iy1Ry/22Qnq9ofyPQdgzWyudDqru69o0l1GtGs+EWczQ5XGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5l4EutfJ/qdYXN5azMOvcJVjejMB8GA1UdIwQY
MBaAFOEPu5s80cIWrcaZ5e2tX1Mdmvy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQt
NjJhMjhmM2UwMDFjLzEvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQtNjJhMjhmM2UwMDFj
LzEvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERJ2qmts
FJqHOrOMUH3N8qVxA95Gu2yCjGj4XRnrdcw4QqEuVmtDImfJHBPB/9p2Q8CM0wRn
n6agz7fYzjXtQE+HyX3g2xJUdM2dTjbLRmGhqqOOXO9LP1Kqg6j0Knl/odQbwaa9
rflKBVWDjpvKVLNQyuiQCXt0JZ9X7xfoPCislKQEQwuLNL7CU8doK6l3CUtMO1DB
aSbRSWy3TM+zb4nl9XnZPluHzwCKNtvJ2KG8hAQD2Pwz7QfvpIsKJ6aa6Mj+s5JQ
rPvV6+ARNQ7J8Cx3hNnOUx6HHqsCAsOo8egqgnoK3r5Xmv8M1aoDId5qgT6VFKi3
4MqPebE+hamIeQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 15:04:35 2026 by rpki-client