Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
File: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft (raw, json)
Hash identifier: /tbdFEMumAIa5lCrfh6jBzvM9pF0ZP+pbppOLhhF6qY=
Subject key identifier: F7:2F:79:82:F8:A3:D7:35:C9:14:88:69:CC:B4:8E:7F:CA:96:ED:27
Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
Certificate issuer: /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Certificate serial: 019D25831E72A4C6BDC9A16C34AB89114BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
Manifest number: 0F42
Signing time: Wed 25 Mar 2026 15:00:43 +0000
Manifest this update: Wed 25 Mar 2026 15:00:43 +0000
Manifest next update: Thu 26 Mar 2026 15:00:43 +0000
Files and hashes: 1: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl (hash: gWS0MPVmelXfVJgxxcK/rKtnOzTQ/8Mxxaq8T5E1KRw=)
2: 8tBydKhivtaaA2YrjstORqOwPZ8.roa (hash: 8g5rTWXRC9HIHz7K2ellDpMM70dVqGZuBdKss0wihGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:1e:72:a4:c6:bd:c9:a1:6c:34:ab:89:11:4b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Validity
Not Before: Mar 25 15:00:43 2026 GMT
Not After : Mar 26 15:00:43 2026 GMT
Subject: CN=f72f7982f8a3d735c9148869ccb48e7fca96ed27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f5:b0:a1:31:a2:59:b6:c0:e1:e2:a3:bc:ce:
6a:e8:89:e3:af:00:ae:04:3e:bb:ab:0a:0e:e3:5e:
d9:af:8e:46:1f:df:35:3a:ba:e1:02:80:b1:7b:31:
9f:f1:81:66:0d:23:d5:10:c7:2c:77:19:86:e6:ed:
cc:8f:ca:4b:58:c6:a0:72:dc:45:2d:5f:ab:10:13:
51:4d:78:45:de:08:4f:8c:e4:85:ae:7d:9b:de:17:
56:23:80:6e:31:be:f0:86:90:fd:ec:22:f4:58:1b:
66:1e:97:77:ba:b1:18:8c:3a:e9:9f:03:8e:af:29:
a3:d8:fc:d0:10:68:e8:0a:9f:1c:6a:1f:52:64:88:
68:52:12:e5:09:b4:c1:29:53:7d:44:94:f2:70:6f:
f1:14:22:e1:ba:af:0b:c0:7f:3b:51:6a:25:52:c8:
13:47:fe:c9:4f:9a:49:a8:25:8c:8c:81:02:77:87:
d7:d6:76:80:69:1c:8b:97:a9:26:b2:d3:e3:19:e6:
8e:f1:1a:10:4f:1d:02:a8:7e:a7:d3:cb:b9:9e:67:
d1:07:4f:62:76:63:b1:2e:8c:f0:eb:01:50:71:5d:
22:50:50:4a:eb:5e:79:03:59:41:77:40:e2:7b:74:
21:6a:2b:d1:7f:5c:89:92:50:54:b6:90:bf:7c:99:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2F:79:82:F8:A3:D7:35:C9:14:88:69:CC:B4:8E:7F:CA:96:ED:27
X509v3 Authority Key Identifier:
keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e4:a3:b7:29:1f:21:45:48:b8:34:e0:8b:1b:fb:11:ef:1b:
0b:56:b2:3a:cd:f7:41:6b:61:e2:a1:56:99:d5:2e:35:6f:7c:
0b:e2:84:11:47:bb:89:dc:84:f4:2d:82:97:81:a4:72:1d:75:
2e:82:2a:89:f4:29:7b:05:bd:f7:d0:6d:1f:3c:83:7e:e8:f0:
17:f8:e5:c3:cd:b9:c9:24:01:97:6e:89:9d:93:db:0a:f4:12:
4d:1a:d7:56:82:5b:be:4b:29:2c:b8:a9:76:f0:6d:0d:42:8c:
f4:6e:5a:93:e5:66:15:0c:b8:d4:8a:b0:fc:6c:b2:af:0f:34:
95:6c:08:78:b5:63:c9:8f:7d:f3:45:f1:45:01:d4:3a:75:1b:
8a:2e:a2:74:8c:59:d6:ca:69:9d:ca:b8:bd:2a:b4:12:51:8f:
7a:5e:55:e3:a0:db:0a:b8:40:54:3f:7d:79:15:c9:9e:f0:5a:
df:09:6d:0b:17:f9:5f:af:ea:19:65:6a:98:c3:b0:9d:b8:1b:
40:77:7c:77:34:a6:8b:26:ee:d1:e1:d5:05:48:75:41:64:8e:
c9:fc:8d:66:59:02:04:64:6b:57:3b:55:e9:2d:16:76:b4:a0:
8d:a6:24:0f:d3:62:71:3b:42:6d:e3:28:57:84:9f:10:e4:c6:
f8:05:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:26 2026 by rpki-client