Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
File: 4q9q9tGZ8R7LpDVVEOmbficatUA.mft (raw, json)
Hash identifier: NQX0eHenogtKRdSjJ2Jxsaaz6Kyp2Y23yKsqEES6BTQ=
Subject key identifier: 2F:00:60:BD:DE:8F:2A:CA:DB:87:5F:FC:32:A2:05:AE:4A:BE:9E:90
Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
Certificate issuer: /CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Certificate serial: 01A0D4CBCF1B4666E74DA3AEDC07F017244C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
Manifest number: 05A4
Signing time: Thu 24 Sep 2026 19:02:01 +0000
Manifest this update: Thu 24 Sep 2026 19:02:01 +0000
Manifest next update: Fri 25 Sep 2026 19:02:01 +0000
Files and hashes: 1: 4q9q9tGZ8R7LpDVVEOmbficatUA.crl (hash: IN1rdH1eOSVX5uoQaTOomNEVQ91nzr+/FZyB1eWNs/E=)
2: WsRPhT9Oh-9n_aMNy1_PxDNMYcI.roa (hash: /TTOGt1K8yp5w1qqEg6jDasBjpl22O3FqBsf/BAjXeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:cf:1b:46:66:e7:4d:a3:ae:dc:07:f0:17:24:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Validity
Not Before: Sep 24 19:02:01 2026 GMT
Not After : Sep 25 19:02:01 2026 GMT
Subject: CN=2f0060bdde8f2acadb875ffc32a205ae4abe9e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:5f:72:39:df:6f:1b:7c:b3:c8:a6:35:ac:
6f:4f:4d:f0:b9:f7:43:99:db:d3:a1:6b:14:68:2e:
3e:9f:e2:4a:f8:48:ed:c6:81:7c:62:19:f1:f9:98:
a5:ad:6b:9a:39:1f:bf:5a:8e:e6:bb:28:04:74:6b:
c1:a5:79:8b:f9:69:1a:a4:2d:40:c8:3c:f0:a9:ce:
6d:36:5e:5c:e0:15:d8:db:c4:c7:0f:a4:a6:0c:f5:
e7:28:ac:0f:34:ad:69:40:3f:e6:5f:17:7d:c7:84:
c6:b3:ee:39:57:25:7b:c7:e5:f7:01:9d:af:6b:b9:
38:86:31:7a:07:cb:ed:ca:a0:1f:aa:2f:c7:f3:c4:
63:cd:9f:67:69:51:6f:dd:b3:32:c9:c5:bd:db:e6:
9e:08:fc:45:0c:4b:9c:7e:ef:fc:f3:86:6e:62:72:
10:96:75:19:23:f7:4e:52:15:1f:3d:99:30:95:81:
47:24:0e:d2:b1:04:33:22:52:f7:bc:cd:08:7e:71:
87:53:fa:1f:72:95:d2:dc:3b:e0:82:b7:67:24:c6:
fa:68:87:b3:23:b8:2b:19:9d:a3:e3:29:e0:31:60:
d0:f2:ab:05:b0:d7:7c:2f:2b:63:f5:21:db:41:8b:
44:c7:4b:bc:a1:e6:8a:98:6b:30:36:bb:8c:43:56:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:00:60:BD:DE:8F:2A:CA:DB:87:5F:FC:32:A2:05:AE:4A:BE:9E:90
X509v3 Authority Key Identifier:
keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:df:5e:11:53:27:7e:23:13:6e:14:4c:12:02:d6:df:73:0b:
7e:9a:e7:0f:a3:6b:87:f9:7f:d7:1a:db:3a:5d:0b:20:b4:53:
db:82:1e:5a:41:dc:2a:f8:14:ad:86:3b:77:19:0e:d7:5d:07:
43:f4:69:00:96:6a:3f:9e:27:01:3b:e3:c9:03:a1:22:1b:6f:
7d:f7:9e:e0:a6:db:2b:42:87:57:06:e5:b8:ae:32:7c:f7:f2:
47:8e:19:a9:7f:3b:1a:3f:54:50:e0:bf:5e:cc:5f:35:e4:4d:
6d:39:29:20:5b:c1:99:29:6d:00:22:6f:8f:73:9f:02:dc:db:
ff:a4:b2:ea:d9:72:6c:22:50:48:a9:29:8f:b3:65:ef:a2:83:
d5:75:a3:06:04:c3:10:ea:e7:ce:d8:5c:ca:a4:7f:0f:92:e8:
5a:9c:f9:52:7f:c2:26:41:4e:c5:84:ed:a2:43:c1:bd:43:af:
25:dd:ab:b7:64:bf:81:96:14:10:d3:89:07:17:d8:c0:ab:ef:
8a:54:2a:0f:0d:f8:09:03:fc:35:6a:67:c4:a8:28:3a:2b:9e:
e8:01:2d:3a:fd:08:ac:4f:6c:d9:ff:82:93:33:8f:e0:16:e7:
80:73:55:6c:a6:82:9a:c3:ac:38:3a:21:ac:74:a5:f5:1c:70:
85:99:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:36:00 2026 by rpki-client