Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: XQHamS7gsPEwdWQuqdByL2ydWqfxBpoy2j3vfq2deKg=
Subject key identifier: FE:55:C4:09:A6:B7:96:7C:CD:7B:04:41:B3:21:81:F4:90:3A:C9:99
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 019D277215013DD22CDBF7D7EA778E168005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0D8A
Signing time: Thu 26 Mar 2026 00:01:21 +0000
Manifest this update: Thu 26 Mar 2026 00:01:21 +0000
Manifest next update: Fri 27 Mar 2026 00:01:21 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: YdzIzJXl3IN70GIgYtnLEWdTIlwOFFZ9KCi/eszWFno=)
2: UJYmLUubxB3Ru_-Mh2hk0ZAXqvk.roa (hash: o9sPEzQFIIxibCJFZB3OkCMDh95FZm9NWhB+xHWn8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:15:01:3d:d2:2c:db:f7:d7:ea:77:8e:16:80:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Mar 26 00:01:21 2026 GMT
Not After : Mar 27 00:01:21 2026 GMT
Subject: CN=fe55c409a6b7967ccd7b0441b32181f4903ac999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:37:eb:28:20:6e:12:98:05:2d:1c:5e:63:
49:d3:8a:c7:60:af:26:c8:ed:07:ce:ac:55:f9:9f:
6e:96:5f:21:2a:48:98:f7:13:23:1e:12:d3:24:ae:
3a:a7:3b:29:9c:93:32:dc:26:e4:bf:17:0d:6f:42:
f5:7c:87:51:21:23:4e:92:d5:35:6e:dd:9f:ee:d4:
72:cf:23:95:85:c6:2f:55:76:be:a8:ff:55:a1:dd:
93:f3:09:29:7a:62:81:32:de:b6:b9:29:19:fc:ca:
38:80:4e:4a:fb:97:83:a1:4a:78:75:94:13:f5:98:
1f:d8:05:8e:1d:2b:42:61:1e:4a:48:1d:17:0d:80:
a9:72:72:a9:5d:29:48:f9:98:eb:46:2e:50:6c:bd:
39:da:8e:7d:0b:78:db:70:7a:3c:ae:a2:d4:c6:37:
22:b0:78:38:52:79:75:d4:30:e7:47:aa:6a:1f:6a:
7a:51:5f:2a:75:8d:b1:60:4d:f0:9d:e0:2f:7d:1a:
cd:56:9d:cc:17:87:c6:1f:e8:65:74:1c:e0:76:0d:
63:19:ae:4d:9d:4e:ac:9d:55:5b:af:bf:61:fe:ef:
db:77:07:11:11:8d:7c:1e:10:6b:ff:fd:01:32:d1:
c4:1a:d4:9f:15:02:5a:c6:fa:c1:b9:45:a8:3e:15:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:55:C4:09:A6:B7:96:7C:CD:7B:04:41:B3:21:81:F4:90:3A:C9:99
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f4:61:ca:bf:20:89:41:d7:fe:b1:b4:c9:fe:6e:87:18:af:
f8:53:7c:3d:e9:dc:31:c7:6e:ed:c5:02:df:b6:e0:c4:09:c5:
21:ca:5a:59:e0:f3:5c:51:58:b8:ec:bc:1e:35:0b:58:0d:85:
6f:35:ce:9c:f7:7e:ff:a4:06:54:c5:0b:72:d5:02:68:9a:fd:
9e:8c:ca:32:1c:1a:12:72:b8:f6:2a:86:03:78:16:1a:1f:c7:
74:32:5b:09:18:a8:4c:ac:d3:b2:8f:4e:33:31:45:bf:2b:9a:
95:f6:c1:1e:88:e4:98:ba:0a:a9:e9:15:4d:2f:ed:80:ac:1c:
aa:a7:d8:fc:d8:62:50:5a:d2:a5:c0:b7:77:79:c5:74:f1:de:
14:86:fe:ee:41:d0:1f:70:11:8b:d5:94:db:49:88:04:60:75:
81:89:a6:8a:32:90:ae:2e:15:94:e4:9d:e2:74:fd:69:e3:a5:
46:38:22:88:cd:5e:a9:8b:79:76:56:47:03:e0:6b:94:f3:00:
80:fd:fa:e5:49:cd:eb:f3:af:bb:57:be:71:39:b4:4e:c2:28:
86:8d:b6:42:bd:60:3f:63:68:e7:f0:d0:f7:5f:e9:df:cd:21:
d3:bf:ea:db:23:b0:cc:e1:74:87:f3:1e:35:29:ec:bb:a0:3f:
bc:0d:98:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nchUBPdIs2/fX6neOFoAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMWUzZmQ1MDQwYmI5ZmI5MTI2ZTUxMTllNWZmN2MwNzRk
YTViYmMwHhcNMjYwMzI2MDAwMTIxWhcNMjYwMzI3MDAwMTIxWjAzMTEwLwYDVQQD
EyhmZTU1YzQwOWE2Yjc5NjdjY2Q3YjA0NDFiMzIxODFmNDkwM2FjOTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkg36yggbhKYBS0cXmNJ04rHYK8m
yO0HzqxV+Z9ull8hKkiY9xMjHhLTJK46pzspnJMy3CbkvxcNb0L1fIdRISNOktU1
bt2f7tRyzyOVhcYvVXa+qP9Vod2T8wkpemKBMt62uSkZ/Mo4gE5K+5eDoUp4dZQT
9Zgf2AWOHStCYR5KSB0XDYCpcnKpXSlI+ZjrRi5QbL052o59C3jbcHo8rqLUxjci
sHg4Unl11DDnR6pqH2p6UV8qdY2xYE3wneAvfRrNVp3MF4fGH+hldBzgdg1jGa5N
nU6snVVbr79h/u/bdwcREY18HhBr//0BMtHEGtSfFQJaxvrBuUWoPhX0OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5VxAmmt5Z8zXsEQbMhgfSQOsmZMB8GA1UdIwQY
MBaAFA0eP9UEC7n7kSblEZ5f98B02lu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NDQ1YTktM2Y3Zi00ZjRhLTgwYjgt
NWI5MTAxNTcyNzFiLzEvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NDQ1YTktM2Y3Zi00ZjRhLTgwYjgtNWI5MTAxNTcyNzFi
LzEvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPRhyr8g
iUHX/rG0yf5uhxiv+FN8PencMcdu7cUC37bgxAnFIcpaWeDzXFFYuOy8HjULWA2F
bzXOnPd+/6QGVMULctUCaJr9nozKMhwaEnK49iqGA3gWGh/HdDJbCRioTKzTso9O
MzFFvyualfbBHojkmLoKqekVTS/tgKwcqqfY/NhiUFrSpcC3d3nFdPHeFIb+7kHQ
H3ARi9WU20mIBGB1gYmmijKQri4VlOSd4nT9aeOlRjgiiM1eqYt5dlZHA+BrlPMA
gP365UnN6/Ovu1e+cTm0TsIoho22Qr1gP2No5/DQ91/p380h07/q2yOwzOF0h/Me
NSnsu6A/vA2Yiw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:07 2026 by rpki-client