Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: 9GnlOSevj+bg1xxN02JxI0fgRCRHPt169pNbK1JZBPg=
Subject key identifier: AA:BB:A1:AF:46:30:F0:1B:9A:94:6E:1A:32:50:DB:04:28:ED:6F:50
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 019E1CB56AF5B68F04CA1701FA11A2E63D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0E09
Signing time: Tue 12 May 2026 15:01:51 +0000
Manifest this update: Tue 12 May 2026 15:01:51 +0000
Manifest next update: Wed 13 May 2026 15:01:51 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: OC6gsHxLN2zbYcbV+jOK5Ll6RHHtvke0SszEt37YGk0=)
2: UJYmLUubxB3Ru_-Mh2hk0ZAXqvk.roa (hash: o9sPEzQFIIxibCJFZB3OkCMDh95FZm9NWhB+xHWn8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:6a:f5:b6:8f:04:ca:17:01:fa:11:a2:e6:3d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: May 12 15:01:51 2026 GMT
Not After : May 13 15:01:51 2026 GMT
Subject: CN=aabba1af4630f01b9a946e1a3250db0428ed6f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:e4:44:11:b1:44:44:ad:95:bd:cc:6b:41:
66:28:12:39:8d:96:ce:5c:1a:20:db:17:59:1e:88:
20:e8:6b:bd:51:d8:2e:54:9f:48:31:9a:b5:98:4f:
93:e0:ad:66:29:b2:00:c4:ae:eb:5f:7f:8d:d9:c6:
a8:fb:ca:d9:cb:3a:a5:15:ff:40:9c:34:06:93:17:
64:63:48:ff:d9:d2:6d:2c:92:4b:84:46:38:5b:94:
12:6a:aa:f6:38:e2:3c:3c:8b:fe:5c:d5:59:63:18:
cc:fa:d5:5b:c2:ba:fd:09:e3:c1:65:4b:d9:6e:82:
60:cc:7a:05:1e:16:e8:e1:ce:0b:d8:08:41:e3:ed:
5b:6e:ee:7a:52:e2:18:fd:67:01:29:2b:ff:0f:bc:
22:27:00:dd:cb:85:c7:fc:a1:98:7e:23:e2:a4:b2:
b4:bb:0a:e8:49:20:32:ab:50:0a:e7:b2:7e:ed:dd:
13:93:4f:24:8b:2a:69:21:2d:ed:31:34:29:5c:71:
8c:47:83:b5:16:e0:1c:e2:0f:4c:56:27:d2:55:2c:
76:fa:59:44:00:b3:b8:63:05:9b:f1:b7:d4:74:15:
7c:ab:b1:08:28:f1:95:98:70:90:be:d4:e2:fe:10:
e4:e3:9c:9e:e4:c2:26:3b:4d:15:74:10:f2:c7:29:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BB:A1:AF:46:30:F0:1B:9A:94:6E:1A:32:50:DB:04:28:ED:6F:50
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6f:cd:a2:ba:4e:53:cf:eb:f8:3b:91:3f:48:af:25:98:55:
6e:83:f9:35:bd:4a:16:b1:82:25:e4:d2:d8:b5:74:2d:98:b2:
60:cf:e0:47:65:2c:7a:79:f3:f4:05:37:54:4b:31:d3:05:11:
44:0d:d7:b1:1a:cd:72:a7:38:d1:45:ae:82:29:05:99:66:cc:
79:61:1b:5a:2c:5f:9d:fd:70:3a:9e:84:4f:bb:ec:c8:b1:92:
05:ca:b3:d7:50:49:47:e9:31:38:f5:df:00:a6:44:2b:dc:35:
47:a2:b0:70:ac:7d:49:d5:40:12:ff:be:a4:76:4d:4a:73:6c:
c8:6b:b3:5f:6a:f1:0d:38:03:ea:04:3a:58:38:e3:13:c9:81:
12:d8:7c:7a:0e:5a:3a:e5:22:44:4c:0d:87:8f:92:62:cc:a2:
85:80:b6:62:5a:c6:f4:55:15:9e:cd:b2:4e:58:49:be:cd:d9:
32:d2:90:98:e9:b4:0a:0e:19:3e:7b:ce:87:0a:4c:b4:d8:b8:
10:71:80:37:6a:a9:15:a2:b3:c7:0c:1d:99:d7:b7:17:f9:44:
7a:c9:de:bf:ce:9e:f9:4a:18:1b:7b:48:05:7d:75:7f:d6:d7:
6b:0c:23:b2:bf:e1:c5:b4:a3:2c:00:3f:93:be:91:27:d0:34:
80:04:1a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:59 2026 by rpki-client