Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier: ba10K0o6kiqRmm2P6rKksgFv8Xr01J25QPKrHBdz/zU=
Subject key identifier: 6B:CE:4B:6E:28:D1:FF:8D:C0:62:6B:F0:0E:50:83:94:2C:8E:30:72
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 01A1DD5E0C270B2E66E82D73B840AF1050C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number: 0F24
Signing time: Sun 15 Nov 2026 04:01:30 +0000
Manifest this update: Sun 15 Nov 2026 04:01:30 +0000
Manifest next update: Mon 16 Nov 2026 04:01:30 +0000
Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: vCD9nqWDdS4rexSY2G6/SzXZFMRrR6LBVzqmQ2+jy1M=)
2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:0c:27:0b:2e:66:e8:2d:73:b8:40:af:10:50:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: Nov 15 04:01:30 2026 GMT
Not After : Nov 16 04:01:30 2026 GMT
Subject: CN=6bce4b6e28d1ff8dc0626bf00e5083942c8e3072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:45:1d:ac:94:e1:27:4e:4f:0d:1a:40:5d:
ef:6e:14:a5:0f:7a:f6:58:c5:89:05:eb:57:3a:29:
0f:44:f7:6b:bc:0b:c1:48:e3:76:be:7f:1b:3d:8d:
68:b2:56:08:87:51:c3:dc:2e:42:4f:9e:3a:d5:a5:
0a:5c:0d:e0:c1:03:18:95:ec:31:cc:34:c4:92:4a:
cd:cd:03:38:e3:bd:10:3e:39:09:c7:09:4a:d1:73:
a9:32:77:5f:87:d4:53:49:9b:1a:fd:2e:89:54:f8:
b5:ad:5d:7a:8f:11:3f:95:46:a5:06:7e:af:c3:49:
42:53:08:ca:e5:a1:d4:2a:a8:a6:3e:52:d5:02:ac:
cd:e2:87:47:78:97:80:6f:bd:cc:d8:1e:04:ac:2a:
ea:f4:99:76:b8:bd:5e:d0:ac:12:04:70:8f:53:fc:
8a:27:83:a1:73:73:c8:f1:ae:37:4d:a8:b2:7b:cf:
6f:83:ac:bd:00:41:5f:e8:aa:4e:95:7c:09:e5:ea:
19:80:09:d0:21:99:df:c7:14:1e:e4:11:f2:0d:d8:
3a:2c:ca:e9:ef:1c:a9:9c:f6:36:fc:b5:fb:e2:6c:
8c:9d:43:ab:d3:19:1c:3f:e5:67:77:65:2b:cb:84:
fc:c5:c1:6f:a7:a0:2b:d3:86:66:6d:55:98:02:c2:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CE:4B:6E:28:D1:FF:8D:C0:62:6B:F0:0E:50:83:94:2C:8E:30:72
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fc:b1:01:bb:4b:c8:b5:11:cb:f4:36:18:46:45:c1:c4:c2:
08:e8:ca:43:0f:c2:1b:fe:02:97:69:3e:d8:05:9e:b0:a1:8e:
b6:d8:8b:80:25:2c:18:5e:41:aa:c5:ed:7c:67:9c:e3:83:1f:
e9:39:80:d5:c3:02:eb:58:52:73:01:d1:e9:4b:d4:31:56:14:
7f:61:13:65:5b:87:12:e4:d7:e1:8d:f8:15:6d:1f:02:c0:7e:
70:2d:a9:d7:26:7b:52:0d:2d:fc:7a:65:a6:11:36:04:eb:75:
1d:5f:98:6f:c0:9e:9f:79:ea:68:de:ac:ed:a4:ba:0b:80:82:
e6:ea:a9:58:fe:6a:c4:16:16:9a:ef:81:10:37:bb:41:36:37:
12:8d:fe:39:cc:80:35:c0:68:2e:43:73:d6:c9:c4:64:d6:e2:
cf:0c:12:92:ae:c3:5c:96:84:d2:82:1f:6c:aa:b0:7b:56:89:
3a:8a:7a:33:bc:64:9e:4f:db:94:57:c3:d5:b7:31:6a:4a:4a:
b9:50:f2:0a:ee:f8:a7:33:f0:d1:b9:cb:87:b2:e4:5e:76:e9:
7f:50:0a:c1:61:f0:bf:e7:8f:16:79:9f:bf:f6:09:7f:30:b7:
5e:62:6d:fa:b9:97:e1:c2:fa:d9:f1:47:dc:76:77:0f:4f:e8:
e6:fb:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:58:27 2026 by rpki-client