Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier: n8w9LbBVf3WwJDcbCoDCJJmxGHDJ0RDQndpRdAUTSac=
Subject key identifier: 00:19:41:2D:3A:55:90:9E:17:76:61:06:BF:4F:26:0E:4C:C2:B4:9F
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 01A0C39FD6FE3F78B7BAA68658B69AAF21E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number: 0805
Signing time: Mon 21 Sep 2026 11:00:27 +0000
Manifest this update: Mon 21 Sep 2026 11:00:27 +0000
Manifest next update: Tue 22 Sep 2026 11:00:27 +0000
Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: nBug25UemCy4mWyjzLQ5mg3i7QvXbjHOV1BHCcNHMM8=)
2: z585MlMo7mSSr9Hk1ivV-63iY4Q.roa (hash: DZmssWKd0chIvnTRvKAN4jdqih24+ZhEvPT2Hj5FZkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:d6:fe:3f:78:b7:ba:a6:86:58:b6:9a:af:21:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: Sep 21 11:00:27 2026 GMT
Not After : Sep 22 11:00:27 2026 GMT
Subject: CN=0019412d3a55909e17766106bf4f260e4cc2b49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:84:45:be:86:9f:2b:04:5b:db:20:ba:54:4e:
6a:2c:ee:98:53:6a:34:03:3a:d9:a5:6f:c3:30:f3:
a1:8b:bb:ae:4e:27:cf:f8:4b:8e:3a:7b:bc:7c:eb:
e1:52:23:b4:65:00:bc:f0:a4:c6:1b:6d:ac:07:c7:
52:00:ec:ed:f2:6a:89:5b:b0:ae:6a:43:3a:fd:be:
e0:10:0f:d9:8f:98:4f:f4:01:25:46:9f:f2:46:05:
15:c7:88:1f:7d:b6:58:ff:51:bb:a6:10:14:5a:a7:
38:ec:64:15:87:f2:48:40:20:d6:64:2c:e7:c9:bb:
e1:8b:ae:3a:3f:9b:cf:2f:10:21:3b:83:8c:c5:e0:
5b:90:b6:70:b1:d3:91:34:fc:78:e4:bf:fe:62:41:
97:b0:32:df:07:40:97:82:e8:b7:8a:0f:61:af:c6:
b8:9a:02:61:b3:74:af:5b:f4:c5:6c:8a:79:1a:0a:
16:d2:98:58:43:79:71:17:8f:8d:f2:3e:c0:14:b6:
8f:fa:ab:c8:a0:85:21:be:6b:38:15:4e:17:44:ee:
94:68:61:2e:de:97:44:93:b3:1a:6d:dd:3d:28:9b:
ec:bd:2d:f9:44:d2:d0:d2:53:90:e6:c0:4d:30:a5:
0f:23:1d:dc:d2:f1:07:09:40:33:69:9f:0c:94:57:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:19:41:2D:3A:55:90:9E:17:76:61:06:BF:4F:26:0E:4C:C2:B4:9F
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ad:4a:1a:81:c6:85:54:26:b9:11:02:d7:44:13:c7:61:4a:
26:bd:ab:f6:52:a0:5d:99:ed:f2:5f:68:34:57:59:a1:32:39:
a1:3e:a2:c6:36:0d:92:a2:d5:20:a7:ff:0e:fc:11:37:84:31:
dd:98:1a:d8:c7:fd:ea:6b:33:a0:b5:01:d6:14:75:0d:38:bc:
74:3a:d8:ed:62:3c:b0:1e:10:39:f1:93:ba:af:f8:36:a9:c7:
f5:3f:d3:4e:db:51:0d:69:2f:80:9d:19:ff:49:e5:b5:57:20:
4c:0a:ab:ac:ae:cf:22:03:c3:04:fb:54:01:60:a7:33:3c:c8:
1a:09:9f:8c:7a:89:24:a8:38:70:69:79:dc:ab:6a:29:b9:75:
03:34:26:c6:de:f1:c0:f3:18:ff:1f:1c:19:bc:49:32:7b:9e:
ad:bf:79:01:49:c7:34:7e:11:c7:99:70:07:83:3a:4f:90:9c:
2f:f5:a4:f8:30:14:3c:af:e3:1a:db:8f:91:b3:64:0f:19:fc:
9b:11:b0:9d:9e:59:a8:11:98:70:71:54:36:5d:33:cd:34:8a:
32:14:09:44:45:cb:d5:8d:2e:e3:d9:09:b4:7a:de:d0:0f:29:
38:aa:af:74:c5:3f:6a:05:a4:6b:82:c7:32:86:39:e4:ea:d2:
8f:24:f5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:03:42 2026 by rpki-client