Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
File: Q4_ikN9rauztheCiyTg4FcOZYr4.mft (raw, json)
Hash identifier: hacpk/ZZVJsWBld8YGIkS/c+zOIVubKBRF7yrIrTv5o=
Subject key identifier: 1B:49:A7:8D:FF:51:2B:25:61:A4:6A:87:C1:61:6A:0C:7B:FA:76:A4
Authority key identifier: 43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
Certificate issuer: /CN=438fe290df6b6aeced85e0a2c9383815c39962be
Certificate serial: 019FAC768033F360C5DC93BF4DDD483AFC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:14 +0000
Manifest this update: Wed 29 Jul 2026 06:01:14 +0000
Manifest next update: Thu 30 Jul 2026 06:01:14 +0000
Files and hashes: 1: O5hsMdJTfPAzmaKfTpZiqj_CLKU.roa (hash: A55AVgMICSKylOppE+N1sSsiijjF/irpmh+Efa773iM=)
2: Q4_ikN9rauztheCiyTg4FcOZYr4.crl (hash: 7KaJuNEQl3Nvq3cft4QOeYLYAXir+GTwpmAxVE9k9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:80:33:f3:60:c5:dc:93:bf:4d:dd:48:3a:fc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438fe290df6b6aeced85e0a2c9383815c39962be
Validity
Not Before: Jul 29 06:01:14 2026 GMT
Not After : Jul 30 06:01:14 2026 GMT
Subject: CN=1b49a78dff512b2561a46a87c1616a0c7bfa76a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:df:5b:9c:0b:91:3a:73:66:b6:6d:d1:b8:
c6:11:9b:44:cd:cc:86:53:83:c7:df:23:9f:bf:2a:
5a:6b:ad:f4:70:ad:10:b4:b3:57:b6:00:7c:70:49:
80:14:b7:cd:9e:99:2d:8b:da:23:29:8c:8a:ad:c3:
4b:f2:c8:ef:b1:92:69:08:8b:bb:fe:e5:fe:95:e8:
93:1c:38:96:88:26:4f:54:72:d5:42:2e:08:07:18:
7b:af:57:70:27:eb:49:33:c2:28:3b:c8:e7:a3:51:
5d:44:a2:4d:75:eb:8e:9f:fb:14:07:d8:b3:e0:71:
bc:80:4b:49:a1:6e:04:6b:99:32:d5:80:e9:c9:77:
80:8d:fe:e3:c0:2f:7f:6b:2c:32:e1:99:89:24:eb:
90:e2:87:5b:ee:84:bc:a2:2f:92:40:71:6b:bd:81:
e5:a0:21:9e:0d:1a:a1:77:30:6e:39:19:1f:4b:e8:
c9:9b:2d:0e:94:56:46:9e:28:f7:3e:74:35:3c:ae:
57:14:ff:7d:c1:73:ae:a9:32:50:22:dd:c3:0a:e8:
33:ff:22:8a:11:c4:79:02:31:d7:40:56:dd:cb:f5:
01:65:e5:92:28:b8:a6:80:d8:e5:47:40:5d:54:79:
89:a6:2d:fd:5b:95:4e:f6:ac:e8:3b:c1:9e:1e:f3:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:49:A7:8D:FF:51:2B:25:61:A4:6A:87:C1:61:6A:0C:7B:FA:76:A4
X509v3 Authority Key Identifier:
keyid:43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f0:b9:69:11:b6:cf:b2:e3:ec:42:dc:33:ac:78:f4:0c:cc:
47:4d:a2:29:4a:14:22:f1:d6:da:7f:8f:c0:83:a4:5e:07:f5:
bf:b0:ff:1e:39:5e:cb:28:11:9c:dc:49:b1:e4:9d:da:a1:bf:
fd:d3:da:f9:e3:db:10:03:fc:9a:d6:39:82:b2:f2:46:ca:5a:
82:8a:ee:e7:e4:f2:64:26:45:0d:d0:7b:f6:81:71:c9:ab:0c:
bd:68:6b:d2:65:1f:3a:d1:a7:4c:8b:1a:34:57:bb:88:e6:df:
d2:77:b5:5c:7c:a2:45:50:00:ae:cf:fe:04:b4:eb:65:aa:cc:
0a:d7:89:80:d3:ba:74:5b:aa:88:d8:50:47:ff:17:b1:ef:63:
29:24:4c:c1:bb:ef:3e:66:c4:74:79:8e:07:6a:11:e9:58:ac:
4d:a9:a1:53:c3:32:dd:73:d8:37:fe:68:c4:93:65:43:52:64:
df:4e:fc:7f:d5:4e:68:40:7a:54:56:2c:09:f2:a0:22:b9:56:
7f:75:9f:6d:4a:40:bd:a1:77:eb:47:30:a9:d5:ea:5a:67:95:
39:02:67:43:2e:9d:6e:78:8c:65:af:55:90:60:2f:a4:49:d3:
e1:fe:77:e1:95:08:64:da:ea:23:8d:01:90:3a:3e:b3:9c:be:
8e:04:07:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:08 2026 by rpki-client