Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: /zvLpPgYh3YRyicN7N7Ayy8GHr3rU1frwfnGQkc1nXA=
Subject key identifier: A4:89:85:BB:C3:FD:DC:55:34:35:7C:1D:0C:7D:1C:EF:19:10:5B:D8
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 01A0DACD488390E5B71497A60DA755B9C7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 1A77
Signing time: Fri 25 Sep 2026 23:01:21 +0000
Manifest this update: Fri 25 Sep 2026 23:01:21 +0000
Manifest next update: Sat 26 Sep 2026 23:01:21 +0000
Files and hashes: 1: 6adJkufM2vCd-z5ZhfO9iFInD5I.roa (hash: eStOI3RXAw0Itmdq+ACmIjyoC4OiC/7VPLcYAGLEjE8=)
2: WpjjTnaqAZv75i8pt4da5AeyrG8.roa (hash: zVLZyAPVL7um6st0K7rE7n1hsZMqjYHJuIbZn63Z38s=)
3: wzFUmExrbfhJGO9J_KmqSJOAv_s.roa (hash: EUfocXXtzQ4PPAMu6osjSAolxe2DCe3wU+6Eub2eN14=)
4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: 6aXNZ+yl2Ltto/sMwTlSVQ2aYehxQqdDVMIVTUp0Ou0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:48:83:90:e5:b7:14:97:a6:0d:a7:55:b9:c7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Sep 25 23:01:21 2026 GMT
Not After : Sep 26 23:01:21 2026 GMT
Subject: CN=a48985bbc3fddc5534357c1d0c7d1cef19105bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:03:d7:5b:7e:fe:72:fb:85:fb:4c:63:59:
a7:0c:b1:2f:ea:c6:33:c3:28:d0:cd:a9:53:89:39:
8c:8d:b0:c0:31:63:fa:c1:f1:ae:cd:6b:20:f3:d8:
2e:74:fb:0c:41:ad:47:44:5d:0e:11:64:f1:b8:f8:
ed:f7:87:7c:48:4f:3c:ca:25:2a:3f:47:7c:7a:02:
d8:82:b0:ca:af:3f:1b:97:4a:54:40:9c:3b:ff:91:
b7:f8:99:77:ec:01:20:81:04:f4:74:89:7e:cb:d6:
fb:50:c7:71:15:fa:61:b4:9c:5e:6b:79:28:d2:33:
d1:0d:1e:80:4f:1a:a2:69:36:26:a7:20:ca:a8:17:
d3:d3:59:c5:f4:17:63:7b:de:68:bc:e7:e4:3a:67:
80:e8:6c:83:05:46:0d:63:09:b7:a4:d3:f1:ef:4f:
e5:55:c0:be:ba:af:59:3b:02:12:d4:84:80:a7:48:
3d:52:75:fa:20:51:82:b8:07:b6:12:74:94:62:b6:
17:0f:a3:1f:1a:fa:d8:b1:30:8c:8f:0a:39:cc:36:
4c:c0:2b:8a:70:b0:c5:e4:e0:29:ed:16:e4:d4:62:
51:f9:71:84:88:3b:31:56:4e:c0:d7:9b:1a:54:4c:
d8:74:50:91:23:5f:03:7f:c9:3c:d9:5d:bf:7b:57:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:89:85:BB:C3:FD:DC:55:34:35:7C:1D:0C:7D:1C:EF:19:10:5B:D8
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ae:5d:58:3f:4c:f5:83:8c:62:1d:30:ed:6d:fb:18:75:54:
26:ad:17:37:06:bf:f4:5f:08:1c:97:99:8c:a7:73:6c:be:25:
48:bb:72:8b:93:52:c1:09:f7:b3:b7:0a:a1:45:aa:9b:91:68:
9a:5d:ef:e2:be:8c:bc:1c:49:66:19:a2:22:a3:27:aa:52:d8:
2d:e7:e8:5d:08:c3:bf:76:db:70:a8:7e:a0:7c:fd:1f:08:f3:
46:04:34:94:53:03:10:c3:3d:ed:f9:bd:69:6c:13:54:22:d4:
21:4f:a2:f0:54:d9:68:ea:65:ff:d9:5d:56:6c:5a:16:91:bc:
41:2c:b7:c5:aa:25:3d:5c:78:11:18:32:dc:e7:32:ca:87:3b:
f1:d6:a4:46:37:d5:a6:22:ba:d7:2d:cb:be:be:24:47:9e:de:
4f:61:52:fc:aa:25:f3:32:0f:38:2f:6e:35:39:b1:af:90:bf:
d3:83:7e:4b:06:b2:bb:3c:22:4e:ec:45:cd:97:19:84:c1:4e:
c0:53:3e:a7:77:d7:7e:d0:4f:d2:0d:e9:fc:15:b7:21:e0:9e:
d0:11:9b:1e:08:ca:ba:b6:0c:a2:4a:2b:89:53:b7:00:25:6b:
52:42:45:53:29:36:6f:f7:39:02:4f:e8:d1:35:7b:66:de:c4:
5d:cc:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:05:54 2026 by rpki-client