Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier: 8caJKqZ6P+jT4qV99A0DRhlKMseglMwnBsnBofPyEzQ=
Subject key identifier: F0:B8:48:46:01:68:3A:32:6B:2F:F3:6A:99:AD:83:88:94:1D:63:05
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial: 01A12A9F75C26DD8A3F3C5C218B3870638E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 11:00:55 +0000
Manifest this update: Sun 11 Oct 2026 11:00:55 +0000
Manifest next update: Mon 12 Oct 2026 11:00:55 +0000
Files and hashes: 1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: NOtufOJ5+7clHrRkI9ptZxmhMBkMOcPFcAMnsiYx8ug=)
2: TJP6k57F2KKffGkzwtmw00x9OYg.asa (hash: t56zBc/7gOvS31JdBZtqJ5AR4Nq7Y+BSjxkOYEV3eVo=)
3: s1nZMiUxX0KPp0wicgV40W2ekpo.roa (hash: 8p4KiLqCejQsqzTHF1lizxvoE/Y1cv0plDRwFdt2vFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:75:c2:6d:d8:a3:f3:c5:c2:18:b3:87:06:38:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Validity
Not Before: Oct 11 11:00:55 2026 GMT
Not After : Oct 12 11:00:55 2026 GMT
Subject: CN=f0b8484601683a326b2ff36a99ad8388941d6305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:83:15:7e:87:13:af:91:15:b3:83:15:00:
32:b7:82:77:6d:e9:69:87:c2:5d:e1:2b:5f:b2:91:
ca:1e:5b:cf:09:79:b8:b1:61:f8:39:53:27:2a:6c:
17:11:68:ff:e5:44:98:71:2a:e8:f8:3d:f0:bf:bf:
86:5f:7c:28:5a:73:dc:93:2e:20:df:07:cd:d3:a5:
cf:d9:f4:70:68:7c:53:0f:b1:fe:3a:8e:eb:ff:8b:
61:46:14:99:91:43:cd:cc:0d:6f:95:e1:20:a5:ad:
c1:95:3b:18:f3:5e:dc:23:0d:04:a7:30:ad:96:b0:
2f:88:d8:ec:9c:70:1a:ff:26:31:4f:b1:d3:55:e7:
d9:f4:da:94:1a:29:fa:c3:f9:b8:33:f8:49:06:fe:
3b:01:62:76:ef:a6:aa:81:0a:4f:22:7d:c5:b8:84:
13:e2:78:f8:9d:a1:01:57:a8:62:04:d8:51:06:9b:
74:9a:ac:23:5b:2f:df:35:3c:0f:d1:ea:5a:a6:e3:
d0:5c:c2:e0:a5:e3:18:de:22:8b:5d:fa:29:2c:bd:
18:ab:a8:e9:6e:e9:5e:6c:54:ee:c8:16:83:7f:d1:
7a:3c:5a:4f:21:08:fc:0a:f1:2e:83:16:cb:a7:82:
09:17:e5:db:89:be:18:52:7f:71:67:31:0c:8d:38:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B8:48:46:01:68:3A:32:6B:2F:F3:6A:99:AD:83:88:94:1D:63:05
X509v3 Authority Key Identifier:
keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:55:af:0d:25:41:36:80:92:ee:28:aa:ed:24:8b:d8:47:de:
0d:3c:6b:de:f5:91:62:06:eb:41:ca:a4:22:07:08:ab:67:1b:
1a:86:6b:ef:15:4a:ed:d0:f7:8e:2a:24:6a:47:de:1b:d7:fb:
3b:87:eb:49:db:74:41:e8:a3:9d:2a:2c:87:73:7f:27:33:28:
51:37:22:40:21:e6:78:9c:e7:b5:c2:7e:fa:6a:8b:96:ed:22:
9f:17:19:96:23:be:e7:e6:f4:4a:81:48:55:43:68:45:92:ff:
68:e3:a8:57:e8:25:1f:ae:a3:dd:06:2c:f4:75:d4:1d:14:22:
44:28:6e:75:a8:2b:80:47:8d:e3:18:8e:73:eb:ab:46:7e:f1:
a3:6c:05:df:0a:58:51:20:7a:13:aa:44:99:70:46:b7:d3:77:
2b:37:65:b0:ae:60:29:1a:b2:bc:4d:8a:1c:b0:4a:6e:f7:bf:
11:04:4d:c6:e6:48:4d:6a:ee:d1:de:a2:05:cf:1f:80:e3:2e:
80:d5:b2:58:84:99:47:5b:8d:39:d6:be:49:f4:9c:3a:78:c5:
32:16:21:29:2c:19:ea:e6:95:39:2a:7d:46:de:39:66:57:30:
e1:21:24:15:1c:09:37:a8:8d:97:e6:53:d9:1a:7d:fa:dd:81:
72:9b:d8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:34:21 2026 by rpki-client