Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier: IFgiZvyDJCiVSvh6mlzSV5UQGFbY2B+OVCMLbQZx9pE=
Subject key identifier: 0C:BD:CB:1C:60:D1:8D:55:7A:7D:2D:94:EF:1E:F8:F6:CF:C4:02:40
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial: 019CAED9CC33869BB8FC0C20E674FF14AD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number: 08A9
Signing time: Mon 02 Mar 2026 14:00:34 +0000
Manifest this update: Mon 02 Mar 2026 14:00:34 +0000
Manifest next update: Tue 03 Mar 2026 14:00:34 +0000
Files and hashes: 1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: kz0ANl0mhsXhGpk5YgqdYRScXj83sW/d2jMaiZwXCPs=)
2: VBelpQwcAQaQvThvEwysdwbgrak.roa (hash: UGGt4tB1S8FTbx+5vNuFXFdkEAnx40jxbwqWiMzAMAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:cc:33:86:9b:b8:fc:0c:20:e6:74:ff:14:ad:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Validity
Not Before: Mar 2 14:00:34 2026 GMT
Not After : Mar 3 14:00:34 2026 GMT
Subject: CN=0cbdcb1c60d18d557a7d2d94ef1ef8f6cfc40240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:33:62:35:b9:5a:a6:30:f6:24:1c:69:37:
f7:30:df:e7:8e:a3:29:39:97:68:ef:ea:bb:6c:d7:
ca:dd:cc:77:93:ff:7f:15:46:40:61:61:58:22:f8:
80:96:d0:59:2a:29:b1:14:ee:6e:95:1b:83:7a:8b:
cd:16:5b:f6:4f:c7:a9:ef:d4:59:6d:aa:02:b0:b0:
5e:e4:9e:92:35:1b:e6:0f:6d:7f:49:75:53:ce:3f:
24:e7:b6:aa:91:89:26:95:ba:08:af:68:7f:19:5f:
9b:43:a7:12:8d:d8:e0:05:1d:af:d9:93:18:2d:c1:
dd:30:c7:a9:1f:c3:c8:a0:9a:c9:39:af:50:2e:75:
bc:66:c4:b5:38:4b:e7:93:6e:16:5d:20:d4:dc:28:
cf:b1:ab:8a:38:55:0c:9a:0b:78:05:2f:7d:95:9c:
df:78:ec:59:4c:54:62:4a:c8:21:02:c4:d8:0b:c5:
a4:35:bf:8c:21:1e:47:ea:49:a5:40:e6:e6:61:a4:
1e:e7:7c:7d:e9:ad:9d:dc:56:2d:79:6e:34:9b:6b:
2e:38:cf:74:6a:37:f5:8c:9c:ed:d5:eb:33:1a:bd:
37:f3:ef:2b:e3:a9:99:a0:d6:7d:47:76:b8:df:0e:
a2:2f:ab:89:07:b0:94:05:61:ee:56:9d:07:2f:ae:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BD:CB:1C:60:D1:8D:55:7A:7D:2D:94:EF:1E:F8:F6:CF:C4:02:40
X509v3 Authority Key Identifier:
keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ff:ba:ea:f3:2e:a6:54:36:46:75:4e:80:d5:f4:49:b8:67:
ca:4c:b0:f7:40:64:b1:1a:94:bb:fc:d1:ef:2c:a6:6f:68:23:
69:90:a6:8e:29:6b:65:d0:5e:34:1b:62:0e:99:f3:3c:bf:f3:
b3:34:c7:d0:8a:39:75:6c:46:f5:85:45:3c:e8:1e:39:43:7d:
9c:d1:9e:06:8d:a1:45:72:f0:0b:ce:18:2c:85:43:8d:39:42:
27:fc:9d:c5:ee:7a:f5:8b:45:76:75:82:c3:25:28:ad:26:06:
55:68:67:99:2e:5b:4f:8d:fe:b8:ef:75:f8:06:d9:50:55:d5:
41:32:e0:89:72:1d:e9:50:f6:8d:4e:31:ab:e0:e0:24:6b:2a:
9b:3a:f1:76:75:0e:ee:5c:ad:6e:4f:5f:56:57:1f:90:f9:ce:
28:55:e0:1a:f8:8c:a7:64:a5:30:78:eb:dc:3a:0e:8c:ca:e3:
2a:e0:47:ba:86:f0:6f:b9:d7:75:92:fc:23:35:8a:bc:6f:9e:
ef:0e:40:8d:e2:8f:e4:77:49:2d:6e:e5:59:d5:57:fb:62:33:
02:22:34:36:d9:f4:c7:66:f8:9d:73:58:8f:4f:fa:24:f6:ee:
5b:80:68:51:bc:25:19:6a:42:58:cb:b2:84:6e:2a:bf:3f:04:
ce:92:31:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:00:48 2026 by rpki-client