Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File: 4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier: OZj7qFylQ3PZ6z7YldhYh6wekrvqQ/6HIkBUL8w/Qhs=
Subject key identifier: 30:34:B9:B0:FD:05:74:0D:9F:09:0C:2F:E0:AE:31:DD:9E:1C:35:29
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer: /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial: 01A1DD94C2E68B861BBFD0410DB2760B9922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number: 0E3A
Signing time: Sun 15 Nov 2026 05:01:16 +0000
Manifest this update: Sun 15 Nov 2026 05:01:16 +0000
Manifest next update: Mon 16 Nov 2026 05:01:16 +0000
Files and hashes: 1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: 2djygJyO4ktsXWezZg1UF4tEBwB+ksxJvLTSDsOk6/c=)
2: NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa (hash: e6t60cVHGwxB0yMWg7tXzy3uxaUsUhD5hfxLuTTJHN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:c2:e6:8b:86:1b:bf:d0:41:0d:b2:76:0b:99:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Validity
Not Before: Nov 15 05:01:16 2026 GMT
Not After : Nov 16 05:01:16 2026 GMT
Subject: CN=3034b9b0fd05740d9f090c2fe0ae31dd9e1c3529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:37:85:b4:41:d4:b5:c6:b8:06:98:96:26:
61:b0:96:43:2e:c5:6c:a2:03:e4:d6:ac:fb:9c:18:
8c:64:70:7c:e7:e0:ab:37:ed:15:bd:c8:96:4b:e8:
14:43:27:58:13:0f:52:20:eb:ae:5e:4f:a6:bc:dd:
a2:43:ad:bd:9e:5c:e8:57:39:ad:c5:3a:5c:5c:6f:
e9:b3:3f:31:e7:40:f5:b1:ce:5e:ff:c0:92:03:f3:
11:c8:35:39:b0:97:b6:8b:d3:3c:d6:cc:54:cc:b3:
c9:89:40:41:47:5a:3a:92:1c:96:22:c8:7d:6b:1f:
c5:d2:50:0a:50:55:e2:2b:f3:6c:6a:be:8a:15:a3:
ad:68:2c:4b:9b:ca:17:48:4e:12:8d:19:8c:a5:23:
4e:32:96:d5:bc:a3:1f:30:13:1c:7b:25:59:5c:0a:
3f:92:25:75:73:4c:4e:01:10:cf:b7:77:4f:d7:c7:
91:19:13:e2:ba:b2:ea:de:b1:71:41:5f:f1:70:f7:
ed:bd:0d:03:74:a7:3b:a1:86:e6:00:ac:04:94:6c:
5e:cc:73:e5:d3:ed:bb:f3:10:9e:05:fa:c3:f2:cc:
7f:b2:56:59:2a:7e:fc:50:d4:02:99:f5:e1:92:0f:
13:5f:90:7c:26:7b:e4:8c:ec:c3:1c:9c:9b:04:a5:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:34:B9:B0:FD:05:74:0D:9F:09:0C:2F:E0:AE:31:DD:9E:1C:35:29
X509v3 Authority Key Identifier:
keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d9:ad:9c:c1:f3:93:ba:1a:97:0a:da:0a:f7:38:11:a7:76:
63:e4:56:86:98:4d:c3:5e:f8:29:e2:02:43:4b:1a:a3:ab:ca:
64:16:9b:24:64:a8:0f:1f:de:6c:36:8a:93:17:03:f9:cb:c4:
5e:f7:5f:29:94:de:60:5e:64:3b:0e:56:31:3b:2f:0f:c2:1a:
03:31:dd:5b:14:94:bd:d8:f3:2c:fc:5b:46:30:36:c8:a9:ac:
82:67:f1:ff:17:03:87:54:c8:c9:fb:ff:1b:b1:1b:d2:d9:59:
e8:5f:a1:6f:13:9e:fe:36:9b:d9:a8:7f:63:39:06:61:d4:70:
38:de:c6:93:0d:7e:eb:20:68:7e:51:bf:51:75:5e:02:a0:51:
21:58:0f:2b:5e:00:a3:49:dd:e8:10:73:ce:b9:a1:d7:f8:c3:
1f:06:51:eb:13:fd:33:d3:db:b0:7b:2e:f5:7c:cf:a4:86:89:
9d:5d:12:aa:75:75:9d:91:eb:e4:43:74:f2:a1:88:fb:3d:af:
74:a0:06:6e:f2:80:ea:7a:f5:b3:a5:5c:22:33:3c:56:7a:2f:
6f:56:01:a5:14:aa:4c:44:b3:4a:92:c1:b2:61:da:a7:ff:4f:
ac:04:2c:4d:b9:00:eb:e1:70:9a:58:5d:5c:d7:73:e2:db:0f:
6b:ce:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:25:54 2026 by rpki-client