Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: AD6zv7iLCG0W2RpaYLFnd/lUQF3Km54d0QeyafKZ6rc=
Subject key identifier: CA:DA:88:8B:FB:37:86:5B:79:05:F9:E8:1F:01:E2:84:F0:3D:31:4A
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 01A0C28E135E3565705BCB0BE416CDE81004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0F68
Signing time: Mon 21 Sep 2026 06:01:25 +0000
Manifest this update: Mon 21 Sep 2026 06:01:25 +0000
Manifest next update: Tue 22 Sep 2026 06:01:25 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: VXKNBadK6fS1knjCDTsvDxaFjjyGUI+HCFnuI5gsnrc=)
2: UJYmLUubxB3Ru_-Mh2hk0ZAXqvk.roa (hash: o9sPEzQFIIxibCJFZB3OkCMDh95FZm9NWhB+xHWn8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:13:5e:35:65:70:5b:cb:0b:e4:16:cd:e8:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Sep 21 06:01:25 2026 GMT
Not After : Sep 22 06:01:25 2026 GMT
Subject: CN=cada888bfb37865b7905f9e81f01e284f03d314a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:4e:69:2f:28:3d:20:b8:54:8b:e0:6d:04:
e2:2a:47:58:41:15:ca:19:d2:cc:c3:ab:3f:1d:6b:
5b:34:f0:54:c2:a7:60:89:ec:75:9c:7c:af:d7:40:
0d:68:1e:37:f3:21:5f:62:b7:43:d2:15:c6:d0:21:
9b:ed:c8:14:01:89:0b:7a:b8:3b:38:71:99:7b:02:
55:42:62:e3:0b:b6:23:09:d0:6d:83:d3:b3:07:6a:
a9:e7:72:f2:09:c6:cf:f4:6c:ed:75:4b:96:63:89:
c4:cc:76:ae:c6:e3:fb:02:b9:9e:4e:43:69:3a:1a:
13:79:55:25:d9:88:15:21:9b:0f:75:dc:5e:5f:16:
7f:e9:a5:41:a4:b4:98:9a:03:77:8f:72:46:69:77:
aa:d6:a1:99:f8:7e:b6:f7:2b:4a:dd:a8:ba:50:d0:
4f:01:32:34:76:5b:fa:40:3e:97:4c:74:2e:6e:69:
30:5d:4b:71:3d:fd:da:a9:20:11:63:db:71:5f:6c:
79:bc:17:a5:56:19:6c:90:19:c8:e3:e8:61:e7:d4:
ca:2a:79:32:46:74:47:44:75:63:38:fd:a0:9e:1e:
0a:ce:44:0e:9d:1a:86:b1:f8:ba:0f:bb:ea:43:8a:
e5:fa:c5:32:48:db:e0:8a:d9:91:de:9e:b9:7b:2f:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:88:8B:FB:37:86:5B:79:05:F9:E8:1F:01:E2:84:F0:3D:31:4A
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0e:43:41:2a:c6:f2:d9:81:c1:a5:af:f3:21:0e:f4:94:95:
9d:eb:5e:87:55:b0:54:81:8d:db:57:21:81:b3:b5:8b:82:b8:
23:dd:ee:48:46:76:b3:e4:65:97:c7:4b:b7:8c:01:27:18:47:
19:9f:e1:53:23:c4:3c:fe:95:ad:11:4d:7a:42:40:58:41:71:
63:8b:2d:6b:ae:13:dd:24:87:0f:10:e4:a3:1b:3f:db:3b:44:
8f:0f:43:01:5e:10:f1:91:5c:73:72:48:10:db:1a:55:54:7e:
dd:c8:ab:98:ad:80:f8:fb:b7:fb:e9:e6:dc:1a:f7:6b:24:49:
17:4c:cc:3d:e2:7a:f6:15:27:7e:6c:ea:b6:eb:52:cd:f0:e3:
10:b2:80:64:36:fa:ef:1a:e9:ad:7b:61:6c:ff:b8:ff:bf:67:
49:09:58:c8:6d:a1:54:71:4c:d9:17:2a:6c:59:89:90:5e:21:
70:f3:ab:df:ab:78:eb:b3:70:b3:1c:c2:1a:b1:0f:ae:94:c7:
b1:31:af:c8:82:8c:a1:02:dd:31:0d:8f:16:a4:00:72:cd:dc:
69:b7:0d:60:8c:a9:55:02:12:ce:23:a5:0a:be:48:e7:c9:5c:
fc:34:18:e4:9e:63:89:d8:2b:7e:0b:11:94:bd:59:79:27:1d:
f8:6f:80:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:11:38 2026 by rpki-client