Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: ilKLRBp1HVGFxmXZ0YRhp8Ebg7VkHexkT06PPnI2dok=
Subject key identifier: 12:AB:43:38:00:E6:22:38:10:19:E2:8F:55:66:0B:4A:B7:0A:3F:DB
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 019FAA87705DD51E6CE4C708E5988AE7A256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0ED7
Signing time: Tue 28 Jul 2026 21:00:30 +0000
Manifest this update: Tue 28 Jul 2026 21:00:30 +0000
Manifest next update: Wed 29 Jul 2026 21:00:30 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: jFtSPDywhLHVbEGTeOUCfG0zLcPjf7jjwCEAkU5OBC4=)
2: UJYmLUubxB3Ru_-Mh2hk0ZAXqvk.roa (hash: o9sPEzQFIIxibCJFZB3OkCMDh95FZm9NWhB+xHWn8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:70:5d:d5:1e:6c:e4:c7:08:e5:98:8a:e7:a2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Jul 28 21:00:30 2026 GMT
Not After : Jul 29 21:00:30 2026 GMT
Subject: CN=12ab433800e622381019e28f55660b4ab70a3fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c9:f7:bb:68:a3:e9:0d:7a:17:4c:ba:f0:77:
02:9e:95:5d:36:33:2b:f4:f5:62:cc:64:84:41:d6:
f3:2b:b8:8d:81:11:ef:51:ef:4b:9e:2e:ff:63:48:
f4:eb:6b:b5:0f:3f:b2:50:4e:d5:28:9e:eb:da:d7:
ba:bb:27:36:8e:6c:8c:19:17:51:e2:cc:5e:51:29:
e4:6b:2c:ca:71:65:94:5d:d8:da:12:7f:99:d5:d7:
20:20:45:79:70:32:7b:15:5e:3d:7b:20:fa:b8:ca:
99:25:59:ad:b2:9d:9c:2d:b5:ed:1b:7b:e3:b8:3d:
5d:cf:03:a5:df:f1:7c:b7:14:c3:a3:54:b8:36:2b:
fc:1d:d5:c0:75:96:cf:16:26:af:2e:a1:8b:a5:f4:
23:43:21:63:bb:f7:30:4b:d6:14:bd:6e:99:70:24:
a4:20:6d:de:ee:ec:27:f2:38:0a:81:89:b9:7e:44:
53:4a:73:b6:f9:c3:88:83:91:6d:ac:9b:8d:c6:28:
ea:41:60:79:3e:5b:15:40:3d:ac:a9:b6:b1:17:16:
42:93:8a:14:d1:38:0b:55:38:5d:3c:9c:bb:7e:ff:
fc:00:69:43:e4:94:cc:45:cb:39:5c:c6:ad:ab:fa:
88:7e:0d:2a:fb:04:b6:29:49:77:4b:77:9d:da:9f:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AB:43:38:00:E6:22:38:10:19:E2:8F:55:66:0B:4A:B7:0A:3F:DB
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cd:91:64:1d:26:d6:11:dd:92:e2:79:95:cf:ac:eb:57:b9:
51:6e:c9:c4:d1:d9:cf:77:08:cf:35:2b:b2:36:82:bd:9f:11:
e2:92:57:8b:e2:dd:13:c3:67:5c:8f:50:68:de:63:47:8a:9f:
a8:30:dc:61:68:d2:84:5f:d2:cf:b5:6a:6e:a4:df:93:7d:95:
6a:fe:b5:64:1c:da:f6:a8:ff:f3:32:af:f4:7a:e4:80:66:d8:
52:c4:00:8a:40:61:6c:de:4c:e5:6b:bf:ec:85:bf:91:64:a1:
31:23:62:0d:1d:e6:ae:c6:25:55:a4:7f:5a:b2:9e:8e:c1:f8:
e7:05:6a:04:69:fe:f7:ab:a1:44:d5:5b:46:10:d4:fc:5f:82:
59:20:3c:be:8f:3e:c7:ff:fa:21:f0:39:bd:68:b2:07:0b:9d:
0a:e3:91:d2:92:35:ff:e2:c6:24:2d:0c:9d:1a:14:2f:a6:2d:
4c:82:a0:c2:10:39:f6:0c:a1:46:73:8c:61:60:79:ef:91:fb:
cf:2c:13:a7:5e:82:b5:cd:5c:a3:5f:e1:46:59:c7:82:bd:a4:
18:43:66:77:54:14:00:21:c6:45:4b:a5:d3:66:b1:c5:23:46:
16:96:a0:d3:70:8b:b8:47:34:f3:15:af:c8:e2:84:cb:d1:0f:
86:07:6d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:52 2026 by rpki-client