
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
File: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json)
Hash identifier: BHM8enTqMhKGeZ6S3vJOSAY2Xr7QqlJsYNsNFvC6Zpo=
Subject key identifier: B5:F4:84:7D:46:46:85:5E:3C:52:7C:C9:6B:3B:5C:EC:FB:06:51:60
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial: 019EC1801FE2627CDA96DB3F3372F0069054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
Manifest number: 157F
Signing time: Sat 13 Jun 2026 15:00:59 +0000
Manifest this update: Sat 13 Jun 2026 15:00:59 +0000
Manifest next update: Sun 14 Jun 2026 15:00:59 +0000
Files and hashes: 1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: KPH6pyb/NWsE1E3L+Jm6utNf3QSiHRkOTO5msaHMEU8=)
2: QpTGyhEqHx6901xnQ91Zzt7qUHE.roa (hash: YchmT807E93vtUCwowps9RxjRDg1qTobGuNKmeL1H4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:1f:e2:62:7c:da:96:db:3f:33:72:f0:06:90:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Validity
Not Before: Jun 13 15:00:59 2026 GMT
Not After : Jun 14 15:00:59 2026 GMT
Subject: CN=b5f4847d4646855e3c527cc96b3b5cecfb065160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:7d:32:50:ed:20:51:bf:3d:d4:02:7d:58:
f1:69:27:46:42:e2:65:38:04:15:4c:e4:97:91:81:
97:68:99:27:ce:cd:bb:2d:0d:e3:c7:99:db:a7:f4:
d4:af:78:0b:c5:45:49:31:b6:b5:b0:fa:56:b2:06:
12:35:e4:2f:34:15:a9:99:37:4d:9d:21:4b:37:c2:
36:6e:4a:7d:cb:9f:cb:3e:96:c2:67:a4:cb:cc:19:
db:6a:d4:cd:66:aa:6e:14:5e:ef:2e:a1:f0:ae:ce:
1c:76:16:bb:a6:09:6e:d7:88:7a:c0:3e:38:85:21:
c1:f7:11:83:d4:56:d1:cc:0e:22:06:09:12:61:88:
aa:91:c4:d0:32:d9:2d:e7:29:db:a2:3b:11:dd:ed:
bf:75:4a:e6:42:c5:8f:69:c8:ce:ab:21:78:8b:da:
b7:9a:c3:3e:b6:04:0d:63:67:e2:b9:06:ad:dc:c5:
d7:e7:5a:ba:21:11:3a:73:d6:31:d5:07:b0:c2:62:
4f:e8:56:6f:34:23:51:ab:cb:ca:de:5a:23:71:bc:
8a:19:3f:4e:1c:f7:80:92:53:d9:9d:6f:bf:18:76:
04:63:1f:6f:91:96:84:c9:23:9a:a8:dc:54:2c:b1:
09:7d:9b:67:7c:e9:c8:c4:6a:34:95:f9:5a:f1:c7:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F4:84:7D:46:46:85:5E:3C:52:7C:C9:6B:3B:5C:EC:FB:06:51:60
X509v3 Authority Key Identifier:
keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1d:cd:97:c9:07:f4:33:d6:f9:b0:63:b1:66:c8:17:5c:ce:
33:cb:53:46:9b:f5:75:75:68:70:44:55:65:c2:8b:b4:e2:3f:
f7:c9:7a:80:ee:9e:d8:8f:b6:3a:e2:32:99:9f:3c:2a:31:6e:
b5:8e:44:79:63:3d:7d:19:d2:ed:e5:66:23:a8:24:8b:50:c8:
77:d6:21:99:ae:c8:98:d3:9a:2c:58:d8:8a:2e:a9:09:e9:97:
b4:6c:72:7f:ef:1c:46:8b:6f:c4:04:23:07:5f:84:11:9f:48:
fb:76:df:26:48:67:2c:eb:0a:36:c1:38:e1:82:7d:0c:f1:97:
09:5d:49:dd:81:9e:1a:94:8b:3a:92:13:20:1c:cc:16:ee:64:
c8:b0:0c:af:ef:1d:11:c0:65:f9:a9:d8:10:e1:b1:b2:56:cd:
e6:49:2d:88:e1:1c:ce:9d:72:5a:bb:ed:53:8e:a6:d2:10:55:
98:4f:29:ae:ec:0d:a9:05:14:aa:95:6e:09:8c:31:e5:44:29:
da:78:c4:58:2f:df:1a:d5:81:08:ec:63:1c:cb:5a:43:ea:98:
7f:77:ee:3b:3b:35:c4:f7:9c:af:ff:97:cd:27:6f:cf:81:f9:
d0:da:d6:a1:ec:ac:77:1f:10:f0:31:af:e4:65:3b:d3:9d:3e:
04:4e:6c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BgB/iYnzalts/M3LwBpBUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDg3ZTJmMGRmMjk2ZmUxMWU3NmVlNGMxMDE3YmNmMTIw
NWIyZjAwHhcNMjYwNjEzMTUwMDU5WhcNMjYwNjE0MTUwMDU5WjAzMTEwLwYDVQQD
EyhiNWY0ODQ3ZDQ2NDY4NTVlM2M1MjdjYzk2YjNiNWNlY2ZiMDY1MTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWt9MlDtIFG/PdQCfVjxaSdGQuJl
OAQVTOSXkYGXaJknzs27LQ3jx5nbp/TUr3gLxUVJMba1sPpWsgYSNeQvNBWpmTdN
nSFLN8I2bkp9y5/LPpbCZ6TLzBnbatTNZqpuFF7vLqHwrs4cdha7pglu14h6wD44
hSHB9xGD1FbRzA4iBgkSYYiqkcTQMtkt5ynbojsR3e2/dUrmQsWPacjOqyF4i9q3
msM+tgQNY2fiuQat3MXX51q6IRE6c9Yx1QewwmJP6FZvNCNRq8vK3lojcbyKGT9O
HPeAklPZnW+/GHYEYx9vkZaEySOaqNxULLEJfZtnfOnIxGo0lfla8cckbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX0hH1GRoVePFJ8yWs7XOz7BlFgMB8GA1UdIwQY
MBaAFOEIfi8N8pb+Eedu5MEBe88SBbLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQt
YTUwYTg4MGFhN2ZjLzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQtYTUwYTg4MGFhN2Zj
LzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgh3Nl8kH
9DPW+bBjsWbIF1zOM8tTRpv1dXVocERVZcKLtOI/98l6gO6e2I+2OuIymZ88KjFu
tY5EeWM9fRnS7eVmI6gki1DId9Yhma7ImNOaLFjYii6pCemXtGxyf+8cRotvxAQj
B1+EEZ9I+3bfJkhnLOsKNsE44YJ9DPGXCV1J3YGeGpSLOpITIBzMFu5kyLAMr+8d
EcBl+anYEOGxslbN5kktiOEczp1yWrvtU46m0hBVmE8pruwNqQUUqpVuCYwx5UQp
2njEWC/fGtWBCOxjHMtaQ+qYf3fuOzs1xPecr/+XzSdvz4H50NrWoeysdx8Q8DGv
5GU7050+BE5s5g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:14:33 2026 by rpki-client