Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier: 3PjqsYUMXJMahDIsxQ0Lh4BletkqPbGxLZV+Kc0vw9Y=
Subject key identifier: 29:AE:54:B0:86:18:B6:58:02:85:38:D9:7C:E1:29:1D:10:F9:20:64
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 019E295DDDD60CEA634391D62CE51536BD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number: 06AC
Signing time: Fri 15 May 2026 02:01:17 +0000
Manifest this update: Fri 15 May 2026 02:01:17 +0000
Manifest next update: Sat 16 May 2026 02:01:17 +0000
Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: 4McOydecXVDvG0oA7pJetQ66mKKB/EyHN1Xim4DphWU=)
2: z585MlMo7mSSr9Hk1ivV-63iY4Q.roa (hash: DZmssWKd0chIvnTRvKAN4jdqih24+ZhEvPT2Hj5FZkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:dd:d6:0c:ea:63:43:91:d6:2c:e5:15:36:bd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: May 15 02:01:17 2026 GMT
Not After : May 16 02:01:17 2026 GMT
Subject: CN=29ae54b08618b658028538d97ce1291d10f92064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:ec:d1:90:a5:05:fa:dc:6f:9d:86:e0:ae:
ef:bf:8d:c5:6d:57:86:72:b3:4b:8d:74:ad:f0:d1:
6d:9f:55:cf:24:d1:4b:ad:e1:ac:56:7a:77:f6:7d:
03:52:04:97:8e:27:50:53:58:e0:0d:e9:4f:52:9c:
9c:62:b0:22:fd:d9:c6:35:b8:62:7f:0a:ca:54:43:
58:a2:ce:cc:85:6b:09:b0:18:7e:ab:ea:a5:28:29:
e3:dc:cb:cb:6a:27:18:45:9d:1d:40:cb:0e:74:62:
21:7d:d9:26:7a:65:1b:25:78:6d:4d:d1:09:0e:d9:
62:19:55:69:8a:ce:ff:8f:b9:bd:9e:81:33:11:a3:
e6:0e:aa:07:f2:6f:58:2b:8f:f2:b3:91:00:e4:93:
49:6a:2d:14:4e:43:de:e9:96:20:da:26:7e:f9:5d:
0c:99:ef:8e:a8:3f:98:b6:df:31:0a:8c:3b:af:2d:
45:9b:24:9b:01:7a:05:08:a2:54:6a:14:fa:f0:4f:
fb:b9:6e:73:30:aa:4d:c2:6e:0e:c1:e3:40:f9:cf:
46:98:0f:28:55:e1:86:f6:4b:70:2a:aa:c1:39:0c:
a8:ea:af:53:04:42:fa:be:b3:41:f8:31:c6:f9:27:
78:62:f6:cc:4d:2e:52:f0:63:b1:62:07:a7:b7:95:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AE:54:B0:86:18:B6:58:02:85:38:D9:7C:E1:29:1D:10:F9:20:64
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a6:7d:76:f3:b4:20:3d:66:02:3f:23:de:6d:d3:15:ae:12:
aa:a2:4b:13:9e:fe:23:f4:3f:7d:bd:24:45:12:c9:13:19:e1:
93:b6:74:ed:af:8d:5a:56:b8:e5:e8:76:6c:b2:c9:e0:a9:05:
22:98:b8:d8:cb:59:0b:cb:c7:97:b9:15:ca:f9:a8:5b:21:20:
77:b9:e5:ae:e7:ea:9f:aa:26:33:0b:18:a1:fc:33:77:7d:47:
11:fb:88:42:fc:a9:27:10:3a:5a:f0:ab:fd:12:f5:8d:f0:97:
a8:d4:da:f6:33:35:ea:2d:ce:e9:0a:77:47:59:af:33:99:5e:
62:be:b0:d6:59:80:a0:2a:f4:ae:6b:a4:9e:87:b6:c5:d9:dc:
6d:eb:7b:39:56:a4:85:97:3e:43:9f:fc:4a:db:73:f9:4c:91:
fd:27:35:44:72:14:96:e5:ce:d1:56:a7:59:a9:71:02:68:1c:
09:0a:95:7a:75:71:27:15:22:0b:2e:4f:82:6c:2a:dd:6b:55:
35:e5:ff:4e:11:15:10:66:ba:65:ee:04:8b:d4:8f:db:0e:e7:
f7:1b:1c:90:f2:e4:f3:00:52:60:b0:51:ad:fb:fb:94:91:23:
a3:d8:b9:03:24:c3:93:c9:c4:00:af:fa:6b:45:78:f3:c7:c8:
9c:de:bf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:54 2026 by rpki-client