
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
File: Q4_ikN9rauztheCiyTg4FcOZYr4.mft (raw, json)
Hash identifier: UvLtYYvjGZB5aAkNKI5XG//ZJwhe+GFEDzdahtCk2ic=
Subject key identifier: EB:44:3D:FA:0F:45:A5:02:B9:2B:44:D3:5E:49:69:A7:C6:03:54:7E
Authority key identifier: 43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
Certificate issuer: /CN=438fe290df6b6aeced85e0a2c9383815c39962be
Certificate serial: 019FA0E0D3C6DBA1B0FBD09A8B1611439AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:56 +0000
Manifest this update: Mon 27 Jul 2026 00:01:56 +0000
Manifest next update: Tue 28 Jul 2026 00:01:56 +0000
Files and hashes: 1: O5hsMdJTfPAzmaKfTpZiqj_CLKU.roa (hash: A55AVgMICSKylOppE+N1sSsiijjF/irpmh+Efa773iM=)
2: Q4_ikN9rauztheCiyTg4FcOZYr4.crl (hash: f6yWkF8RIBH+iJ7+5t6HbLIzY3UEqQw68mytijEiSLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:d3:c6:db:a1:b0:fb:d0:9a:8b:16:11:43:9a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438fe290df6b6aeced85e0a2c9383815c39962be
Validity
Not Before: Jul 27 00:01:56 2026 GMT
Not After : Jul 28 00:01:56 2026 GMT
Subject: CN=eb443dfa0f45a502b92b44d35e4969a7c603547e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f8:3d:d8:f5:de:76:d8:c0:ff:ad:56:16:37:
9b:4e:9f:ee:9d:d0:c2:46:3e:45:38:c9:f1:cc:0a:
41:3e:0b:fd:5f:b4:b1:6c:5c:31:95:2f:0e:0c:c1:
05:f7:f0:f0:54:0f:27:08:21:36:ca:d4:3a:ae:ec:
22:98:3f:c3:ef:10:04:ba:a3:55:e0:d3:3c:ea:1a:
ad:61:1e:a4:ba:a8:13:c1:3f:2f:3a:2a:3c:d6:71:
7f:c2:d0:62:ab:8e:49:0a:af:00:4d:d1:aa:e9:4b:
fa:19:da:f2:73:2b:34:a4:3b:4b:55:84:73:cb:b3:
15:ca:d5:d1:c4:35:08:5e:aa:8a:72:0d:60:e2:f3:
86:a7:4f:1c:31:e4:14:f7:04:09:5d:05:3e:5c:36:
13:f2:9b:fe:7f:fa:b0:d4:f6:ca:02:51:13:cc:c4:
58:86:f5:96:f4:8d:72:74:bc:ca:62:3e:63:96:30:
47:8c:a1:cc:af:76:ed:87:b9:a0:66:b7:e2:47:b9:
c0:47:4c:c5:b1:85:0e:6f:6b:ef:7d:0d:b1:ed:6b:
60:44:0e:45:8d:94:4d:e7:01:99:88:6b:09:43:95:
2d:30:0c:41:00:bd:ce:eb:df:d1:39:cb:c5:28:68:
e0:40:65:6c:a0:10:cc:25:07:a5:b1:38:f3:c7:69:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:3D:FA:0F:45:A5:02:B9:2B:44:D3:5E:49:69:A7:C6:03:54:7E
X509v3 Authority Key Identifier:
keyid:43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bd:67:3a:f7:5d:20:7a:b3:d8:c4:b1:fe:2a:8b:a2:97:27:
86:04:4d:a5:25:19:56:66:60:43:00:4d:31:85:24:08:f5:3c:
36:11:8f:d8:d3:3e:66:05:53:ac:e8:92:c9:4d:41:2c:97:a9:
3e:0b:4c:ae:e1:7d:ea:5a:f8:37:aa:2a:06:d4:05:82:53:fc:
0b:d7:d8:87:51:ab:a8:56:32:18:df:b9:4f:c6:83:a1:e2:98:
30:f9:d4:9b:f6:bb:91:ee:5a:af:06:b3:c5:cb:5d:20:fa:49:
cd:91:47:c2:fd:a8:2a:12:cf:b7:30:09:ae:19:10:d6:90:1a:
3e:95:66:48:8a:40:c7:b3:1a:16:42:f6:40:a8:57:63:1e:56:
5a:a4:63:f4:64:86:c7:8e:0b:5c:3f:68:f6:77:d4:e0:9e:08:
4c:d1:f2:d5:9c:51:11:37:fb:3a:cb:b5:dd:d9:5e:c5:61:b3:
95:b0:7f:e7:b3:72:51:5c:46:a0:6f:30:96:a5:df:e5:5e:8e:
fc:7a:2e:c0:1f:d4:4b:ef:bc:5b:47:4e:86:26:e0:ce:0d:83:
02:42:f1:07:10:e5:94:f6:5b:01:5f:c7:6f:48:41:0b:2b:75:
37:01:f5:9a:37:56:3d:23:f1:2d:e1:e5:0b:9f:96:79:e2:b5:
2e:9b:f1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:22:29 2026 by rpki-client