Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
File: Q4_ikN9rauztheCiyTg4FcOZYr4.mft (raw, json)
Hash identifier: iDfyh+UK4U0+6ACKqXhBbUZ3odHVFIAXYA/AMX2VIMM=
Subject key identifier: 0C:4C:57:B8:F7:7F:71:A3:7E:B4:20:9D:DE:63:7E:FB:44:6C:F0:5B
Authority key identifier: 43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
Certificate issuer: /CN=438fe290df6b6aeced85e0a2c9383815c39962be
Certificate serial: 01A08A8C4FE52895FEF758BEE86A4F6B5D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:46 +0000
Manifest this update: Thu 10 Sep 2026 09:00:46 +0000
Manifest next update: Fri 11 Sep 2026 09:00:46 +0000
Files and hashes: 1: O5hsMdJTfPAzmaKfTpZiqj_CLKU.roa (hash: A55AVgMICSKylOppE+N1sSsiijjF/irpmh+Efa773iM=)
2: Q4_ikN9rauztheCiyTg4FcOZYr4.crl (hash: m7jbvbIo//AooxxUnVMvjgR5TDYFYWDLScOAEmiBZAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:4f:e5:28:95:fe:f7:58:be:e8:6a:4f:6b:5d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438fe290df6b6aeced85e0a2c9383815c39962be
Validity
Not Before: Sep 10 09:00:46 2026 GMT
Not After : Sep 11 09:00:46 2026 GMT
Subject: CN=0c4c57b8f77f71a37eb4209dde637efb446cf05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:b7:81:79:5f:c3:e7:5d:ee:3b:ea:2a:4b:
51:f1:66:ed:a7:a5:d9:d8:dd:7b:b0:5e:13:9d:43:
4d:55:29:30:f5:4e:8d:bf:db:81:31:88:a1:74:37:
8e:ad:51:30:56:a4:a6:59:bf:99:b4:7f:d3:8c:5e:
06:d5:7b:be:08:3d:dd:86:bb:ed:2f:0d:ae:a9:75:
3b:f0:fc:17:55:ff:bb:58:1c:fc:20:62:a7:42:28:
02:5d:3d:47:c6:3d:a2:70:f1:76:42:69:ea:2c:67:
4a:b0:da:77:69:fb:2b:9d:b2:b8:a0:50:14:9a:2e:
b8:46:ed:f6:23:b3:72:c0:e9:eb:eb:7d:7e:aa:d9:
52:27:ba:19:8e:b6:0e:aa:d2:ce:98:30:ee:0b:18:
1f:62:c6:31:ad:4d:34:bb:16:e0:c3:4a:de:38:e3:
7a:c2:7a:e8:66:f1:77:7e:57:db:15:71:a5:8a:5c:
6a:82:a3:03:9c:db:d1:1d:58:d7:9f:bc:89:85:c9:
e8:da:1c:aa:da:1d:d8:f1:42:e6:3e:05:6e:3a:56:
2d:00:e6:8e:0b:cd:f4:fc:a7:8a:a8:e7:04:91:26:
00:90:b3:a1:4d:27:29:1b:a2:51:ec:be:53:27:4d:
e4:ae:1a:5e:ab:3b:ac:80:9b:0e:8e:95:b1:da:53:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4C:57:B8:F7:7F:71:A3:7E:B4:20:9D:DE:63:7E:FB:44:6C:F0:5B
X509v3 Authority Key Identifier:
keyid:43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e9:c7:fa:52:ee:ce:d0:68:db:4b:2b:c1:c0:ac:17:6b:9a:
21:91:c1:2e:84:de:59:63:14:23:8f:bc:fb:dd:88:57:d3:2f:
ea:45:b2:32:6c:8d:2a:a7:ef:bb:3a:b5:32:5c:cf:a3:bf:ab:
5a:00:ac:cd:b1:6b:13:ef:a7:18:55:c6:b3:3b:cf:57:1d:59:
a6:3a:6c:a9:da:fb:3f:ee:41:0e:20:1f:d6:fa:97:cf:ea:84:
8a:7e:83:1b:82:ac:e6:9e:ea:73:71:0c:0d:b9:c5:f9:01:63:
bb:6e:3d:02:80:14:d6:ee:40:53:01:f3:77:1e:2e:6e:ce:f1:
fb:d5:ee:a8:a2:f2:62:c6:35:03:cf:45:14:69:dc:06:a8:70:
9e:17:50:46:c8:b8:ff:65:dc:d5:96:d6:c5:12:b3:90:3b:bc:
95:8a:ee:80:eb:c5:19:04:55:90:13:12:d6:d7:98:c2:b2:48:
f9:8f:12:b7:0f:38:d6:63:65:3a:86:9e:9a:25:6e:c0:2f:47:
4d:54:82:0c:77:0b:ea:b6:b0:3a:ee:71:ed:59:fb:f4:fb:0b:
b4:24:23:54:f8:81:65:c7:d3:80:9c:96:40:4d:ef:21:d2:84:
93:51:08:61:9c:98:ee:c6:ba:36:5b:96:ea:98:0d:2d:76:76:
c2:32:99:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjE/lKJX+91i+6GpPa10hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOGZlMjkwZGY2YjZhZWNlZDg1ZTBhMmM5MzgzODE1YzM5
OTYyYmUwHhcNMjYwOTEwMDkwMDQ2WhcNMjYwOTExMDkwMDQ2WjAzMTEwLwYDVQQD
EygwYzRjNTdiOGY3N2Y3MWEzN2ViNDIwOWRkZTYzN2VmYjQ0NmNmMDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV63gXlfw+dd7jvqKktR8Wbtp6XZ
2N17sF4TnUNNVSkw9U6Nv9uBMYihdDeOrVEwVqSmWb+ZtH/TjF4G1Xu+CD3dhrvt
Lw2uqXU78PwXVf+7WBz8IGKnQigCXT1Hxj2icPF2QmnqLGdKsNp3afsrnbK4oFAU
mi64Ru32I7NywOnr631+qtlSJ7oZjrYOqtLOmDDuCxgfYsYxrU00uxbgw0reOON6
wnroZvF3flfbFXGlilxqgqMDnNvRHVjXn7yJhcno2hyq2h3Y8ULmPgVuOlYtAOaO
C830/KeKqOcEkSYAkLOhTScpG6JR7L5TJ03krhpeqzusgJsOjpWx2lOWAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxMV7j3f3GjfrQgnd5jfvtEbPBbMB8GA1UdIwQY
MBaAFEOP4pDfa2rs7YXgosk4OBXDmWK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTRfaWtOOXJhdXp0aGVDaXlUZzRGY09aWXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80Y2U5MzMtNDg4Zi00NmI5LWFjMmMt
N2M5M2NhZTIyN2JkLzEvUTRfaWtOOXJhdXp0aGVDaXlUZzRGY09aWXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi80Y2U5MzMtNDg4Zi00NmI5LWFjMmMtN2M5M2NhZTIyN2Jk
LzEvUTRfaWtOOXJhdXp0aGVDaXlUZzRGY09aWXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtenH+lLu
ztBo20srwcCsF2uaIZHBLoTeWWMUI4+8+92IV9Mv6kWyMmyNKqfvuzq1MlzPo7+r
WgCszbFrE++nGFXGszvPVx1Zpjpsqdr7P+5BDiAf1vqXz+qEin6DG4Ks5p7qc3EM
DbnF+QFju249AoAU1u5AUwHzdx4ubs7x+9XuqKLyYsY1A89FFGncBqhwnhdQRsi4
/2Xc1ZbWxRKzkDu8lYrugOvFGQRVkBMS1teYwrJI+Y8Stw841mNlOoaemiVuwC9H
TVSCDHcL6rawOu5x7Vn79PsLtCQjVPiBZcfTgJyWQE3vIdKEk1EIYZyY7sa6NluW
6pgNLXZ2wjKZsw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:25 2026 by rpki-client