Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
File: Q4_ikN9rauztheCiyTg4FcOZYr4.mft (raw, json)
Hash identifier: R54Oo1nPM8vSUOREN65dwnzHpxBqWewCtfzcnaEr3so=
Subject key identifier: 03:33:40:56:E6:3C:6A:80:F9:BE:AB:05:15:21:EA:85:5B:4F:AB:C6
Authority key identifier: 43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
Certificate issuer: /CN=438fe290df6b6aeced85e0a2c9383815c39962be
Certificate serial: 01A17FCFCC39F659E933CF60078648A57295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:01:26 +0000
Manifest this update: Wed 28 Oct 2026 00:01:26 +0000
Manifest next update: Thu 29 Oct 2026 00:01:26 +0000
Files and hashes: 1: O5hsMdJTfPAzmaKfTpZiqj_CLKU.roa (hash: A55AVgMICSKylOppE+N1sSsiijjF/irpmh+Efa773iM=)
2: Q4_ikN9rauztheCiyTg4FcOZYr4.crl (hash: pXP9n12iz+fNcK/L63eitnTXZZIPuO5ykHOrc2opwqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:cc:39:f6:59:e9:33:cf:60:07:86:48:a5:72:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438fe290df6b6aeced85e0a2c9383815c39962be
Validity
Not Before: Oct 28 00:01:26 2026 GMT
Not After : Oct 29 00:01:26 2026 GMT
Subject: CN=03334056e63c6a80f9beab051521ea855b4fabc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:5e:91:a8:00:36:42:9f:89:85:c7:38:e3:
73:ac:dd:a1:6d:23:df:18:dc:2e:30:86:72:91:07:
30:2f:bf:c0:3e:15:b2:80:04:2f:6a:a2:30:df:83:
ea:15:f2:59:6f:1f:f4:e5:7c:b5:83:4c:94:39:77:
c6:38:d6:25:1c:fc:71:7f:3f:16:4d:5e:c3:4a:09:
fa:88:2c:6a:54:13:44:bd:70:aa:82:87:57:27:b6:
a1:a2:f4:46:33:fd:fd:cb:d4:47:2a:ef:83:4c:11:
f3:22:a1:8a:8e:35:25:0f:fe:4f:1b:a1:25:f6:4e:
43:4f:86:3e:ed:34:c1:57:1b:11:10:02:2e:ac:7d:
d7:51:e7:08:4e:bb:9d:77:21:88:cf:89:22:86:76:
f5:e7:b7:75:c1:22:c8:e2:39:c3:23:ab:38:19:ae:
8a:d9:b2:2e:fa:92:14:8b:e4:9e:0f:fd:84:20:ad:
5e:c4:dc:0a:3f:34:04:08:c6:ce:0c:17:78:e9:91:
76:d3:3f:b6:3f:17:99:17:a8:8b:3b:33:0d:76:fb:
88:dd:09:4a:0d:ab:f7:cf:e1:fd:27:eb:22:7c:24:
89:e6:5d:36:f9:b8:29:ed:f8:6f:16:16:6e:38:c9:
7c:43:a4:11:d1:f0:a3:1b:7c:bd:47:31:fe:30:23:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:33:40:56:E6:3C:6A:80:F9:BE:AB:05:15:21:EA:85:5B:4F:AB:C6
X509v3 Authority Key Identifier:
keyid:43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e6:b1:b3:a4:cb:ed:9a:82:ab:38:c4:ce:f3:51:6e:5d:c6:
bc:a7:0c:d9:1e:01:f7:0a:cc:16:f4:85:2b:60:df:a0:d4:a3:
3f:4b:3d:3f:55:92:b3:ba:9b:d1:cc:35:b9:d5:0b:73:45:83:
fd:de:f4:b9:72:63:3a:0f:75:48:ac:b4:7a:45:ab:a0:66:ea:
53:6e:1b:40:19:27:9b:6d:60:8b:5d:c1:93:21:4d:a0:1c:d2:
9a:45:2f:c0:c7:93:b9:d1:10:90:b1:f6:7f:05:3c:e8:4a:43:
00:6d:e7:d2:92:40:f0:fc:14:e9:16:8a:9e:97:0a:8c:6d:80:
b6:22:6f:20:cf:53:cc:0c:ae:26:0d:4f:d4:69:6f:11:dc:36:
49:e9:85:a5:d9:5f:7c:41:34:12:26:7c:9a:5e:6e:9a:89:ec:
fc:f8:ca:f4:b5:58:e2:45:e3:7b:f3:b6:7c:d5:15:69:03:de:
aa:e9:89:e8:e0:de:e3:45:1a:d2:d3:4e:40:d3:b7:ed:f4:e2:
30:e0:c3:62:a9:11:0b:42:4e:a4:88:66:d0:35:cf:28:a9:5a:
22:40:d2:a2:84:37:ac:81:69:1d:49:1b:4f:a9:0e:4e:0e:9a:
2f:43:02:8f:e5:ef:c9:03:a4:e3:81:01:9f:86:8e:da:e4:3f:
e8:a7:a0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:49 2026 by rpki-client