
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: iyT41J5Wveupr7cf8xvgiVQbcar88h4U1XV3O3SVutQ=
Subject key identifier: 15:3D:DB:8F:CF:70:39:99:1D:D1:A8:E4:C2:87:14:10:92:9F:0E:6C
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 01A0273376228142C909476049BCF8548A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 1A1A
Signing time: Sat 22 Aug 2026 02:01:19 +0000
Manifest this update: Sat 22 Aug 2026 02:01:19 +0000
Manifest next update: Sun 23 Aug 2026 02:01:19 +0000
Files and hashes: 1: 6adJkufM2vCd-z5ZhfO9iFInD5I.roa (hash: eStOI3RXAw0Itmdq+ACmIjyoC4OiC/7VPLcYAGLEjE8=)
2: WpjjTnaqAZv75i8pt4da5AeyrG8.roa (hash: zVLZyAPVL7um6st0K7rE7n1hsZMqjYHJuIbZn63Z38s=)
3: wzFUmExrbfhJGO9J_KmqSJOAv_s.roa (hash: EUfocXXtzQ4PPAMu6osjSAolxe2DCe3wU+6Eub2eN14=)
4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: UHN7gEMKTdbP5KUT0+AcDiYMANgKX96naARvLvuv56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:33:76:22:81:42:c9:09:47:60:49:bc:f8:54:8a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Aug 22 02:01:19 2026 GMT
Not After : Aug 23 02:01:19 2026 GMT
Subject: CN=153ddb8fcf7039991dd1a8e4c2871410929f0e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:a3:9c:c9:85:e9:d2:f0:6e:9c:82:d3:28:
aa:f7:b9:6d:0c:d9:05:bd:06:42:01:a0:06:9b:d8:
81:0f:74:4d:62:f1:22:5b:46:a1:fd:d3:06:e6:2c:
14:e9:59:03:59:86:65:b3:56:e8:1e:58:ac:de:f3:
f4:c8:e4:0f:1e:6c:44:f2:b3:93:f5:e6:d1:8a:23:
eb:9c:58:e9:59:4f:03:c8:52:32:d5:94:a1:94:c3:
2e:49:c7:ee:37:1f:e5:a8:3f:78:35:ed:c4:3a:73:
c6:6e:1a:db:99:ab:95:29:0a:2d:20:7d:bc:3a:7b:
6d:99:b7:82:d2:d0:c3:06:be:ab:7d:73:5c:83:b5:
27:97:27:25:04:ec:f7:36:2a:c4:9d:17:f3:c9:8b:
79:ff:41:f8:44:26:44:57:3f:f6:4f:78:e3:ba:c5:
2d:8d:8d:e2:26:97:79:a8:81:b6:6a:02:7d:6d:b6:
a9:2c:62:2b:22:11:be:8e:62:b4:5c:de:47:c7:9f:
59:4f:46:53:fb:53:24:83:9c:58:81:44:7c:86:ef:
b6:cd:85:bf:59:eb:b2:c7:f7:1c:50:61:65:4e:5d:
90:16:f3:61:95:5d:69:32:e9:64:df:c0:14:d3:a2:
9a:7c:5e:22:8e:bc:44:9f:5a:19:19:a5:d5:58:a2:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3D:DB:8F:CF:70:39:99:1D:D1:A8:E4:C2:87:14:10:92:9F:0E:6C
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:27:92:f0:2d:6f:11:fa:b6:b8:0b:f6:54:22:ba:36:83:6b:
be:0e:15:38:f5:3b:28:0c:7f:05:e4:c2:39:a3:96:ff:8f:9c:
51:94:7f:61:fe:c4:2d:d5:f7:1d:1b:4a:37:30:69:80:a4:a4:
03:2a:ea:7e:e7:0e:bf:43:95:9e:5c:25:7f:a6:e6:c4:01:da:
e5:90:4e:0e:bc:e5:98:77:e3:fe:1e:ee:25:d9:08:36:ed:5f:
c6:8e:f2:40:0b:2d:7c:1c:87:67:3f:ef:52:3a:d5:24:d7:5c:
cd:94:63:43:22:d1:fb:fd:81:b7:73:99:d2:d0:23:cb:ed:f0:
b8:fb:e9:a1:8f:6f:02:84:79:b2:b3:75:c9:14:03:37:fb:10:
2b:5c:6c:f9:3f:ab:d2:5e:77:7a:a2:0c:85:3a:83:59:7c:cc:
8a:97:74:8b:8e:47:b6:ed:1e:4f:54:72:cc:e2:09:bf:bc:31:
18:bf:d4:04:78:54:08:e3:f2:c9:b6:9f:a1:a0:c6:ab:1b:0b:
bf:5f:7a:97:ae:51:ec:5a:bc:c6:2e:d6:b6:31:d8:36:4c:fa:
12:24:a4:d0:e8:22:21:10:cc:fb:d1:88:fc:f1:20:12:f6:a9:
df:7d:4d:ff:18:69:47:df:91:79:89:b1:14:3d:6a:1d:cf:76:
0a:c6:54:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:03:02 2026 by rpki-client