Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: HFq3a1TMbggRuYK7j+wAIAXf/UeKtLyfvjr1c6zY04g=
Subject key identifier: F0:B0:9D:4F:BB:13:6A:29:23:54:1F:80:2C:7D:CC:E2:F0:18:9E:41
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 019F28ED8FCE09611FF0DC99AA4DAB711D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 1995
Signing time: Fri 03 Jul 2026 17:01:25 +0000
Manifest this update: Fri 03 Jul 2026 17:01:25 +0000
Manifest next update: Sat 04 Jul 2026 17:01:25 +0000
Files and hashes: 1: 6adJkufM2vCd-z5ZhfO9iFInD5I.roa (hash: eStOI3RXAw0Itmdq+ACmIjyoC4OiC/7VPLcYAGLEjE8=)
2: WpjjTnaqAZv75i8pt4da5AeyrG8.roa (hash: zVLZyAPVL7um6st0K7rE7n1hsZMqjYHJuIbZn63Z38s=)
3: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: 8XQcbwpOr4BO/F7wqx7/nsZLAR0IqdYikhKszQFQgz4=)
4: zFQaWtM5PgZgQ7lLGiUdAyDYFlk.roa (hash: T++koCK9BmrUNL9Ums78HVke+W3UNP2l17fVLv+FlR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:ed:8f:ce:09:61:1f:f0:dc:99:aa:4d:ab:71:1d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Jul 3 17:01:25 2026 GMT
Not After : Jul 4 17:01:25 2026 GMT
Subject: CN=f0b09d4fbb136a2923541f802c7dcce2f0189e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ab:c5:11:4d:c7:29:b7:5a:94:df:05:44:2a:
f4:ed:96:fe:e2:f0:14:f0:12:f3:17:ea:1d:51:b0:
85:97:61:91:db:49:59:7c:ec:3d:40:03:ef:bf:c6:
c8:f4:11:c0:e2:40:54:2d:26:d9:a6:1a:b4:c5:05:
4c:b0:6e:9b:82:61:02:d8:90:23:6e:07:93:22:2c:
eb:17:a0:9a:7c:53:36:e4:f5:b9:ca:9d:88:d0:86:
4d:a1:0c:d7:a6:d2:fc:1a:58:92:9a:e0:73:0f:21:
da:10:01:50:b1:a7:ec:a9:f0:e3:c6:99:8b:2e:4e:
8a:6e:aa:1c:92:ae:b2:ae:e9:c6:92:d1:2f:67:7a:
fa:d0:ea:da:fc:74:1e:ed:44:77:a8:9d:67:e8:53:
3f:8f:9a:17:91:8e:7a:04:4d:9f:69:bf:5d:cb:a8:
5c:7d:fc:07:1b:42:d9:b5:55:41:a3:c1:fd:c9:b8:
a4:7c:29:ac:77:1c:dd:36:f5:45:cd:79:a9:84:96:
60:7b:cf:ff:70:c7:df:89:39:41:be:a0:75:68:19:
5f:cc:bd:51:26:8b:c4:eb:04:bc:ce:5c:32:48:6a:
d9:21:a7:81:8a:de:3a:b9:4f:04:9b:f2:c0:8d:9e:
8f:a9:dc:e7:93:be:2b:0e:f3:f6:7f:d5:88:b0:94:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B0:9D:4F:BB:13:6A:29:23:54:1F:80:2C:7D:CC:E2:F0:18:9E:41
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8b:16:10:2c:3d:c7:ec:b3:f2:f5:78:74:8c:59:f8:bd:3e:
db:58:76:80:89:f5:27:d3:2c:45:7d:99:a7:f2:5b:dd:52:35:
24:82:ee:82:6a:fe:62:e0:58:03:60:e0:ba:cb:8b:ef:ad:01:
a3:0f:99:ae:bd:0e:30:c7:ef:76:2b:28:e1:12:bf:01:15:8c:
e7:bb:e5:d4:bc:bd:ba:19:77:ef:a1:5f:9f:60:44:7b:4a:80:
04:37:13:71:34:da:bd:91:46:78:e6:41:6e:04:ec:ba:8e:35:
b9:6f:8b:be:32:f1:09:fa:59:58:9e:95:b3:d1:7e:c9:46:d8:
02:6f:97:92:90:43:9a:76:ca:28:45:7b:42:d3:d5:d1:b4:14:
0f:f7:a6:13:b0:30:50:b9:0e:e7:3c:1c:03:b1:99:92:8b:70:
62:7c:fe:41:11:e7:d6:f0:43:20:57:ca:d5:ca:5c:63:0a:16:
16:9b:6c:38:00:fd:6b:b8:63:74:21:5e:5f:9f:d6:8b:d5:f3:
ec:89:f3:7d:d4:9c:ce:3b:32:7e:ba:2d:aa:fa:63:d9:f3:fd:
c8:c5:1f:39:d0:48:42:1f:9a:da:8c:1d:25:1f:c4:32:24:79:
ed:07:a2:90:67:9d:f2:67:23:27:d6:85:c4:89:56:f9:8f:0d:
31:9c:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:47:03 2026 by rpki-client