
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: ZjXFyAYkWit2bCnVX4PshkThkzI1VpBqEAjROMWOUpY=
Subject key identifier: A7:F3:8F:6D:1F:9C:C7:04:37:22:9D:03:95:27:DD:F2:0F:9F:BE:23
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 01A13B5B96575C707EE4AB8E140BA766A281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 1AA9
Signing time: Wed 14 Oct 2026 17:00:20 +0000
Manifest this update: Wed 14 Oct 2026 17:00:20 +0000
Manifest next update: Thu 15 Oct 2026 17:00:20 +0000
Files and hashes: 1: 6adJkufM2vCd-z5ZhfO9iFInD5I.roa (hash: eStOI3RXAw0Itmdq+ACmIjyoC4OiC/7VPLcYAGLEjE8=)
2: WpjjTnaqAZv75i8pt4da5AeyrG8.roa (hash: zVLZyAPVL7um6st0K7rE7n1hsZMqjYHJuIbZn63Z38s=)
3: wzFUmExrbfhJGO9J_KmqSJOAv_s.roa (hash: EUfocXXtzQ4PPAMu6osjSAolxe2DCe3wU+6Eub2eN14=)
4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: rSt67sRgkEEksHTyC4yvq0ju6mVbbP1hkod5q8o1bh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:5b:96:57:5c:70:7e:e4:ab:8e:14:0b:a7:66:a2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Oct 14 17:00:20 2026 GMT
Not After : Oct 15 17:00:20 2026 GMT
Subject: CN=a7f38f6d1f9cc70437229d039527ddf20f9fbe23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:c6:a2:1f:ca:c9:af:82:31:d2:b9:12:bc:
02:c6:a4:d8:f9:65:98:64:ff:82:d6:3d:41:09:ae:
5d:1a:59:3a:16:da:a0:84:39:73:d0:e1:4d:e9:f8:
da:2f:93:e8:51:85:04:0f:d7:3d:d2:93:58:ef:fe:
18:a4:5e:0d:30:80:a9:e1:1d:e3:b1:e8:ea:ca:67:
c6:da:c8:2d:d2:45:a6:6b:2a:21:08:48:c3:13:59:
5e:4f:01:21:a8:04:37:7b:0c:9a:51:33:ec:ba:3f:
56:2f:69:bc:a4:1c:10:eb:bd:90:3b:f3:d4:2d:83:
78:f6:fd:63:f1:00:4e:72:8a:da:fa:a6:d7:44:00:
dd:14:d5:90:3e:0a:21:48:2a:17:68:04:c3:1f:31:
8c:9f:b4:48:f6:e6:c9:be:0d:bc:a5:9f:39:59:55:
04:1d:5c:52:12:b6:ed:b9:7e:83:31:ae:55:2f:69:
2b:3e:2f:8a:fc:a7:46:a1:b4:8d:c0:66:4d:26:23:
bf:8b:ee:c3:87:d8:91:a4:3f:3b:f1:a5:d1:08:8c:
08:c0:6f:02:03:fa:49:d1:33:38:b2:cf:3f:25:f2:
93:a6:97:e8:b4:fd:77:86:51:fc:27:1f:59:11:41:
92:2a:19:9c:0b:7f:12:69:2a:3b:45:b5:81:6d:cb:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:8F:6D:1F:9C:C7:04:37:22:9D:03:95:27:DD:F2:0F:9F:BE:23
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fa:44:66:e0:c7:26:9a:a3:41:cb:2b:b1:78:4c:e1:02:13:
1b:d2:61:2c:4b:0c:d9:d7:c3:3a:1e:58:ed:b5:08:44:5d:45:
d9:aa:47:59:aa:95:06:79:25:9c:cb:97:25:bb:1a:56:21:2a:
db:d6:93:88:0f:f7:62:58:51:71:c3:75:e7:50:17:ba:9f:8d:
85:ba:45:28:32:4a:0c:11:e2:6a:3d:6f:58:73:d8:3e:86:75:
ac:12:65:a7:6c:0f:04:ef:5e:42:af:b9:fe:9d:d3:3e:51:d6:
06:cc:5d:4f:f9:48:84:ca:70:7e:b9:72:af:01:10:1f:c2:02:
64:3a:6f:fc:76:8a:8d:da:8d:96:65:ec:a6:72:f2:ab:4d:ef:
99:35:e5:0c:f0:05:3c:62:a1:38:4c:c3:ea:66:12:e5:fd:2b:
02:f5:14:28:ea:09:49:e5:19:d1:56:05:8f:d4:b6:bb:3c:25:
b9:94:dc:99:6c:9e:13:5d:f7:51:78:12:93:3b:bf:67:4a:df:
2e:d0:17:e2:78:f3:56:c0:23:de:01:01:f3:b2:5f:67:2e:c9:
d9:7e:db:f3:96:fd:f2:8f:f3:53:04:da:5a:33:58:61:d6:20:
b6:dd:e8:da:b3:b5:b6:6b:aa:7c:ac:f6:16:ed:fa:e5:8d:21:
08:7a:5c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:00:11 2026 by rpki-client