Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier: eGKkaScoDGjyLD/mjGbYLHuZibb8mx8loh4PSm331Xs=
Subject key identifier: F0:10:0E:5F:73:69:89:0B:AD:8D:BF:D9:80:4B:75:53:C3:CA:C8:59
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial: 01A13FDE5ECED31A1937D9B397779B4AD33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 14:01:40 +0000
Manifest this update: Thu 15 Oct 2026 14:01:40 +0000
Manifest next update: Fri 16 Oct 2026 14:01:40 +0000
Files and hashes: 1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: 2s1bnaMQjiQG+f9YOIjdlsAN0g2KkFFCHINYQhvn0KI=)
2: TJP6k57F2KKffGkzwtmw00x9OYg.asa (hash: t56zBc/7gOvS31JdBZtqJ5AR4Nq7Y+BSjxkOYEV3eVo=)
3: s1nZMiUxX0KPp0wicgV40W2ekpo.roa (hash: 8p4KiLqCejQsqzTHF1lizxvoE/Y1cv0plDRwFdt2vFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:5e:ce:d3:1a:19:37:d9:b3:97:77:9b:4a:d3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Validity
Not Before: Oct 15 14:01:40 2026 GMT
Not After : Oct 16 14:01:40 2026 GMT
Subject: CN=f0100e5f7369890bad8dbfd9804b7553c3cac859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a5:4a:30:ec:5f:0d:1c:45:66:85:76:19:28:
a7:a4:65:b1:03:0e:70:5a:02:76:af:17:a9:28:e2:
63:bf:6a:92:b8:dd:54:eb:ac:6a:51:03:d8:2e:6b:
ea:e3:a3:2d:7d:87:f3:9f:e8:56:da:5e:b9:51:cb:
3a:8c:8d:53:9e:33:0e:a5:81:72:66:04:6e:b6:3e:
bc:1c:8f:95:7b:39:99:57:63:0e:30:15:1d:ca:66:
77:26:a7:eb:2a:79:26:85:77:f8:92:de:e1:d5:eb:
60:a9:73:7c:97:47:dc:ff:9f:46:7e:cd:f7:39:bc:
0d:ca:42:44:d0:a9:db:2b:94:b0:f7:a9:11:82:44:
f4:55:d8:12:53:53:95:17:1a:a3:06:a7:b3:a2:bd:
de:8d:91:90:cb:37:49:43:11:98:49:97:cd:fb:ed:
ba:ba:b8:b6:1a:19:05:c6:21:c2:1e:5c:c2:0f:56:
c4:e6:08:de:92:95:01:49:37:ca:9d:11:f8:be:67:
9a:08:49:16:61:39:d0:d8:a9:5a:51:88:1f:3c:1c:
f4:89:18:43:14:fc:cb:e5:2e:a6:dd:e0:63:cb:c0:
01:3a:04:10:e6:d8:6d:96:09:91:51:0c:9f:1b:37:
4c:1e:40:8b:fd:df:f8:7a:46:20:73:71:26:37:13:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:10:0E:5F:73:69:89:0B:AD:8D:BF:D9:80:4B:75:53:C3:CA:C8:59
X509v3 Authority Key Identifier:
keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:93:82:7e:30:4d:2a:e4:9f:22:37:6c:a6:ed:bf:89:06:a1:
57:70:4e:36:a3:56:69:47:49:52:62:6b:8b:56:5f:31:2d:07:
ff:09:2f:62:f5:af:24:15:05:a6:c2:b4:14:d9:69:e4:b1:5e:
ee:0c:a0:a7:19:db:11:4d:7a:76:bd:c3:10:8d:56:ec:50:31:
1c:07:e3:bf:11:e6:28:f1:d7:0a:96:36:02:1a:98:c4:6c:69:
6a:a5:67:ad:c7:85:23:7d:60:39:8b:f4:65:d8:09:8d:43:b8:
04:28:06:72:e6:85:23:6f:de:6d:05:da:35:16:81:4a:60:44:
a1:58:a8:2c:f5:49:b7:f6:ad:04:70:4e:34:8e:f7:c7:4f:f0:
7c:e1:36:9e:e9:39:94:3f:58:64:45:8a:56:76:18:5b:43:4f:
3a:fb:95:18:24:79:7e:47:77:83:e0:0e:29:8f:5e:67:78:cb:
b6:42:74:63:e3:5f:4b:ea:3a:07:79:53:f8:3e:5b:ce:81:5c:
23:a2:5a:a9:01:0d:3d:7d:bc:68:b8:8f:a0:5c:06:4c:ba:b7:
64:1c:42:57:a0:9f:10:84:de:66:7b:f6:8a:0e:db:64:75:30:
f6:2d:58:11:02:af:33:87:48:20:e6:8f:75:53:cd:87:ca:ca:
0a:70:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:29 2026 by rpki-client