Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier: KnnFq1Sp2a4XgdeU9alNgiDk4c15FZIVuHjR5Z5m1/g=
Subject key identifier: C6:65:52:3F:C0:8C:E9:BD:45:26:32:41:CD:44:C8:02:4D:BB:BF:5E
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial: 019D39E5611BBF2E4289616D15E07A1ED5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number: 08F1
Signing time: Sun 29 Mar 2026 14:00:26 +0000
Manifest this update: Sun 29 Mar 2026 14:00:26 +0000
Manifest next update: Mon 30 Mar 2026 14:00:26 +0000
Files and hashes: 1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: JDowy2mxcGMKw/NbupY9aS2/Hj/tC6VQGBPrxeQC7c4=)
2: VBelpQwcAQaQvThvEwysdwbgrak.roa (hash: UGGt4tB1S8FTbx+5vNuFXFdkEAnx40jxbwqWiMzAMAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:61:1b:bf:2e:42:89:61:6d:15:e0:7a:1e:d5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Validity
Not Before: Mar 29 14:00:26 2026 GMT
Not After : Mar 30 14:00:26 2026 GMT
Subject: CN=c665523fc08ce9bd45263241cd44c8024dbbbf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:bc:3b:21:85:6d:7c:8a:14:e1:00:ea:ed:
db:12:c3:b9:c0:1e:a9:70:ae:eb:d1:fe:92:cd:3d:
4e:e6:a7:41:36:75:8b:00:41:82:7b:ef:5c:58:ed:
f9:73:26:18:36:62:46:e2:66:8f:be:00:07:a7:69:
99:d9:3b:cf:da:54:14:79:bc:2b:12:b2:2c:27:03:
08:b2:61:33:9a:dc:6f:08:bf:f8:12:af:25:fb:b9:
40:62:70:58:47:6c:91:c6:79:26:41:38:63:c9:59:
29:63:11:cd:41:06:51:e9:51:8a:84:91:ef:e4:aa:
53:7e:e6:b7:87:d8:f4:4b:da:1d:54:7a:58:91:fa:
f7:dc:70:ff:85:87:ea:56:31:d2:a8:00:7a:c3:7c:
83:b5:a6:9a:bc:86:08:f2:b2:d5:d2:0a:fb:26:38:
11:b5:85:99:7e:50:5d:93:c8:2d:a8:55:71:6a:6f:
17:74:32:84:65:c5:55:97:cc:16:75:ff:70:aa:10:
40:c7:29:40:07:46:c3:ea:14:64:fe:44:a1:1d:9e:
65:d4:8a:8b:39:18:f0:d1:53:4f:d0:70:d7:ce:95:
a6:1f:e9:ee:a8:74:f2:42:57:40:14:7f:ec:98:51:
e5:c6:49:33:a3:d4:cd:87:1e:b1:55:61:16:87:e2:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:65:52:3F:C0:8C:E9:BD:45:26:32:41:CD:44:C8:02:4D:BB:BF:5E
X509v3 Authority Key Identifier:
keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4c:49:8a:ea:aa:35:f1:30:1e:98:75:64:fd:b1:1f:4d:91:
ee:7a:e8:93:28:ef:5c:b9:47:0f:6f:3f:c7:75:26:e7:06:69:
fe:cc:26:23:ba:ab:7a:29:fa:a5:55:41:ed:7e:e2:12:f0:b9:
a2:00:2f:91:15:7d:7c:65:0c:f4:eb:ad:c3:8d:ee:e5:3d:d1:
c4:7e:fe:55:96:e1:dc:68:e7:79:5d:2b:60:8b:13:76:d7:c5:
7e:5b:65:17:2f:e7:e9:36:11:6e:e7:a1:fd:b9:c6:ce:66:27:
de:9c:c5:37:0d:21:94:60:fa:39:50:f4:fd:72:27:10:cd:76:
e9:e7:9b:d3:11:31:fc:e2:27:57:2f:c2:7c:d4:2a:ae:37:08:
ae:00:b2:e3:f6:6d:6a:7b:a4:d1:bd:d6:28:58:7b:ba:5b:56:
bd:17:72:c7:af:02:c2:00:ef:e5:1d:75:ea:88:f0:17:88:52:
e3:5a:a6:76:5c:cb:6d:44:97:42:66:44:f9:7a:8a:56:57:1b:
12:64:83:86:34:b5:83:08:ff:ac:25:c7:82:6e:a3:cb:c4:2a:
42:d0:16:55:b2:2d:e1:fa:30:a9:aa:f9:9e:12:65:2c:85:a6:
97:2b:c8:3b:e8:21:c5:de:ee:2f:e0:b4:90:f5:63:0f:dd:d7:
74:9d:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:05 2026 by rpki-client