
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File: 4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier: YM8NKwsXCz/w/wNupX+c1iTkEGe+HS/ZLd6/1U+0s90=
Subject key identifier: 4A:09:9B:26:72:E3:51:FC:D3:6B:92:69:FB:4F:80:76:7C:65:D0:1F
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer: /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial: 01A000930491AD1ADDB3B3CD10EF68B732E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number: 0D43
Signing time: Fri 14 Aug 2026 14:00:29 +0000
Manifest this update: Fri 14 Aug 2026 14:00:29 +0000
Manifest next update: Sat 15 Aug 2026 14:00:29 +0000
Files and hashes: 1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: WjVMjigAyuL6IeyI/apiOABgWsRI9wNpRJLhs5RwB4k=)
2: NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa (hash: e6t60cVHGwxB0yMWg7tXzy3uxaUsUhD5hfxLuTTJHN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:04:91:ad:1a:dd:b3:b3:cd:10:ef:68:b7:32:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Validity
Not Before: Aug 14 14:00:29 2026 GMT
Not After : Aug 15 14:00:29 2026 GMT
Subject: CN=4a099b2672e351fcd36b9269fb4f80767c65d01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:98:57:97:c1:65:2d:7a:52:f0:2e:f6:e6:
9c:f9:25:76:af:a3:d5:a4:0c:3a:20:90:ad:af:5d:
13:5a:50:ae:f7:bf:3a:32:5f:d1:dd:44:9a:c6:8a:
ab:c0:84:7b:0b:d8:1f:32:3b:4d:56:15:7c:b7:35:
d6:20:b2:69:c3:c6:87:45:93:01:76:c9:bf:12:ce:
a4:5a:b4:b5:e6:7d:46:56:ac:12:a9:82:32:3f:b1:
29:c9:df:94:3d:86:1e:f9:4e:93:08:54:48:2c:83:
b0:09:04:96:1a:5e:1a:95:cf:01:8f:ae:0b:d1:f9:
f2:49:d7:b3:5f:86:61:89:c6:0d:c5:22:fc:d8:62:
03:03:6b:47:6b:5a:36:31:27:85:c0:03:40:7b:bd:
f7:24:05:b3:eb:72:13:85:86:c1:c4:11:53:ba:8f:
ce:ac:37:bf:26:61:be:04:5c:3f:99:2c:a0:2b:87:
f0:22:21:2a:4a:50:80:2c:5b:bd:e7:99:f4:1b:f6:
8f:03:ef:91:7e:74:dc:73:d4:c1:d0:4a:0b:19:ac:
64:1a:6b:c4:a8:11:6d:9a:7c:35:f5:2d:a6:fc:7a:
ca:dc:d3:9a:29:27:33:cc:50:8c:ed:d1:5d:19:27:
75:4c:6f:13:75:0a:d4:5b:d6:7b:ac:fa:06:84:4b:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:09:9B:26:72:E3:51:FC:D3:6B:92:69:FB:4F:80:76:7C:65:D0:1F
X509v3 Authority Key Identifier:
keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:27:04:4f:2d:65:fd:e6:f5:07:fc:b9:09:c5:88:50:1b:8c:
30:ab:dc:30:cb:d9:f6:5c:79:50:1b:76:75:52:4b:03:d4:35:
7a:47:a5:43:c8:2a:be:bc:d4:ce:e9:a2:26:62:99:9b:8f:6d:
0e:f1:4d:d0:dd:c2:44:57:39:03:92:a6:62:e5:5c:38:08:59:
3f:2a:63:3c:a7:a7:d1:55:3f:3b:f0:9d:31:35:f4:38:5e:42:
d6:be:27:03:e3:08:e3:8b:eb:28:97:a9:87:0b:dc:7c:ab:7e:
81:a3:e5:92:c0:d3:22:bf:ce:21:86:41:b7:b6:29:ca:33:1d:
32:d5:9b:15:f4:b0:00:9c:27:65:3f:96:a8:c3:85:57:ee:ac:
be:49:47:7f:40:4b:f3:3d:2b:3c:91:f7:ff:0e:b6:17:ca:98:
87:ed:38:d9:a8:0e:81:b1:56:93:39:d2:6e:99:3a:6c:27:b4:
bd:0f:e9:e1:7b:a4:0b:d2:63:d9:ed:db:49:c9:72:3b:f1:c8:
d3:7c:59:ad:75:b9:7b:dd:e4:87:1f:d0:20:57:6d:0d:ae:35:
a4:97:a9:c9:69:7b:1f:5f:9a:a9:5d:4a:9d:ba:24:b9:50:3e:
51:2d:c1:56:62:37:38:55:ab:c9:f5:8c:57:24:9d:c8:45:06:
91:7e:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:10 2026 by rpki-client