Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
File: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft (raw, json)
Hash identifier: wzaXKYNYE4QeC7vWUIPl8QyBorTsGmzbrdZ7kLquEUs=
Subject key identifier: 1C:F7:7E:AD:AD:1A:3F:63:A8:87:B7:53:F9:30:55:47:4A:5A:3E:95
Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
Certificate issuer: /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Certificate serial: 01A10B4B62C5F353197B66FC81466C11AA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
Manifest number: 1148
Signing time: Mon 05 Oct 2026 09:00:52 +0000
Manifest this update: Mon 05 Oct 2026 09:00:52 +0000
Manifest next update: Tue 06 Oct 2026 09:00:52 +0000
Files and hashes: 1: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl (hash: CB1PgPL3syTg42pugn1b2Tk4QdpSiXmUf1d6h4SBzV0=)
2: WrzCt0ggh7iZD0VHwtwqCx9fUjw.roa (hash: rSWhgeEnr5lWgG/XFNR90qaps5z/LuCtc8T7p4q2CNw=)
3: eIvH6RZh5CBBaCpwmTzlC7bIiGI.roa (hash: Gjo99d741c5L53QhsfOcyUVX8zjxEGGwTqWyZMoY2Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:4b:62:c5:f3:53:19:7b:66:fc:81:46:6c:11:aa:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Validity
Not Before: Oct 5 09:00:52 2026 GMT
Not After : Oct 6 09:00:52 2026 GMT
Subject: CN=1cf77eadad1a3f63a887b753f93055474a5a3e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:e8:97:4e:9e:41:e2:20:4d:80:b5:b1:34:
93:67:78:dc:8c:83:61:c6:61:09:a7:ac:63:e9:53:
5f:13:0b:32:c3:0a:8d:6b:13:f8:b9:c8:e9:2f:49:
48:57:74:c5:95:23:d0:70:0f:e7:e8:6f:7b:9e:c2:
91:e3:81:05:6e:f2:5c:41:b0:47:05:bd:82:f4:d6:
95:8b:a7:c5:1a:9f:81:5e:5f:4e:90:fc:66:40:09:
c9:db:51:9e:54:cc:1b:77:29:ea:da:4b:0a:62:d0:
79:b6:25:df:ec:72:59:5d:4d:54:d4:f4:65:f4:15:
49:eb:a2:5d:f7:18:d9:41:a5:15:8d:68:74:57:ce:
4f:87:24:44:0e:ed:80:37:8a:ef:ce:69:d1:76:4f:
9b:c4:53:6c:32:dc:82:82:00:53:2c:5b:04:2c:f8:
3d:4b:5a:85:4e:24:62:bf:77:55:62:c5:bc:22:d6:
3a:08:fc:9e:57:6c:5c:9a:eb:bb:12:61:d9:ca:51:
3d:53:69:cd:72:e9:8e:d0:de:62:28:b4:b2:a6:b0:
9a:74:31:dc:91:bc:ed:ee:a4:f5:8d:24:be:ce:1b:
a1:d6:e4:30:b2:fd:b7:54:97:fc:22:49:08:de:43:
24:5e:c6:77:79:06:6f:8c:30:5c:0e:28:52:fe:87:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F7:7E:AD:AD:1A:3F:63:A8:87:B7:53:F9:30:55:47:4A:5A:3E:95
X509v3 Authority Key Identifier:
keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1a:77:fd:5a:9c:89:0e:06:5e:9f:8f:c4:49:22:dd:ae:27:
eb:ee:fe:77:52:6f:96:35:e0:de:5b:e5:bd:8f:7e:29:0a:93:
4c:e7:3e:0c:44:bc:b3:fc:13:3b:6a:73:3f:0f:cc:cf:72:0c:
9c:08:30:ff:e2:de:12:40:89:8b:7d:55:a8:5b:cc:ec:76:71:
31:85:91:ca:39:aa:73:dc:c1:c8:11:57:fc:4b:74:38:6b:4a:
6c:85:ac:b1:64:0d:3e:cb:b1:3e:71:8a:37:5f:9a:1e:db:2a:
07:d5:5f:ec:17:ad:fd:11:7c:79:57:ab:c9:e4:5d:f7:bc:75:
86:dd:5c:4f:10:38:2b:a5:c3:05:8e:ba:48:7f:ab:eb:f5:53:
16:27:0d:e4:58:10:69:22:07:5e:fd:f0:75:b9:55:c9:fe:db:
1b:72:83:d7:c6:b4:20:f1:a2:9d:c4:37:81:0e:4b:86:9a:56:
9a:89:21:6a:44:17:72:92:89:d2:d8:3c:a5:20:e6:87:5f:b6:
38:23:82:ee:76:a7:46:95:37:b1:f7:08:1b:79:bc:12:d7:1b:
20:86:a8:36:34:1d:aa:b7:2c:3e:c5:2e:1f:89:62:d9:fe:55:
85:88:86:6e:bc:96:81:e2:a1:4f:03:3d:78:f8:34:8f:2c:16:
ca:6a:6d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaELS2LF81MZe2b8gUZsEapyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMGZiYjliM2NkMWMyMTZhZGM2OTllNWVkYWQ1ZjUzMWQ5
YWZjYjYwHhcNMjYxMDA1MDkwMDUyWhcNMjYxMDA2MDkwMDUyWjAzMTEwLwYDVQQD
EygxY2Y3N2VhZGFkMWEzZjYzYTg4N2I3NTNmOTMwNTU0NzRhNWEzZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt3ol06eQeIgTYC1sTSTZ3jcjINh
xmEJp6xj6VNfEwsywwqNaxP4ucjpL0lIV3TFlSPQcA/n6G97nsKR44EFbvJcQbBH
Bb2C9NaVi6fFGp+BXl9OkPxmQAnJ21GeVMwbdynq2ksKYtB5tiXf7HJZXU1U1PRl
9BVJ66Jd9xjZQaUVjWh0V85PhyREDu2AN4rvzmnRdk+bxFNsMtyCggBTLFsELPg9
S1qFTiRiv3dVYsW8ItY6CPyeV2xcmuu7EmHZylE9U2nNcumO0N5iKLSyprCadDHc
kbzt7qT1jSS+zhuh1uQwsv23VJf8IkkI3kMkXsZ3eQZvjDBcDihS/odFVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz3fq2tGj9jqIe3U/kwVUdKWj6VMB8GA1UdIwQY
MBaAFOEPu5s80cIWrcaZ5e2tX1Mdmvy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQt
NjJhMjhmM2UwMDFjLzEvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQtNjJhMjhmM2UwMDFj
LzEvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRp3/Vqc
iQ4GXp+PxEki3a4n6+7+d1JvljXg3lvlvY9+KQqTTOc+DES8s/wTO2pzPw/Mz3IM
nAgw/+LeEkCJi31VqFvM7HZxMYWRyjmqc9zByBFX/Et0OGtKbIWssWQNPsuxPnGK
N1+aHtsqB9Vf7Bet/RF8eVeryeRd97x1ht1cTxA4K6XDBY66SH+r6/VTFicN5FgQ
aSIHXv3wdblVyf7bG3KD18a0IPGincQ3gQ5LhppWmokhakQXcpKJ0tg8pSDmh1+2
OCOC7nanRpU3sfcIG3m8EtcbIIaoNjQdqrcsPsUuH4li2f5VhYiGbryWgeKhTwM9
ePg0jywWymptvQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:33:39 2026 by rpki-client