
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
File: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft (raw, json)
Hash identifier: lmWxqWnNddG/Bql0oWCz4KhhlOGmYsyVJGAWtdF0MKE=
Subject key identifier: 30:36:A6:68:F9:5A:97:A6:C2:B6:B6:A7:C8:43:CA:52:49:84:3D:32
Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
Certificate issuer: /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Certificate serial: 019E299478C0F25BAB555F5B7B560ED2B4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
Manifest number: 0FCA
Signing time: Fri 15 May 2026 03:00:56 +0000
Manifest this update: Fri 15 May 2026 03:00:56 +0000
Manifest next update: Sat 16 May 2026 03:00:56 +0000
Files and hashes: 1: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl (hash: gt0zR3KE5I7DXAP3b++N7Mb+izAhNpNAfYbndqrj99w=)
2: WrzCt0ggh7iZD0VHwtwqCx9fUjw.roa (hash: rSWhgeEnr5lWgG/XFNR90qaps5z/LuCtc8T7p4q2CNw=)
3: eIvH6RZh5CBBaCpwmTzlC7bIiGI.roa (hash: Gjo99d741c5L53QhsfOcyUVX8zjxEGGwTqWyZMoY2Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:78:c0:f2:5b:ab:55:5f:5b:7b:56:0e:d2:b4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Validity
Not Before: May 15 03:00:56 2026 GMT
Not After : May 16 03:00:56 2026 GMT
Subject: CN=3036a668f95a97a6c2b6b6a7c843ca5249843d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:dd:7f:72:15:fb:62:a3:76:1e:b5:cd:90:
15:4b:67:47:83:4a:b9:43:83:91:7f:de:9c:8a:3f:
b3:95:5c:31:01:14:60:ab:40:84:95:b4:cb:00:a4:
05:39:29:08:f2:c5:18:95:59:99:55:46:04:eb:85:
15:e2:08:ce:01:79:98:c6:b5:58:6a:08:d4:dc:f8:
1b:ea:7b:9b:cd:00:3c:08:6a:c7:35:db:04:03:33:
7c:12:26:fb:35:c0:90:90:46:e8:b7:97:e9:61:3e:
ac:46:b5:8d:e6:84:0b:ea:20:81:10:de:cd:82:76:
fb:e6:76:21:e8:11:4d:80:54:c7:84:4b:98:11:a6:
a1:5e:53:bb:cb:0e:04:e2:34:09:82:e1:b5:91:c7:
81:99:10:bf:29:bd:99:a6:f6:b0:66:39:51:91:7a:
2c:e5:39:6b:ab:dd:e8:ac:fc:fb:97:b5:bf:78:5e:
f0:47:35:e3:f1:93:cf:43:1f:97:94:c9:7b:2a:6f:
79:41:8e:8f:a1:1c:1a:ea:74:bf:4b:40:16:58:80:
30:9c:05:59:b5:41:55:76:32:12:83:c3:a3:61:ec:
7c:7f:c8:03:fe:75:ab:11:60:87:c5:7c:91:ae:e7:
6c:8e:c2:2e:9e:c6:20:32:50:10:26:1a:a2:6b:ae:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:36:A6:68:F9:5A:97:A6:C2:B6:B6:A7:C8:43:CA:52:49:84:3D:32
X509v3 Authority Key Identifier:
keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e2:2c:28:e7:e3:7b:c1:c6:47:2b:0b:35:ca:69:33:1b:a8:
8c:7b:2c:e8:3b:9b:fe:d0:73:8e:6c:7b:b9:cb:b9:2b:f3:42:
cf:86:c8:f9:f9:f3:95:0b:80:78:af:3d:e6:ce:8d:dd:c4:29:
3f:7e:bd:a6:96:ed:89:97:3f:d7:5a:fd:5a:78:92:2e:08:fe:
69:f5:48:90:4f:c4:41:88:18:ce:24:2a:62:26:ae:91:3e:c7:
e2:46:a9:60:98:4a:5f:6b:ec:0f:12:ef:a2:18:e4:f4:f7:c7:
5e:1e:95:17:4c:c4:85:74:b0:47:a7:1c:2d:43:4b:54:f1:0c:
e7:b6:16:06:47:b2:6d:45:c8:85:9f:38:bb:d5:7c:cd:63:d3:
6e:5a:5e:d8:48:ba:55:94:ce:02:09:27:a2:54:76:b1:a6:a8:
73:6c:ff:f9:11:15:0f:4b:9e:f5:51:66:4d:0c:dc:7f:0e:f4:
7b:86:fe:43:3e:3a:db:06:c8:b1:62:f5:2e:b9:22:24:dc:1b:
99:b7:60:13:c9:45:21:4c:3c:82:38:60:2e:91:f6:73:8a:3d:
82:a2:64:57:8f:1c:1e:69:a4:1a:46:38:e9:8c:8e:de:d4:40:
10:cf:9f:fc:b1:68:c7:b4:95:1c:51:33:61:84:1e:13:72:10:
63:a7:08:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:16 2026 by rpki-client