Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
File: 4q9q9tGZ8R7LpDVVEOmbficatUA.mft (raw, json)
Hash identifier: YZiv6rm/EDZZvlO65IPXzUdufSdsQySocaYMCSyw+EA=
Subject key identifier: CB:1E:CB:1D:DA:DE:50:33:1C:70:66:0E:A3:82:E9:BA:C2:22:98:DC
Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
Certificate issuer: /CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Certificate serial: 01A040176B31147081C50EBFF04AEC767B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
Manifest number: 0557
Signing time: Wed 26 Aug 2026 22:01:11 +0000
Manifest this update: Wed 26 Aug 2026 22:01:11 +0000
Manifest next update: Thu 27 Aug 2026 22:01:11 +0000
Files and hashes: 1: 4q9q9tGZ8R7LpDVVEOmbficatUA.crl (hash: KCBvuDCmWXA6L6QCkyF30MrTI0qEdiAS9ldWrALNimo=)
2: WsRPhT9Oh-9n_aMNy1_PxDNMYcI.roa (hash: /TTOGt1K8yp5w1qqEg6jDasBjpl22O3FqBsf/BAjXeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:6b:31:14:70:81:c5:0e:bf:f0:4a:ec:76:7b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Validity
Not Before: Aug 26 22:01:11 2026 GMT
Not After : Aug 27 22:01:11 2026 GMT
Subject: CN=cb1ecb1ddade50331c70660ea382e9bac22298dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:cf:96:66:5a:5d:98:32:bc:f6:b3:26:7c:
a6:a5:bf:8a:5c:48:80:6a:21:60:a4:40:69:36:92:
b5:f4:66:ea:ef:22:11:30:fa:c6:18:86:ef:90:c1:
70:fe:03:d7:0d:e7:38:b0:6f:dc:44:56:fb:fc:33:
3e:e4:20:37:f2:e9:fa:57:ef:0e:9f:dc:05:87:e9:
40:8e:ab:9c:c4:da:47:18:61:30:2e:51:b3:12:a5:
b1:49:6f:a3:38:d2:5a:2c:4a:c2:8a:48:8e:92:a9:
f8:dc:f4:fb:d0:6c:a2:73:07:18:95:34:19:15:27:
ab:34:7f:67:94:89:0b:4b:c4:a2:88:29:3f:2b:9b:
c0:0a:d3:2c:93:29:d0:79:4b:57:60:42:4d:b3:8b:
2c:04:5f:fb:e6:0e:5a:0d:9c:9e:36:25:4f:97:5e:
38:18:f7:f5:34:2f:35:92:47:51:bd:6e:55:7a:48:
a8:30:56:a7:b5:40:d0:5c:62:d3:ca:4e:86:7f:51:
1a:c1:8b:34:80:0e:27:a0:5d:89:63:18:d0:9e:e4:
57:2c:98:7c:f0:d7:29:6b:74:bd:16:27:48:3b:23:
3b:ab:7d:b3:ae:91:3a:7b:62:ea:52:c4:7b:f8:c4:
5d:09:cb:ec:c7:b2:d8:62:96:b5:e2:be:0c:a4:a7:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1E:CB:1D:DA:DE:50:33:1C:70:66:0E:A3:82:E9:BA:C2:22:98:DC
X509v3 Authority Key Identifier:
keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1c:f6:b9:30:d2:79:05:a6:d8:85:fe:15:70:35:74:ec:6c:
0c:21:26:a0:d3:fc:4a:14:12:36:5d:ca:8e:bd:80:b2:f1:a6:
66:b8:8b:3c:b0:20:b0:4c:af:cf:c5:9b:c6:99:8f:1c:8a:60:
9a:b8:57:fa:42:18:37:a1:25:44:16:0c:52:80:c0:7a:87:22:
18:09:50:f6:23:57:26:dd:91:ef:6a:f5:d2:1b:bd:10:0b:15:
9f:e6:26:e0:8e:37:a7:1f:b6:a6:7b:4c:ec:af:40:5d:5f:0c:
60:44:ea:ca:4d:5b:d8:99:62:50:91:ee:43:32:a5:b7:b1:53:
a1:de:3c:6f:f7:0b:8f:73:f7:a3:02:27:75:7a:93:e3:97:24:
e1:4e:dd:df:0c:63:9c:2f:a9:32:2b:07:1c:8c:22:ff:fe:c6:
07:00:33:63:23:7d:ab:90:dc:8b:02:aa:7c:a6:cd:33:a8:c3:
5a:91:09:11:d7:38:66:12:8c:ca:af:10:db:32:c4:c0:2a:ee:
00:17:ea:3d:bd:28:69:57:23:1d:1d:d6:b2:7c:fa:36:e2:65:
2c:ed:aa:3e:8a:cf:dc:d1:94:c1:15:b7:f8:90:e4:7c:3a:88:
d9:72:95:fe:3a:54:d5:ea:a1:a5:51:ff:57:1e:51:3d:16:7c:
e2:be:da:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:23:25 2026 by rpki-client