Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: Zw4l4jcERs0TcO9yFWGHLW/AfpDuSDhodS48W61HIVw=
Subject key identifier: 21:6B:83:55:54:A9:F9:1B:55:41:CB:8E:88:EC:42:9A:E5:34:3F:EC
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 01A14014EE07C14363667925A1237F4DAEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0FA9
Signing time: Thu 15 Oct 2026 15:01:15 +0000
Manifest this update: Thu 15 Oct 2026 15:01:15 +0000
Manifest next update: Fri 16 Oct 2026 15:01:15 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: zIfGRMLvQ08bTlK21rqxzcF9prBSN63SouFCwWyeu7k=)
2: UJYmLUubxB3Ru_-Mh2hk0ZAXqvk.roa (hash: o9sPEzQFIIxibCJFZB3OkCMDh95FZm9NWhB+xHWn8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:14:ee:07:c1:43:63:66:79:25:a1:23:7f:4d:ae:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Oct 15 15:01:15 2026 GMT
Not After : Oct 16 15:01:15 2026 GMT
Subject: CN=216b835554a9f91b5541cb8e88ec429ae5343fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:20:b3:a3:56:05:16:93:74:2c:88:05:c0:
c8:b4:c8:b5:ac:ba:d9:46:87:52:cc:8a:08:04:51:
ac:e6:a2:0b:44:fa:46:ce:a3:08:b2:38:01:cb:a1:
4a:9d:b5:13:cf:5c:47:91:1c:90:56:05:c5:a2:da:
a9:37:bf:14:d7:36:f1:19:a0:e8:66:72:41:1f:73:
46:94:11:b6:c0:91:24:26:96:9f:02:9b:1f:95:3f:
15:77:bf:b2:f1:22:8a:40:4d:c7:04:41:33:bd:b8:
21:55:e4:16:59:b6:d6:d6:10:61:0a:bf:43:7c:32:
02:70:5f:31:42:15:83:80:ee:0e:6e:a9:ce:65:db:
27:93:7f:66:ff:96:0a:30:50:77:c9:b7:7b:8c:21:
83:12:d5:be:f5:d3:2a:79:bc:2b:b0:ba:8e:fe:74:
99:76:bb:26:40:c8:be:99:16:76:9e:5c:b4:f0:78:
85:2e:76:8c:d0:62:ac:70:00:a9:b5:aa:32:a6:0f:
e8:71:27:ce:65:96:ca:19:14:b6:d5:85:ea:8f:cc:
0f:47:d9:55:f8:36:ad:19:a9:e0:65:28:67:11:86:
23:63:5c:76:f1:5b:10:27:b6:3b:f9:17:1f:b8:28:
7d:33:e2:85:90:89:c6:9c:7a:46:17:6e:1e:05:bb:
1d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6B:83:55:54:A9:F9:1B:55:41:CB:8E:88:EC:42:9A:E5:34:3F:EC
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:17:0b:eb:96:67:ee:d6:94:bc:b4:bd:c7:ea:74:aa:5f:c8:
49:df:e9:e7:f3:b7:13:94:3e:4f:30:49:fc:9c:32:10:07:21:
df:bb:e0:4b:42:05:49:ae:59:5c:13:6b:ee:5a:bd:57:12:b6:
cd:72:d2:1f:37:bc:af:f6:9c:c3:01:21:b5:0b:21:0d:1f:88:
18:98:7b:aa:cb:ba:f6:5b:35:60:b1:a2:13:dc:61:e3:4f:8e:
ce:c5:c7:e4:98:53:9a:26:cf:4f:ed:d5:c8:80:83:08:e8:68:
91:8a:24:84:6f:64:2d:3f:41:a0:33:23:cc:47:ec:34:87:58:
a4:9e:fc:ee:b8:d7:bd:cc:71:39:b4:24:fe:14:da:51:e8:1c:
40:1f:62:3a:c6:cd:5c:c5:b1:e4:91:5b:2b:f5:1a:d1:a4:04:
3c:ee:21:0f:4b:62:e8:ad:dc:20:5d:5c:8b:b3:e5:bd:f4:b1:
e4:ad:09:65:20:bd:68:d3:11:3a:73:16:37:ce:20:57:a2:12:
41:cf:32:ef:48:b9:cc:ed:20:fb:ff:45:93:9a:f9:96:54:fd:
ac:6d:b5:6e:ea:29:be:cf:d3:68:31:b6:f0:ee:f8:56:6b:fa:
cd:09:fc:6d:36:d5:0c:e1:42:51:44:03:d3:ba:c9:20:02:59:
9d:99:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:00 2026 by rpki-client