Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: BigMWv8Cr/PYK6rk1alze1LcidSJ59TQIlwyJBI8eCk=
Subject key identifier: 0D:6A:42:1A:EE:BC:17:23:9E:57:3D:F8:A2:55:95:77:80:44:A3:5A
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 019F17C35D20D96927C0068C29B5FF00F74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0E8B
Signing time: Tue 30 Jun 2026 09:01:46 +0000
Manifest this update: Tue 30 Jun 2026 09:01:46 +0000
Manifest next update: Wed 01 Jul 2026 09:01:46 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: rt2cDBXQnvTeOA/PJOa5sfqJI2zN6wSxufBeuOXPcO8=)
2: UJYmLUubxB3Ru_-Mh2hk0ZAXqvk.roa (hash: o9sPEzQFIIxibCJFZB3OkCMDh95FZm9NWhB+xHWn8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:5d:20:d9:69:27:c0:06:8c:29:b5:ff:00:f7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Jun 30 09:01:46 2026 GMT
Not After : Jul 1 09:01:46 2026 GMT
Subject: CN=0d6a421aeebc17239e573df8a25595778044a35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:61:20:ab:9f:79:4a:4d:07:95:e0:66:96:
34:47:c3:38:51:ea:2e:50:28:fb:37:2a:cb:fd:0f:
ea:0e:bc:cf:e1:1a:d2:6b:f5:3e:cb:c4:af:16:ea:
e7:de:b6:b7:5d:6c:4c:d7:0d:04:77:b1:92:d7:7b:
54:b2:4f:35:88:48:75:49:23:04:9a:9c:9f:a4:33:
fc:d8:ad:6a:c5:3d:3b:3b:23:3e:3e:08:f4:6c:50:
47:75:9f:99:5c:52:78:d6:17:4a:10:14:76:b9:f7:
72:b3:e7:c4:f5:77:77:55:37:12:70:b7:43:24:dd:
0b:28:7a:8b:82:ff:50:2d:b4:7a:be:75:29:72:d6:
e5:23:91:f0:f8:64:63:ab:a5:08:0a:49:62:b9:4e:
bf:4e:c1:24:e0:e5:62:1b:69:91:1a:64:42:a3:a2:
7c:7b:ad:8c:44:6d:f4:c9:2f:a6:0c:9b:62:9c:e3:
2c:da:77:13:c8:22:75:84:a5:b0:74:10:a9:c9:12:
00:31:8e:e5:23:c9:22:2c:9f:59:69:fe:72:08:4e:
e6:e2:89:1b:4d:c2:28:1d:6a:94:67:82:c6:71:39:
61:09:55:08:66:51:09:1d:f7:cc:35:5f:c6:8b:30:
4f:99:bf:ab:53:0e:73:94:f4:41:96:25:42:27:90:
50:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6A:42:1A:EE:BC:17:23:9E:57:3D:F8:A2:55:95:77:80:44:A3:5A
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:70:c9:bd:bb:5e:fc:f5:80:76:4e:ae:c6:77:c9:b0:7f:0f:
49:ad:63:96:1d:78:b4:1f:12:a7:a0:6d:65:14:f2:ac:fc:1d:
f4:bf:3f:a4:c4:59:38:1a:5a:e0:91:bd:5e:d7:fd:46:e6:89:
8d:a3:c4:59:d9:43:cf:d0:f3:fb:bb:20:bb:ba:d7:6d:a9:9e:
0a:84:62:47:2a:d5:31:1c:0f:ae:d9:85:1a:14:c6:ca:38:97:
ee:74:39:18:e7:67:83:e2:54:88:83:92:b3:21:4d:ff:b0:dc:
d7:51:88:eb:95:a5:a3:02:c0:e3:fc:c9:29:47:02:bd:e2:ee:
e3:a7:ce:86:73:5f:0a:07:85:08:4a:65:9a:17:ad:05:55:bf:
d7:0a:17:f2:b8:f7:3c:7e:86:d9:ed:85:a2:99:c0:f8:a9:36:
b5:2a:60:92:d1:88:42:20:e2:c6:03:28:2f:11:ea:ff:d9:9d:
a0:9d:e9:e3:38:63:70:b7:67:0f:45:6b:32:32:8a:36:3b:36:
48:a5:14:13:f1:90:c9:44:01:f2:57:85:b4:55:50:5e:67:d8:
1c:a9:66:ed:49:f0:6f:21:aa:d5:df:21:a8:68:a8:12:8e:ff:
d4:3b:51:2e:4d:f3:05:d8:ed:43:cb:32:52:9d:c1:a7:5a:9a:
19:8b:99:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:47 2026 by rpki-client