Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: Kld7bokMqu2ICuBkZZU39scvl0gvM13oXNMBq8Ga2jw=
Subject key identifier: A2:FE:47:12:1B:1E:57:7E:1B:24:36:67:2B:C5:49:B9:6C:7F:F6:9C
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 01A0016F091F9E090FF4497F92707F18E315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0F04
Signing time: Fri 14 Aug 2026 18:00:49 +0000
Manifest this update: Fri 14 Aug 2026 18:00:49 +0000
Manifest next update: Sat 15 Aug 2026 18:00:49 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: I/ChsZnW25T2ak9fB4Wo4QjdHff0lwY2D3vQTi+Hnn4=)
2: UJYmLUubxB3Ru_-Mh2hk0ZAXqvk.roa (hash: o9sPEzQFIIxibCJFZB3OkCMDh95FZm9NWhB+xHWn8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:09:1f:9e:09:0f:f4:49:7f:92:70:7f:18:e3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Aug 14 18:00:49 2026 GMT
Not After : Aug 15 18:00:49 2026 GMT
Subject: CN=a2fe47121b1e577e1b2436672bc549b96c7ff69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6e:3e:aa:b1:f0:06:56:d0:a4:77:38:c7:2e:
14:f3:bb:4a:1b:aa:01:e3:7e:c8:6e:60:7a:3f:31:
65:64:20:6e:96:a8:06:06:b1:8f:53:d5:d8:fb:4c:
eb:c1:70:26:a6:63:ed:73:0b:f6:0e:0e:a0:0f:1a:
57:ba:b7:7c:60:52:7f:f0:24:0f:2a:c9:03:27:08:
bb:00:69:ef:1e:f3:59:c5:e8:4a:a8:da:f8:34:2a:
64:4b:f2:db:c1:30:b8:6e:e9:db:a7:1e:99:30:4e:
9b:a6:86:1f:bd:77:ab:9d:91:29:d4:cf:d7:b9:4b:
81:e0:89:64:05:e9:14:a9:52:6c:ae:26:4b:96:04:
7b:04:af:44:9d:61:15:3b:42:e7:d4:f2:08:e2:aa:
2e:5f:39:82:21:3b:00:43:26:c3:92:00:8c:54:d3:
f9:96:ac:13:9c:38:cf:d6:58:39:b3:eb:c6:82:20:
a2:2d:5f:db:12:fb:8d:c3:bd:0b:17:ec:8f:f9:3c:
c0:80:7b:8f:51:61:cc:bc:e0:0f:34:da:55:3f:65:
82:a8:20:bc:d1:39:f1:a1:48:c7:ba:0c:2f:8f:41:
e6:90:bb:54:1a:23:59:25:25:fb:56:9e:1e:2d:84:
3b:10:aa:6d:d3:de:55:20:67:9f:80:1d:66:5c:89:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FE:47:12:1B:1E:57:7E:1B:24:36:67:2B:C5:49:B9:6C:7F:F6:9C
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c3:31:c1:2b:70:be:0f:81:aa:05:cb:7d:be:ed:fe:48:b3:
df:7d:75:fb:21:f0:49:06:76:ed:16:e6:29:77:87:ef:fc:26:
f7:56:0d:14:75:44:60:d1:1e:3d:59:dd:c7:b0:5c:12:22:f3:
5f:76:7d:75:83:66:89:9b:3e:6e:4e:4e:3f:9c:35:95:5c:84:
13:6c:9a:3b:ff:ae:9c:ec:62:5d:ba:68:83:01:b2:b3:7c:26:
18:9e:48:ce:dd:52:53:2e:2b:43:97:8d:bb:57:fc:00:de:66:
3f:be:d3:56:da:df:83:f7:ed:60:f3:d9:18:ee:f1:b1:b1:1b:
62:32:fb:be:75:88:de:1b:bd:14:31:08:7b:35:d5:e9:42:d6:
9a:14:fd:69:49:af:c5:0c:da:ae:f2:05:9b:eb:61:4a:15:0f:
82:68:2d:53:83:8f:d2:92:cc:a3:0a:12:ee:07:7a:ea:34:ea:
81:d2:3a:71:5d:14:fc:67:ef:c3:b7:97:8f:2d:84:68:a3:90:
4d:bc:92:23:fd:30:23:6a:30:2d:ac:21:3c:ab:50:cc:54:6c:
dd:19:dc:6f:ea:c9:40:44:d6:7d:94:52:b4:a5:86:11:88:0c:
a1:83:d3:a0:93:bf:bf:ad:93:df:54:a9:f6:9c:af:0c:43:02:
ca:ec:7a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:41 2026 by rpki-client