Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: LnJhkWRwg6R3G4bg58ltwETX54U/wuesYI5ggqGFppc=
Subject key identifier: 85:92:0E:BF:17:9A:43:F3:AB:7E:11:0A:10:93:63:62:3B:F9:97:A3
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 019E3004B35FD52FE2A403EEDBF359034992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0E13
Signing time: Sat 16 May 2026 09:01:14 +0000
Manifest this update: Sat 16 May 2026 09:01:14 +0000
Manifest next update: Sun 17 May 2026 09:01:14 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: HKXqsdsIQyxseYrS+fhJvvtQcFU38lSGDXIzD4oiiFI=)
2: UJYmLUubxB3Ru_-Mh2hk0ZAXqvk.roa (hash: o9sPEzQFIIxibCJFZB3OkCMDh95FZm9NWhB+xHWn8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:b3:5f:d5:2f:e2:a4:03:ee:db:f3:59:03:49:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: May 16 09:01:14 2026 GMT
Not After : May 17 09:01:14 2026 GMT
Subject: CN=85920ebf179a43f3ab7e110a109363623bf997a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:d9:a3:22:c2:6d:9d:16:13:af:51:6b:8b:
48:2d:87:9a:3a:25:58:4c:f0:81:0b:15:df:0b:c5:
4f:c9:04:95:02:3e:77:6c:ce:d9:b5:de:d8:e5:85:
ef:00:cf:c0:31:ee:41:f8:48:1e:dc:d4:85:48:98:
69:87:5f:14:d8:2d:f2:a8:24:3f:0b:13:90:3a:13:
04:c3:00:21:5a:28:91:76:72:11:c0:88:99:c8:5a:
82:4f:5b:b7:65:b6:fe:d2:40:15:13:71:ab:9a:d6:
0f:d3:0b:ec:08:b2:bf:54:96:a4:36:f6:32:12:69:
cc:72:c1:8c:5f:50:c9:06:0b:6c:81:5e:26:37:ca:
15:c0:f6:3a:7b:99:84:cb:33:55:e4:02:3c:20:d6:
1b:53:2e:a6:12:44:1a:d8:49:2b:c1:f7:53:16:25:
8b:26:da:33:48:24:34:ef:1b:8b:6b:4a:4a:a4:6a:
ba:40:96:66:d2:64:07:a0:b7:a7:c6:2b:17:68:58:
cd:3c:73:6c:0b:a6:2b:cc:6e:dc:1c:57:48:78:23:
dd:df:df:4d:99:cf:95:85:c3:ec:c8:b6:57:8b:a7:
5d:e3:c6:8a:66:3b:36:d1:35:ed:bc:40:b2:f2:8e:
7c:10:ab:85:56:99:c4:5e:c7:82:ae:4d:c7:ba:2e:
d4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:92:0E:BF:17:9A:43:F3:AB:7E:11:0A:10:93:63:62:3B:F9:97:A3
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c7:0f:3a:33:86:01:20:07:72:9b:64:e9:0a:2a:1e:7c:45:
a3:27:7a:e5:55:8d:97:00:65:16:fd:4c:01:ab:4d:90:9e:86:
2f:aa:79:67:66:30:84:c0:34:4b:16:5a:c0:cb:e5:99:30:46:
28:52:67:f7:7b:83:7f:2f:ef:aa:21:b5:4a:ac:34:93:10:1c:
9e:d6:3e:fc:a1:a5:3d:b9:e4:4b:23:55:74:ac:4f:df:de:93:
46:93:d2:b5:26:02:d9:84:4f:66:ed:6b:8f:7c:8c:99:46:a0:
07:b0:a1:6c:af:06:e8:6b:12:ee:f3:68:36:cd:30:8f:4d:4f:
5e:a4:b1:fe:2d:3c:db:8f:fe:c8:0a:18:28:1d:85:55:0f:75:
30:bf:46:47:b4:ad:45:e8:e7:c1:9b:d8:8b:69:6f:21:89:31:
56:fb:13:70:81:84:4f:41:6d:01:7b:6a:c9:58:23:5f:5f:e2:
3b:b7:0f:38:bf:2d:9b:70:93:3a:a1:bb:6b:4e:cd:89:e4:17:
68:b3:e4:5c:05:66:e2:f4:1b:d0:ae:b6:ac:cb:7c:3a:bd:99:
91:34:84:a5:94:d1:bb:87:2d:03:b8:0b:8d:e7:b1:16:1b:c3:
49:cb:6c:d2:66:5a:0a:93:c1:6d:3c:ba:a9:34:6a:a3:fd:72:
e1:f5:99:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:54 2026 by rpki-client