Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier: 1QM+A8q5ioOPUFTd60ykQyh2PugJJ3qjUmsV4mnU1n4=
Subject key identifier: 02:F9:37:34:37:8B:A9:14:66:2F:1F:A0:B3:A2:6C:77:F0:4C:B5:72
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 019EB7D7B3565DE69B412005D59E0DF81612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 18:00:27 +0000
Manifest this update: Thu 11 Jun 2026 18:00:27 +0000
Manifest next update: Fri 12 Jun 2026 18:00:27 +0000
Files and hashes: 1: Nx1ZmF0LLUBVNb7pg5SUQFqkEEo.roa (hash: 7h8Dusgv5GisCOAGKVB6gWNCmRgBLzLbZbpY03tENm0=)
2: jU5U7jqkvSOJDTtaSPEMPVmYD9A.roa (hash: nFOTFG+7OrEIpqu+RBWcBN5R7HeTDegtuQdJz0N3Rss=)
3: q-cmnczAq_R4WQig-JxyBCeiu3E.roa (hash: QW62YPpx0nobzbNY1r86LME0OVZNaU0nQ5C4usrbmMM=)
4: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: SdiaKODA5pXLBlbleqb2eBuUEjH+CN86/QPqBDjxpNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:b3:56:5d:e6:9b:41:20:05:d5:9e:0d:f8:16:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Jun 11 18:00:27 2026 GMT
Not After : Jun 12 18:00:27 2026 GMT
Subject: CN=02f93734378ba914662f1fa0b3a26c77f04cb572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:92:69:b2:0c:bf:10:d3:54:f7:a9:2f:76:
c7:84:26:4c:42:c8:71:04:f6:01:8e:6b:9f:5e:5b:
a7:02:7d:25:f5:98:94:8d:6d:24:2c:6a:fb:36:b7:
23:be:d0:5e:1f:ad:a5:17:84:39:cf:28:33:1d:91:
36:6e:50:7b:05:49:19:1e:56:89:31:13:5c:6e:4d:
e3:63:0d:fe:54:65:17:ac:a0:69:a9:e5:24:a7:3c:
7d:4f:67:3d:d0:83:f5:6e:c6:5b:4e:86:17:30:96:
0d:42:47:f6:f1:1b:21:d5:2b:21:1e:04:64:a9:c6:
41:b1:44:f6:b8:f4:bf:73:02:99:1c:5e:a5:55:77:
09:b1:95:2c:cb:3a:f5:e9:8c:ab:26:13:cd:b6:fe:
21:19:47:63:05:f7:f6:7b:7a:41:7f:58:f9:d9:88:
fc:95:62:dc:e6:5c:ba:e2:bf:18:c0:18:c1:34:bf:
48:73:ec:99:c3:94:53:f6:a5:0b:98:e1:d7:2f:c7:
2d:e0:6a:28:fe:ab:82:13:ff:d2:6b:91:ee:bb:54:
98:c6:1c:b1:b5:d8:71:e7:9b:68:e8:0c:72:e1:91:
a2:1e:e0:0a:da:2c:8b:43:c0:96:e2:1d:67:54:94:
d8:14:65:ff:4b:c5:c8:cf:fb:8e:fa:34:71:38:a4:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F9:37:34:37:8B:A9:14:66:2F:1F:A0:B3:A2:6C:77:F0:4C:B5:72
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d9:50:a1:9b:d6:b9:33:82:12:ce:34:22:b6:b7:5b:92:ec:
ab:8f:e2:66:e3:f2:62:49:16:a3:f9:40:d7:59:d4:df:4b:37:
5f:b3:bf:06:c4:07:ca:ca:2b:3e:53:91:7f:d0:80:6c:83:be:
2a:25:48:ae:ba:5f:d2:db:ec:bf:24:41:b2:cd:1f:db:70:1a:
12:98:40:2d:26:5b:01:65:7c:79:5c:ff:d8:bb:ff:dd:a0:e9:
8e:9e:8d:35:4b:b8:60:93:36:0d:2d:02:bb:3e:c9:03:ad:70:
a1:51:9d:25:b4:c6:8c:ed:96:b5:70:83:ad:70:f8:67:80:c1:
a4:6d:30:6a:de:e5:f5:93:8f:f2:59:5c:79:26:67:d8:b2:a2:
9f:30:93:a1:cb:58:c8:a5:03:4b:9b:c0:1e:9a:0b:8b:5f:f1:
45:a4:45:0a:66:27:55:71:ef:a3:a4:1a:5a:a8:68:32:7e:dc:
ec:b3:88:1c:02:db:58:6a:03:81:e4:e5:eb:0b:78:4f:77:99:
26:78:8d:cb:9c:56:0f:77:79:0a:d8:ae:9b:d8:fd:45:d6:45:
7b:ec:67:8b:35:6f:e7:3c:20:e5:44:ad:38:0e:e7:04:3a:52:
70:00:6d:e0:10:55:87:84:59:14:c5:3d:39:8f:d9:cb:52:8e:
c8:45:a6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:23 2026 by rpki-client