Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
File: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft (raw, json)
Hash identifier: UqOZPtFgsPPTkPGlP5r9ZG3ZAOY7YFJT2Z8TKkCTeNw=
Subject key identifier: DE:24:13:32:F2:10:F2:B5:62:0A:6D:E0:CD:96:7F:D0:7C:59:7E:AE
Authority key identifier: E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
Certificate issuer: /CN=e3106ac3ea760b2d0242a9efba2c2116b626f824
Certificate serial: 01A040F2ED0AB18A47F185D7C7A190C4F41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
Manifest number: 0351
Signing time: Thu 27 Aug 2026 02:00:57 +0000
Manifest this update: Thu 27 Aug 2026 02:00:57 +0000
Manifest next update: Fri 28 Aug 2026 02:00:57 +0000
Files and hashes: 1: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl (hash: K3C/vHsl7JcJYSZPRnL2dhsLnC+xWsOjX9oLabLEiKg=)
2: 4ypktVvAzfNV9xVobcyFTIbQDTY.roa (hash: gbFNuHiI6Q6GwECOCQ38Wty+z3M8uTYhivyQMeIFbAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:ed:0a:b1:8a:47:f1:85:d7:c7:a1:90:c4:f4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3106ac3ea760b2d0242a9efba2c2116b626f824
Validity
Not Before: Aug 27 02:00:57 2026 GMT
Not After : Aug 28 02:00:57 2026 GMT
Subject: CN=de241332f210f2b5620a6de0cd967fd07c597eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:82:35:e6:a8:1e:cd:f6:be:a3:4e:84:61:
88:9d:a8:6d:ff:c8:99:01:7e:37:f2:9c:0c:5b:ab:
1c:3e:c2:ee:c3:73:81:bc:ee:9f:f3:b6:9e:63:0e:
30:02:eb:9b:46:0d:f5:b9:e7:e2:c0:ad:3a:5f:63:
e9:c1:74:1e:66:bd:c8:b1:53:ef:07:7d:9a:cf:cd:
b1:51:2f:d8:57:d2:a9:b3:96:fc:3a:57:6f:b0:2a:
82:ed:6d:e9:e7:dc:ae:06:b6:fb:7d:c4:b2:76:5b:
86:13:5e:41:88:aa:b0:37:ff:85:81:72:76:1d:28:
55:ab:a0:76:93:2f:0b:65:21:5d:98:cb:b0:f9:12:
27:86:54:3f:5d:34:74:3c:a8:06:6f:8c:8f:c1:ac:
55:de:af:f5:e6:a1:98:91:c0:a3:35:cf:d4:57:14:
10:e6:cc:da:c4:c2:a9:e5:8e:a0:25:c9:77:c7:c0:
48:94:e4:22:db:82:e9:c7:ab:c5:cb:b1:b9:4b:43:
be:9d:09:8a:d4:b3:fd:e4:68:60:94:2f:38:e6:6c:
26:df:a4:c2:cb:b6:06:3e:7d:81:88:22:8e:4f:68:
db:75:e7:1a:0a:9c:ad:68:24:7c:15:77:95:a9:49:
f0:c2:74:73:81:e2:99:65:ae:fa:fe:fa:e6:3b:96:
2b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:24:13:32:F2:10:F2:B5:62:0A:6D:E0:CD:96:7F:D0:7C:59:7E:AE
X509v3 Authority Key Identifier:
keyid:E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ec:30:9a:8d:f0:ad:aa:3c:74:c3:7c:7b:66:3c:db:32:c0:
20:d1:27:d2:f6:d7:4b:9f:c0:77:10:c1:2f:91:87:84:73:76:
d6:80:55:d4:c6:07:52:84:4b:f5:0a:2f:04:6b:ef:9c:16:c0:
a9:5d:08:94:4f:a1:bd:1e:eb:49:1f:aa:ca:ef:df:54:48:41:
02:68:0e:04:88:c6:d2:fd:63:1d:16:07:58:a1:98:19:90:6b:
a2:3c:7f:c8:f7:8f:7b:19:b0:12:cf:fe:b1:e5:10:85:05:77:
21:60:9e:ca:89:82:f2:83:45:03:cf:c0:89:1f:e8:17:20:cc:
41:78:5c:f6:96:fd:8f:ba:83:62:d0:e5:67:94:0f:cb:9a:d6:
53:24:63:ab:a1:3a:f2:6e:88:9b:fe:2a:c0:e7:c9:d8:9b:ff:
0e:31:0c:67:69:ee:55:65:c2:b3:cc:35:3d:26:8b:3b:bb:f2:
6e:5b:29:21:6c:57:e3:88:0a:3b:a3:9e:42:d9:1c:70:61:ba:
2a:28:8b:b6:e8:f4:ae:ba:0d:48:c1:4f:8d:34:b1:e3:13:cd:
f1:52:c2:46:5c:d2:42:c8:1a:04:ca:40:78:8a:ed:36:02:3b:
79:16:30:aa:97:65:a0:52:88:d2:94:53:c6:87:67:ab:4f:28:
70:a6:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:01 2026 by rpki-client