Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: X4OdKIjfTGQOU4rFMvB9BvmipOzAK97vzPZwMTMm2oI=
Subject key identifier: 8F:75:4F:29:6D:F0:9C:E1:6A:D7:54:1B:58:F0:6A:FC:31:F0:A5:2B
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 01A0CC6C760F26CAD6EBF57B7A599B2901DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 152D
Signing time: Wed 23 Sep 2026 04:00:55 +0000
Manifest this update: Wed 23 Sep 2026 04:00:55 +0000
Manifest next update: Thu 24 Sep 2026 04:00:55 +0000
Files and hashes: 1: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: dnf3Zp7StL7QvnCQ2NzWXtlAsXfI7fkhvfk+7u9GrX0=)
2: Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa (hash: W4o6cddb54HLP4AcX6qxzKIWMKDAcAqZyEJok2ZHE/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:76:0f:26:ca:d6:eb:f5:7b:7a:59:9b:29:01:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Sep 23 04:00:55 2026 GMT
Not After : Sep 24 04:00:55 2026 GMT
Subject: CN=8f754f296df09ce16ad7541b58f06afc31f0a52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f5:29:1a:ec:c0:d1:85:4a:98:52:6f:be:94:
b2:38:ee:98:ad:b1:62:74:16:3b:99:30:c3:b8:bc:
46:b6:df:4c:3b:36:f6:93:07:37:d3:13:a7:59:f3:
d8:be:d8:d8:e7:4c:bf:b0:f8:32:98:85:f1:70:3b:
54:95:fd:9e:04:cb:64:65:61:bf:17:db:ef:2e:22:
32:a0:77:6d:fc:c5:f7:e4:10:38:3e:34:f6:d0:dc:
6e:f6:25:e4:d2:a0:bd:fe:ac:7a:00:93:59:3a:8d:
9e:05:66:09:b9:c3:99:79:09:30:06:fa:76:75:1f:
f2:c2:1e:12:21:ee:2c:53:4e:15:27:e0:6b:c4:7a:
94:eb:2e:b6:ef:a6:cd:28:f9:ce:ba:a0:e6:5e:ce:
79:45:11:91:e2:5d:ef:68:fb:95:fd:54:ee:af:62:
5c:54:06:02:22:88:01:67:19:0d:ac:1f:fa:bc:3e:
48:4c:8c:84:60:59:d0:44:da:1b:fc:11:6c:15:5e:
80:01:9f:4b:19:5f:ff:72:e6:19:35:ac:69:d3:09:
69:d7:85:c1:79:58:ae:9b:7a:ec:82:ad:50:97:25:
dc:a2:33:95:7b:d1:7a:a8:7b:23:64:27:c1:d5:8d:
9a:cc:94:35:a5:5c:85:57:9d:30:9a:7f:2a:b1:fd:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:75:4F:29:6D:F0:9C:E1:6A:D7:54:1B:58:F0:6A:FC:31:F0:A5:2B
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f7:89:bf:2f:54:37:25:70:97:82:73:ad:a3:c9:ed:53:98:
26:ad:eb:e3:91:03:40:0a:f7:ee:6c:f9:f4:77:52:d5:4a:19:
0d:20:a9:23:fc:9f:25:f8:03:50:a8:7a:80:9f:8d:fe:c0:d0:
1a:12:c3:d5:4b:a5:e1:51:60:8f:34:da:92:a1:86:50:67:ac:
b6:a2:eb:23:8e:34:80:32:c1:1d:79:2d:77:55:14:30:60:4e:
8b:f2:f2:16:d7:51:df:64:a5:33:85:5b:16:7e:2b:61:40:e1:
44:82:be:c1:a8:9b:31:c6:a0:ab:10:ac:a7:9b:a5:c1:a0:2f:
ea:ac:52:91:2b:70:27:37:58:ad:4c:a0:ef:65:a2:78:71:86:
c2:51:5a:39:38:53:4b:62:9e:9d:c7:7a:0f:04:c9:44:f2:fa:
e1:77:4c:d6:4e:cd:4f:5c:c6:8f:3a:4f:b2:3c:32:03:af:22:
c4:41:8d:ca:5c:c4:c8:a5:2f:ef:55:88:cf:b0:4e:c1:12:75:
6f:9d:81:b4:fc:9c:e0:4c:3f:da:23:fe:1f:71:16:69:d6:c3:
1c:f7:28:18:0f:38:1b:85:fe:c9:bb:4a:64:ea:ca:6c:ef:85:
73:8f:9b:fb:fc:76:64:d9:fd:9c:ec:44:23:ba:fd:0e:6d:8b:
d1:e8:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:21:12 2026 by rpki-client