Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: S9lOAA+NICKfk0VoboHEt1oi6P0e9LcX124/hD75Zw4=
Subject key identifier: 90:B1:3E:AA:B7:0C:62:07:63:AA:F0:CA:29:47:55:19:4C:6D:EC:F9
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 019F93921CDAEADA2E2608BD417F06EAE2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 148B
Signing time: Fri 24 Jul 2026 10:00:53 +0000
Manifest this update: Fri 24 Jul 2026 10:00:53 +0000
Manifest next update: Sat 25 Jul 2026 10:00:53 +0000
Files and hashes: 1: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: 9GcLE/WqXV93ritpwExTt3zPCQWomJGvUn7SYBSET+M=)
2: Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa (hash: W4o6cddb54HLP4AcX6qxzKIWMKDAcAqZyEJok2ZHE/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:1c:da:ea:da:2e:26:08:bd:41:7f:06:ea:e2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Jul 24 10:00:53 2026 GMT
Not After : Jul 25 10:00:53 2026 GMT
Subject: CN=90b13eaab70c620763aaf0ca294755194c6decf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:18:f0:4c:ab:31:83:fe:6f:bd:15:b3:e4:
96:0c:e5:fd:27:8a:88:c2:11:0f:7d:83:51:6e:69:
10:96:db:bf:e8:95:bb:3e:98:56:3c:1c:3a:7f:d5:
49:53:20:94:fd:96:6d:32:63:ec:81:85:35:a4:15:
0e:45:2b:7a:de:35:0d:2e:2f:22:de:e3:52:70:81:
f9:83:10:99:43:79:26:31:db:17:da:9f:ab:f2:82:
76:2a:63:9d:8a:41:cb:a8:2c:e2:3e:99:ff:01:e6:
d0:48:f5:58:de:64:2c:ea:5f:8e:7e:17:e2:8a:ce:
28:a3:a8:88:59:1b:83:ff:87:02:cd:30:ef:c5:f8:
a3:9b:fe:0e:bc:5d:d3:85:3c:16:cc:9c:56:aa:77:
4d:39:3a:9b:ac:09:83:c1:6d:25:4d:11:c6:73:f4:
a9:ff:83:24:b4:98:9f:25:31:a0:ce:f5:7e:f2:75:
74:1a:69:1b:b2:68:e1:fe:8e:88:88:12:b5:39:34:
55:33:5b:26:4a:c8:fe:76:9f:32:c5:a2:2b:4f:be:
d2:b5:6b:51:5d:3a:99:06:98:00:92:8c:07:d0:83:
2a:bc:2b:75:8c:82:ac:5e:5c:b1:fa:f3:9e:46:56:
01:c5:ad:cd:50:f6:9d:76:46:47:b6:9d:1a:34:30:
06:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B1:3E:AA:B7:0C:62:07:63:AA:F0:CA:29:47:55:19:4C:6D:EC:F9
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3d:08:f0:3f:43:7c:28:7a:68:bd:63:80:e9:cb:80:5c:f9:
c4:1a:91:54:50:4c:b2:aa:8d:5a:05:e8:39:5c:da:34:f2:08:
e3:22:71:50:f1:c4:03:5f:75:90:52:97:9e:ec:d3:b4:a8:1c:
41:ff:9f:75:dd:fb:c5:f2:a3:87:cb:30:d5:22:2b:a8:bc:bc:
ca:ea:39:ff:90:78:7e:9e:87:57:c3:dd:15:9f:43:7c:6a:57:
e4:d9:56:53:a4:4e:4a:7b:a1:9f:0e:e1:35:9e:18:e0:6f:e6:
12:3a:8f:fb:3b:d4:f7:98:97:aa:b3:0d:f7:ab:5d:39:77:3b:
ed:2a:dc:1e:5d:78:34:27:15:04:22:8e:26:c7:24:d4:37:76:
37:9b:a5:8f:2f:1e:dc:bd:e4:a4:6c:71:5c:95:10:90:0a:31:
38:ad:a7:24:55:25:7e:39:24:fb:75:aa:97:68:eb:3b:5a:b4:
fe:4e:b8:7f:5f:13:a7:2e:bd:ab:54:d2:bd:65:f1:65:72:43:
ce:76:0c:aa:51:7b:04:bb:d7:3d:45:63:fb:90:12:fa:49:fe:
28:8d:54:73:20:33:72:06:36:a8:86:60:58:23:b5:9b:72:05:
83:b7:3f:ea:95:7d:0a:08:56:db:3d:a5:2d:77:ab:06:84:66:
44:b0:18:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:47 2026 by rpki-client