Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: U1kVjkNVcDz9QQHjjVbz9k/xQ8ZMsQf3ZXN4izUb1lw=
Subject key identifier: FF:D5:BB:AB:3B:B6:21:DA:8E:9A:8D:66:40:68:89:EB:02:F5:29:C8
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 019D27A8F121F98B0E3D588915C1018B0D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 134A
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: g2xQPRGvq33/kOgor6FiimFEKMTyGlcDoXauUnjludA=)
2: Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa (hash: W4o6cddb54HLP4AcX6qxzKIWMKDAcAqZyEJok2ZHE/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f1:21:f9:8b:0e:3d:58:89:15:c1:01:8b:0d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=ffd5bbab3bb621da8e9a8d66406889eb02f529c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3b:45:fd:cb:77:21:54:a5:40:19:29:11:40:
4c:dd:c2:12:41:f7:32:c2:99:86:45:3c:a2:c7:9d:
d2:1d:16:24:f4:87:7a:e6:c7:66:8d:a1:59:c4:fa:
96:6f:85:3a:9a:9f:2e:f4:34:aa:58:95:e6:8b:a1:
be:c9:72:c5:af:e3:c8:33:ab:3a:cf:ce:f6:83:51:
d1:e7:d5:f1:1d:a5:e8:af:41:24:6a:e6:1d:9d:19:
7e:76:3a:d7:35:9b:dc:b0:b7:5b:35:34:55:7e:c8:
41:a5:b1:02:87:72:7e:56:0d:6a:5c:df:3f:6b:ee:
09:31:c3:82:a0:ea:9f:d8:45:26:d0:ac:e8:f2:2d:
8c:85:11:dd:2d:ec:4c:6d:d9:59:4f:b9:53:5d:b1:
6a:20:0d:63:5c:64:5a:96:d1:57:be:f3:db:d6:60:
fe:0c:d4:3d:8b:4a:c8:4e:e6:1f:b6:23:67:b9:41:
e2:2d:8a:fd:d6:59:60:e5:56:b6:f9:6f:79:37:9a:
c4:97:db:67:34:3b:5a:e3:c2:63:60:1c:3b:3f:75:
6d:d2:ed:7d:20:0a:e2:d7:83:ab:c5:67:e4:fe:bb:
b3:7f:ac:00:21:72:ae:d4:0d:04:26:e3:4e:25:6a:
a9:9d:bb:94:ff:90:51:38:5f:dd:7c:91:4f:29:e4:
cb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D5:BB:AB:3B:B6:21:DA:8E:9A:8D:66:40:68:89:EB:02:F5:29:C8
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8f:82:2a:cf:33:48:d5:c9:77:fa:6e:97:ae:32:2e:47:46:
c7:b4:91:ea:73:91:f5:99:9b:5c:c8:69:d0:b2:4b:de:7b:b3:
2c:aa:21:4f:27:37:fa:e9:cb:a2:36:5c:c1:52:3a:f4:92:60:
87:ef:84:9d:6a:f5:f3:92:1a:ba:bd:a1:51:a9:48:e2:5b:16:
93:38:20:bf:2c:a4:45:bd:42:12:e0:22:94:3e:76:ce:fb:d0:
27:ec:c0:29:76:f7:90:f5:0a:49:5f:25:7e:47:8d:0b:ff:c4:
11:eb:57:b7:64:6d:4d:41:64:53:09:ef:f7:4b:d0:31:89:49:
ba:ea:31:01:93:6d:0c:82:12:06:87:f0:dd:17:36:f0:66:7b:
2f:c4:5f:9c:49:5b:7a:6b:19:80:1b:06:2d:b0:e7:c2:cd:cf:
26:83:c7:1c:6f:6b:1b:a1:a7:a6:62:fd:c9:b8:75:26:fc:51:
14:c1:f1:72:04:58:cd:a4:1f:46:38:9c:1e:a5:47:48:f6:7f:
91:f0:10:bd:2c:49:ba:b5:c2:d3:8f:28:2b:c9:98:65:ac:d3:
be:ae:57:21:41:f1:b7:30:13:d5:59:c6:e0:d8:5f:41:34:70:
40:ca:b4:cd:48:1f:09:72:95:b4:69:8f:6b:6c:07:0f:e1:3b:
bc:1c:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:28 2026 by rpki-client