Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: 2Qda0zidqYl9gNjMYCaOogLMaRSHUxGLpQK6s4aLrQQ=
Subject key identifier: 03:A1:24:D6:8F:49:F4:F5:B5:85:52:28:9C:D1:1D:88:53:09:A3:90
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 019F9323F3DC6B36901129AACAF68B682FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 17E3
Signing time: Fri 24 Jul 2026 08:00:34 +0000
Manifest this update: Fri 24 Jul 2026 08:00:34 +0000
Manifest next update: Sat 25 Jul 2026 08:00:34 +0000
Files and hashes: 1: 348GlYel7WKf7j6VpPBbdI2F0AY.roa (hash: 8CB29xF2GvA/FLxPFcEF5rA4l97+T5SM5ICvhUC1S3w=)
2: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: MSgHxZoI10pCFBpokM/6smlG6y5U+oCCUIaS8a4OqHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:f3:dc:6b:36:90:11:29:aa:ca:f6:8b:68:2f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Jul 24 08:00:34 2026 GMT
Not After : Jul 25 08:00:34 2026 GMT
Subject: CN=03a124d68f49f4f5b58552289cd11d885309a390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:0a:a4:b9:1e:2f:5b:a8:a0:1a:37:b5:09:
a0:34:00:82:d3:b2:26:17:57:86:e9:0e:01:09:22:
72:32:05:e5:50:af:ad:7d:56:8e:21:98:ac:73:db:
f1:77:27:6d:db:a1:9a:5a:98:f4:78:27:63:b2:90:
a9:f7:5c:91:45:9e:c8:5b:ac:b3:ea:ac:21:7a:0a:
f4:d5:ea:97:fc:b7:07:c1:5c:fd:64:5d:12:af:a1:
a1:23:f8:fb:df:4e:17:72:07:9f:e4:11:cc:b1:fa:
dc:d7:c0:1c:85:18:17:f5:88:4b:2d:8e:dc:27:24:
e7:0d:84:b3:1a:76:08:b1:fb:6e:6b:7d:bd:19:82:
31:4c:37:25:58:f8:63:90:88:97:69:b0:a9:98:ec:
74:04:d0:06:47:65:d4:1c:c4:e6:3d:47:40:61:c6:
d2:d7:da:15:a1:b3:4f:c3:43:12:a7:b6:94:0e:b2:
40:9f:32:a4:8f:af:29:e8:8c:17:b0:35:4e:3a:ed:
82:6d:b0:0c:81:6a:60:eb:fe:8e:d6:ef:be:14:7f:
2c:66:9e:f9:1b:2e:08:62:1d:ee:9b:aa:7f:3f:bf:
bc:c2:57:73:d3:ab:2d:56:04:9b:93:8c:2d:fd:3a:
e0:3c:3e:6f:fa:49:77:92:83:00:f6:34:b5:ef:c3:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A1:24:D6:8F:49:F4:F5:B5:85:52:28:9C:D1:1D:88:53:09:A3:90
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:be:f8:11:9c:ff:77:56:17:1d:49:da:13:78:3a:1e:20:77:
41:01:58:99:dd:32:f6:35:b4:af:3a:46:a4:a6:91:f1:28:d0:
38:1b:0c:7c:71:ef:48:8e:22:d8:bb:84:24:7d:1c:19:fd:0b:
02:c3:fb:69:60:be:86:14:92:f3:7a:c3:4c:5b:de:9d:cd:67:
74:f3:5e:24:29:4e:c0:28:82:9c:a9:04:14:88:d6:ea:6d:45:
7e:0c:09:ca:49:b2:36:5e:ce:c0:1e:94:16:77:e2:c7:b0:aa:
6a:20:ab:0b:ec:c8:0e:3d:df:66:0d:60:5a:97:f1:0f:98:7b:
b3:42:c4:d7:d6:01:1f:a9:1a:f1:84:6b:60:8c:3b:21:32:22:
cd:aa:a8:fc:a4:05:56:44:24:16:23:c5:bc:38:c0:24:4e:47:
a5:9b:18:1b:bb:d0:80:5c:81:2a:db:7f:3e:a1:f8:e7:b8:83:
21:c6:3c:4f:d4:4a:6b:cb:28:ac:c5:dc:b9:3b:cc:e1:f6:1f:
e6:ff:26:4a:21:56:2b:4a:68:44:67:d2:3d:03:ef:c2:c0:6e:
c4:11:a0:36:36:13:8c:72:36:f1:c2:25:cc:88:15:35:80:ca:
b3:87:33:2b:34:64:19:55:da:b7:0a:d5:04:ee:67:b6:a5:fb:
00:e6:fc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:42:20 2026 by rpki-client