Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: n4UusX3epquklL2Jla46FdX//uiY2oML/cgLHVs5CfA=
Subject key identifier: 68:82:48:2F:7C:A8:15:40:98:7C:AB:16:DC:CF:AD:B5:70:32:B6:53
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 019D292947FE219D36451DAA0B4F75502566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 16A3
Signing time: Thu 26 Mar 2026 08:01:04 +0000
Manifest this update: Thu 26 Mar 2026 08:01:04 +0000
Manifest next update: Fri 27 Mar 2026 08:01:04 +0000
Files and hashes: 1: 348GlYel7WKf7j6VpPBbdI2F0AY.roa (hash: 8CB29xF2GvA/FLxPFcEF5rA4l97+T5SM5ICvhUC1S3w=)
2: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: dcgKPQX6pmG6RK9Cg1DDUEnUv/ZWSAAbsjxSE9bYWNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:47:fe:21:9d:36:45:1d:aa:0b:4f:75:50:25:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Mar 26 08:01:04 2026 GMT
Not After : Mar 27 08:01:04 2026 GMT
Subject: CN=6882482f7ca81540987cab16dccfadb57032b653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:dd:9d:01:b3:3c:01:f4:0e:9d:8c:f4:92:
f5:87:ca:02:b6:12:14:10:13:0b:73:d0:71:20:f0:
f1:71:89:af:3d:ec:b2:5d:fe:fa:7b:01:33:37:20:
b2:b4:3f:c9:58:ae:90:a1:a8:c9:45:13:ee:11:45:
9d:4a:d4:cf:bd:ad:08:59:27:ce:fd:73:f4:b9:37:
40:38:ba:53:d0:ba:5a:c8:75:0c:cd:8d:d2:5a:7f:
0d:94:c3:28:a1:13:ab:ca:92:48:4b:c2:f3:a2:40:
07:0f:0d:92:eb:05:a3:96:4c:58:a2:9a:f7:d4:39:
23:1c:f5:0b:50:8d:2e:ec:8b:ef:1e:66:9f:1a:6b:
fc:7d:23:9e:01:08:de:97:77:d2:9e:ff:e5:95:78:
c2:e5:46:d3:7b:5f:73:6f:78:cc:c3:24:fc:a2:75:
bc:3e:06:e9:38:2b:c0:b1:31:23:0b:dc:0e:ec:74:
7b:be:d8:52:b1:04:d3:bc:03:e1:8b:b6:57:03:2c:
4c:d6:ab:59:a4:b4:80:8e:df:1d:ed:57:7f:e2:01:
23:d0:d0:7a:fd:b8:3c:1e:a5:27:07:a8:41:26:85:
7a:be:9f:de:85:41:0f:52:01:95:ff:b6:47:b9:29:
c2:7e:85:1a:01:93:93:2b:2d:be:47:3a:b3:84:67:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:82:48:2F:7C:A8:15:40:98:7C:AB:16:DC:CF:AD:B5:70:32:B6:53
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2f:e6:e6:a5:43:4a:f8:92:63:13:04:17:79:30:3e:e4:f5:
3b:10:c8:a5:7a:01:70:8f:d3:aa:8f:13:11:78:d3:f7:55:3e:
dc:b8:e7:87:0a:ef:8f:60:01:b9:8e:83:cf:71:dd:0e:03:7f:
03:ce:91:49:10:b5:28:9e:7e:04:d5:cc:9c:70:90:e2:2f:7a:
38:13:f1:8f:f7:a2:88:50:68:ba:69:aa:ca:9d:9e:76:13:e7:
5b:38:3a:84:32:9f:f5:e3:dd:28:56:08:fd:3e:9f:8b:06:81:
ed:fe:fc:49:3d:cf:63:1b:2b:07:b0:6e:bb:14:7e:a6:98:76:
d7:96:b4:c6:34:5f:4e:c6:a9:a4:34:e9:b5:fa:f6:24:92:11:
f0:0a:57:a2:fc:ba:8e:7c:ab:fb:48:68:82:86:4b:5f:ca:a5:
22:d5:04:f8:77:04:fd:99:bb:e8:4a:0c:9b:1c:65:7a:34:f2:
d9:26:73:b0:ce:b8:7b:31:da:8f:cb:e5:32:fb:e1:04:8f:00:
87:21:91:d5:77:c3:97:0c:ab:66:a7:b4:86:18:e5:72:ac:eb:
25:e5:3a:03:b8:7b:44:a4:d5:c1:ec:27:0f:6c:cc:83:e2:b8:
49:e6:32:39:4d:d2:ec:f0:5a:c1:6a:3c:a5:f2:6a:8c:25:e0:
27:da:a6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:07:42 2026 by rpki-client