Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: 0YA7Kjn7G9aD435JksIKHbdoYS/Co+dTW/dO5LMpT20=
Subject key identifier: CE:36:82:32:66:13:91:82:DE:AD:89:27:F3:2C:EA:0F:42:76:04:73
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 019E1E6CB21B53280984D70F5B227D08DD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 08A4
Signing time: Tue 12 May 2026 23:01:40 +0000
Manifest this update: Tue 12 May 2026 23:01:40 +0000
Manifest next update: Wed 13 May 2026 23:01:40 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: /3GSNDTtprngAvRPkHvPLVOrK2bGrpsHzY4p08CXU6A=)
2: daqjoUQutGPSPWpp1MBlnqMi5s0.roa (hash: dLUynKpTq26uEi3G0kNMPoVLBPgdqfEJFefVyZLupvY=)
3: uBIxs7ssxXDGyk8SQNxkeydPi80.roa (hash: EJE4RSVi+Vk5YmcZI9DMOpSqKh06AU4ky+hWC3DDJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:b2:1b:53:28:09:84:d7:0f:5b:22:7d:08:dd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: May 12 23:01:40 2026 GMT
Not After : May 13 23:01:40 2026 GMT
Subject: CN=ce36823266139182dead8927f32cea0f42760473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:a9:b7:7f:8a:4f:1d:7c:90:59:d6:18:ef:
11:72:6e:8f:19:83:f3:21:0b:d8:ad:17:91:1d:0d:
6a:2b:88:d2:33:1a:71:03:6c:86:25:2b:4c:e1:e7:
06:df:5e:34:5f:c2:f9:a2:31:0a:d1:8b:d1:d4:7d:
ee:37:36:c6:7e:a6:1e:de:1f:9e:39:aa:aa:be:91:
c7:1f:b4:fb:c5:75:a9:20:83:ed:29:79:2b:bb:91:
1b:09:72:a6:aa:29:1a:d7:ea:29:45:b9:d2:3b:10:
1e:22:0d:a6:ce:15:23:77:39:05:7e:1b:b7:24:5c:
78:f5:2a:99:4e:3f:56:d0:18:6d:b9:d7:f2:e2:63:
94:93:cd:1d:78:89:8d:2c:64:17:35:0e:90:76:ea:
41:79:1c:45:bd:20:53:f6:d4:db:a5:bd:51:a4:9d:
ba:44:d5:b1:90:98:b5:76:9b:bb:67:c7:61:90:6b:
cb:33:47:73:97:34:8f:fd:53:7d:96:54:09:22:90:
b6:7f:cc:9b:65:4f:a3:00:80:d3:3a:94:6b:a2:e8:
1d:7a:20:fa:e2:af:27:a4:00:7b:d8:94:61:f2:51:
d1:cc:62:31:b2:4e:55:0b:b1:f6:ee:02:3a:62:59:
2f:50:19:b0:e0:a1:f0:ba:56:37:b0:c4:da:3b:f4:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:36:82:32:66:13:91:82:DE:AD:89:27:F3:2C:EA:0F:42:76:04:73
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:39:46:aa:8f:30:ec:35:31:e1:d3:d8:c0:b2:15:36:c7:02:
4a:02:39:57:5b:ad:ef:ce:4b:16:f8:86:70:9c:b0:3b:00:5f:
f6:5c:87:4f:a0:80:28:87:2e:3e:29:ac:32:62:d3:cd:16:62:
94:82:34:7b:84:89:83:c7:da:d5:05:b1:72:f6:dc:f3:84:0e:
30:a2:6e:47:64:14:61:10:10:38:e2:7f:11:ee:ff:80:d3:3a:
ca:90:af:30:0a:53:0f:d7:54:8b:d6:ac:06:77:0b:4f:60:4a:
ae:7e:3a:77:ad:db:b4:a9:cb:d2:0c:2e:34:02:10:40:2e:13:
01:5b:e9:05:11:28:2b:60:15:3c:1d:61:58:f9:3f:f4:7a:22:
28:af:6a:3e:b8:3c:af:be:65:65:23:71:7f:30:5f:b9:ab:3f:
2f:9b:aa:c8:2f:5d:dc:f0:17:a8:81:36:86:d0:cf:3b:ed:96:
fe:67:8a:8d:fa:69:37:ce:fe:96:bc:2f:0c:ab:23:cb:62:f6:
2f:dd:b7:c9:c8:2f:ec:f5:a8:02:ec:a3:fb:7c:ed:e5:d7:50:
c9:20:58:db:ee:6d:72:d9:a4:e2:48:00:f5:89:98:dc:8a:b3:
34:e4:d7:80:f9:82:30:ef:7c:3a:4c:55:59:e1:6a:73:4f:f7:
b5:29:33:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebLIbUygJhNcPWyJ9CN2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOTJjOGM3NzliNmVkNmVkZTcyYThjZjExNDkwZWY2ZDdh
OWU5MjEwHhcNMjYwNTEyMjMwMTQwWhcNMjYwNTEzMjMwMTQwWjAzMTEwLwYDVQQD
EyhjZTM2ODIzMjY2MTM5MTgyZGVhZDg5MjdmMzJjZWEwZjQyNzYwNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1Gpt3+KTx18kFnWGO8Rcm6PGYPz
IQvYrReRHQ1qK4jSMxpxA2yGJStM4ecG3140X8L5ojEK0YvR1H3uNzbGfqYe3h+e
OaqqvpHHH7T7xXWpIIPtKXkru5EbCXKmqika1+opRbnSOxAeIg2mzhUjdzkFfhu3
JFx49SqZTj9W0Bhtudfy4mOUk80deImNLGQXNQ6QdupBeRxFvSBT9tTbpb1RpJ26
RNWxkJi1dpu7Z8dhkGvLM0dzlzSP/VN9llQJIpC2f8ybZU+jAIDTOpRrougdeiD6
4q8npAB72JRh8lHRzGIxsk5VC7H27gI6YlkvUBmw4KHwulY3sMTaO/RMVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM42gjJmE5GC3q2JJ/Ms6g9CdgRzMB8GA1UdIwQY
MBaAFOKSyMd5tu1u3nKozxFJDvbXqekhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMt
NWViYjYzNzgwMDllLzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMtNWViYjYzNzgwMDll
LzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTlGqo8w
7DUx4dPYwLIVNscCSgI5V1ut785LFviGcJywOwBf9lyHT6CAKIcuPimsMmLTzRZi
lII0e4SJg8fa1QWxcvbc84QOMKJuR2QUYRAQOOJ/Ee7/gNM6ypCvMApTD9dUi9as
BncLT2BKrn46d63btKnL0gwuNAIQQC4TAVvpBREoK2AVPB1hWPk/9HoiKK9qPrg8
r75lZSNxfzBfuas/L5uqyC9d3PAXqIE2htDPO+2W/meKjfppN87+lrwvDKsjy2L2
L923ycgv7PWoAuyj+3zt5ddQySBY2+5tctmk4kgA9YmY3IqzNOTXgPmCMO98OkxV
WeFqc0/3tSkzGQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:21:24 2026 by rpki-client