Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: BauZ7zIjBi8t5dUGXvys3SsIVsojYvOOrv9FA5jhuos=
Subject key identifier: 8D:32:3B:F2:CE:17:F5:75:43:63:94:E8:06:25:31:D4:89:40:93:96
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 01A0D34B32F8E8656A0919EA4A0C89247C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 0A0B
Signing time: Thu 24 Sep 2026 12:01:55 +0000
Manifest this update: Thu 24 Sep 2026 12:01:55 +0000
Manifest next update: Fri 25 Sep 2026 12:01:55 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: og/Dm2wEj6Y0rBDfHKXKLQtLRqyCBUyTxKrc87UEKFI=)
2: MIWe6_AUcHSjRgC4Sn1hvPGPAVQ.roa (hash: RHnTGPBWdCvZaUsgPteZ8dK8qDQOfdI5+BZrUWBa1No=)
3: uBIxs7ssxXDGyk8SQNxkeydPi80.roa (hash: EJE4RSVi+Vk5YmcZI9DMOpSqKh06AU4ky+hWC3DDJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:32:f8:e8:65:6a:09:19:ea:4a:0c:89:24:7c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Sep 24 12:01:55 2026 GMT
Not After : Sep 25 12:01:55 2026 GMT
Subject: CN=8d323bf2ce17f575436394e8062531d489409396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:bc:15:0d:b3:dd:95:d3:72:05:63:c0:fe:
24:a4:b3:47:c6:f8:80:36:3d:24:f7:35:55:ab:b6:
b5:a4:2d:ed:fc:4e:41:7c:90:0b:0b:c4:d4:df:98:
e5:b8:15:a2:52:69:e8:e5:1d:cb:62:26:a5:83:3c:
17:4b:93:2a:67:6d:39:2f:50:2f:ab:49:7f:44:73:
93:42:e3:ce:25:0b:c8:73:6d:fd:27:a5:81:a2:bc:
b8:5c:71:92:e2:3e:78:fe:0b:c7:25:95:4f:05:5b:
9a:78:71:9f:9b:e3:28:76:23:67:5e:a8:7b:75:f5:
31:af:30:6d:bc:9e:89:b8:a4:f4:89:79:73:a8:ea:
71:0a:e5:86:30:9b:b8:37:9b:dc:d4:fd:2a:52:f2:
ca:20:5b:bf:8d:a4:fd:d7:4c:a5:99:9a:f9:2b:21:
f5:cf:b0:57:25:cb:1f:5e:58:cc:55:3b:2f:95:81:
97:d3:2b:e2:3b:92:ab:9e:94:72:5a:7b:42:6a:b1:
c3:7e:6d:7a:4e:a8:cd:d2:16:03:2b:be:a3:ee:f4:
4d:eb:5f:8a:34:29:64:98:b7:84:67:85:fc:5b:b5:
a4:d2:ff:dd:33:d9:2b:26:85:d6:37:3d:01:90:d9:
69:89:be:34:92:0f:e6:04:5a:f0:4c:78:09:ba:a1:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:32:3B:F2:CE:17:F5:75:43:63:94:E8:06:25:31:D4:89:40:93:96
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:99:0a:a6:10:78:ff:51:f9:91:0b:91:b2:df:6e:2f:49:c6:
bb:71:08:9f:50:7c:54:22:34:45:11:b5:4e:8f:f7:83:1a:45:
20:9a:35:ae:2b:3b:d9:b0:2e:a0:dc:c4:d7:07:aa:1f:13:dc:
98:3b:66:3e:db:2d:d5:12:7b:a0:29:11:2f:0e:db:85:ef:76:
0f:eb:e6:1d:c4:cb:63:c6:80:00:f2:ec:ed:98:6a:48:7d:e0:
d8:bb:dc:17:af:45:64:62:56:19:dc:39:3b:d6:f9:67:05:5e:
1a:e3:3e:63:2d:95:37:32:31:1b:79:40:f3:de:42:a2:6a:87:
4b:03:ee:ca:c4:6e:c5:d0:94:13:48:6c:ce:20:54:33:47:ae:
7d:4e:eb:a6:31:f3:d0:5f:62:bf:e2:43:fb:05:db:33:c3:df:
0e:8e:6d:6a:9b:12:a7:12:9a:21:52:76:2d:f2:a0:84:b0:57:
7d:ad:04:67:70:46:cc:75:de:3b:fb:a4:df:70:0c:84:3a:8d:
98:c0:a6:b3:8d:e7:a5:d4:dc:18:2c:d1:a2:26:2f:e3:d0:3c:
33:46:30:14:b1:c4:8d:85:a3:fe:f3:cd:57:74:47:24:09:49:
8c:10:ba:ad:8b:8e:4e:3e:e3:54:23:7a:48:7f:0d:9c:8f:95:
43:28:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:53:31 2026 by rpki-client