Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: KJ1qVlOrSaAAiY+0WxE9Y15RkSgevMIMyRhhcjHW9is=
Subject key identifier: 87:09:EF:C7:99:7F:A3:C7:09:CC:D0:F3:EC:A8:96:A4:BA:27:49:2D
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 019D292967257F356F76FFE69225C738086B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 0825
Signing time: Thu 26 Mar 2026 08:01:12 +0000
Manifest this update: Thu 26 Mar 2026 08:01:12 +0000
Manifest next update: Fri 27 Mar 2026 08:01:12 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: xthFcGgPCjtGvv4RSOka4+OxwCRe3jNQkRO0hMnMGlE=)
2: daqjoUQutGPSPWpp1MBlnqMi5s0.roa (hash: dLUynKpTq26uEi3G0kNMPoVLBPgdqfEJFefVyZLupvY=)
3: uBIxs7ssxXDGyk8SQNxkeydPi80.roa (hash: EJE4RSVi+Vk5YmcZI9DMOpSqKh06AU4ky+hWC3DDJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:67:25:7f:35:6f:76:ff:e6:92:25:c7:38:08:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Mar 26 08:01:12 2026 GMT
Not After : Mar 27 08:01:12 2026 GMT
Subject: CN=8709efc7997fa3c709ccd0f3eca896a4ba27492d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:01:71:c4:26:eb:74:aa:8f:a3:19:62:ef:
cf:b1:28:83:78:7a:cf:8e:ac:0f:d9:45:ce:5e:f9:
19:64:c9:87:51:05:af:87:16:b4:45:53:8f:f1:b0:
9d:fd:08:29:62:bd:87:0d:ca:1b:88:45:87:26:44:
8b:ce:da:41:9f:ac:c2:47:01:df:a5:a2:96:9c:fc:
f8:56:86:b3:4d:55:96:7f:11:d6:ae:ea:0b:87:11:
97:02:15:b9:67:ed:6c:c1:7d:a2:2c:a1:55:8f:6a:
8b:4a:4a:34:89:f4:16:2e:b8:6d:64:8d:5f:36:7f:
75:85:74:86:dc:ba:9a:7a:31:c5:d5:da:7b:c8:85:
94:d4:67:23:76:fa:0c:80:48:bc:af:43:d9:06:b5:
e5:73:07:0d:03:b9:be:0c:c0:aa:80:c8:35:68:d6:
06:4d:cd:8c:a0:81:82:0c:78:76:63:b1:6e:ac:d2:
84:47:66:41:2e:ad:8a:a3:92:bc:92:dd:b6:c7:68:
3d:5a:43:91:25:b4:8c:7e:73:57:31:1a:0c:b7:ed:
a7:64:67:80:bc:4d:48:08:36:6e:cc:f5:1b:fd:e4:
69:fb:dc:94:e4:91:1d:38:af:71:ad:c2:5a:25:ad:
30:1a:4e:5f:5a:73:1e:9b:40:de:a7:9d:60:fc:64:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:09:EF:C7:99:7F:A3:C7:09:CC:D0:F3:EC:A8:96:A4:BA:27:49:2D
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:44:74:f7:09:cb:00:ac:ce:c6:85:ad:90:41:24:52:27:5a:
34:3f:0a:e0:fc:59:91:a9:11:39:df:fa:e8:e0:d4:85:f1:c2:
4b:36:f4:42:60:6b:41:eb:0b:6b:a0:d0:cd:43:e2:7f:01:e1:
47:a4:57:be:f8:3c:ce:4a:77:91:00:da:82:a6:f6:01:2c:7a:
c5:14:27:74:31:9c:4e:e2:3d:e6:40:31:52:8a:34:d2:3c:35:
6e:d8:84:be:65:2d:ce:21:ec:33:d0:fc:f7:01:4b:eb:35:08:
aa:0d:f4:74:22:34:78:35:81:02:44:68:09:bc:88:1a:06:33:
43:92:48:34:18:28:51:c1:4a:91:5f:61:ae:e7:9a:a4:35:76:
8f:b4:d3:31:36:cd:99:17:54:b4:7b:a8:91:7f:6b:3f:7f:ff:
7f:15:30:d9:28:4c:bc:bc:7e:ee:bd:5d:2b:d2:c3:62:cc:bf:
df:65:5b:00:9f:49:37:3c:38:4e:76:cd:81:23:d2:0c:ec:0f:
ec:a6:a7:96:4f:57:68:99:06:c8:ba:f3:04:bc:a4:2d:ee:8a:
2b:bc:a7:ec:4f:bd:04:2e:6b:b9:55:02:5c:27:a2:b9:1e:57:
fa:9b:34:3b:e6:84:a5:76:32:75:07:71:de:1e:fc:7f:22:2b:
54:8a:c5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:18:15 2026 by rpki-client