Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: SdM0VEte0QTdOxKpjkdH2BCP5ZuXQGBJcSXpw2oQop4=
Subject key identifier: DD:B6:84:AB:76:55:93:8B:B9:37:22:2A:7D:8C:84:72:E2:98:A5:1B
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 019D371B840A65B08F94E9C378F5205C0989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 1352
Signing time: Sun 29 Mar 2026 01:00:42 +0000
Manifest this update: Sun 29 Mar 2026 01:00:42 +0000
Manifest next update: Mon 30 Mar 2026 01:00:42 +0000
Files and hashes: 1: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: xKGUWqR77mjpArsPQICPFymf1UQkxPBbJncULA9dHRM=)
2: Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa (hash: W4o6cddb54HLP4AcX6qxzKIWMKDAcAqZyEJok2ZHE/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:84:0a:65:b0:8f:94:e9:c3:78:f5:20:5c:09:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Mar 29 01:00:42 2026 GMT
Not After : Mar 30 01:00:42 2026 GMT
Subject: CN=ddb684ab7655938bb937222a7d8c8472e298a51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:7c:26:13:76:d7:b4:11:ef:cc:4b:c9:e4:
db:0d:a1:21:d0:36:56:5b:c2:43:5b:7d:9b:f6:a6:
3b:68:f6:0c:4d:22:ea:d5:4a:9a:ad:ce:bf:2a:3d:
db:7b:99:89:1f:e9:61:d0:05:c9:06:da:d2:06:13:
86:f1:59:96:2a:65:ac:0d:93:83:b0:8f:81:10:64:
a3:6d:44:99:f0:a8:ec:ff:ef:ce:6e:39:34:90:4a:
2b:b4:76:e8:c9:94:a4:5d:fb:62:f9:37:fd:12:69:
49:2e:a6:02:80:6b:8f:55:ef:1e:6f:2a:1b:8c:95:
0f:61:22:b6:f4:7a:4d:f2:c7:46:38:0e:e7:ce:f7:
a1:d0:82:e4:72:08:95:d1:4d:da:b8:22:8f:76:52:
1d:92:50:f9:19:8f:a5:e1:c5:e9:2a:f2:40:72:d2:
d7:12:f9:96:98:5c:08:23:be:bc:86:dc:d6:fd:d4:
1c:fc:e5:03:a4:b8:69:fe:27:02:66:ad:a0:7e:6c:
0e:63:58:60:96:fc:2a:73:1c:83:9d:d5:e9:59:4a:
ba:ba:e9:01:ac:42:5c:79:cc:fe:3b:35:42:18:0b:
18:98:8a:f7:d9:57:06:ba:2e:99:54:5a:18:88:a5:
6b:25:3a:df:74:85:50:e7:ad:25:ff:32:a8:72:bc:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B6:84:AB:76:55:93:8B:B9:37:22:2A:7D:8C:84:72:E2:98:A5:1B
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3e:89:a1:d8:0f:b4:3d:56:19:69:9e:80:01:83:5e:51:a0:
45:4d:2e:89:d0:f6:63:ce:c1:54:33:2d:79:2b:1b:7d:6e:5c:
98:73:54:df:0d:3b:0f:04:8d:48:79:ba:a8:09:79:9b:2a:f1:
9e:0a:35:d0:b6:e4:e6:67:48:e1:4d:e8:16:39:76:12:0d:66:
38:5a:d0:d8:7c:e1:49:e3:39:9e:0f:6b:03:2f:5d:0c:d3:06:
66:4a:4c:fc:04:69:38:1c:52:4b:70:e9:c2:8e:85:94:e0:22:
b2:ca:83:07:79:14:54:9c:d6:4b:2d:95:89:24:37:30:7c:aa:
85:6a:6c:c1:c8:46:ef:91:5e:39:f6:38:bb:28:10:f0:76:8c:
c7:b5:f1:2b:9a:ca:1a:31:fc:7f:ac:28:57:13:7b:8d:dc:b2:
ce:d3:6b:df:f1:2f:61:2d:d5:9d:a9:1d:88:57:18:b2:b4:e9:
c4:56:d3:51:1f:99:cb:03:53:1d:31:20:9b:72:09:dc:20:cd:
58:ad:02:99:f0:cc:40:de:07:f5:30:89:5e:09:66:09:40:9a:
fe:3f:c4:5e:5f:e2:4d:79:cf:14:43:9d:75:0d:b6:d0:a6:c2:
8a:33:12:ad:d4:e6:42:1e:92:2b:ee:d2:32:54:5f:1c:c9:7c:
8b:d0:5b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:09 2026 by rpki-client