Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: orogCvDmgODndIIzKYasRtWbJBj2VWfc/DmCDVTcrLc=
Subject key identifier: 78:29:F8:F4:41:AA:EC:9C:B7:81:68:77:79:E8:54:E5:FA:69:F2:9E
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 01A13C6E3989966ACBD5B55506AF3620AC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 1567
Signing time: Wed 14 Oct 2026 22:00:18 +0000
Manifest this update: Wed 14 Oct 2026 22:00:18 +0000
Manifest next update: Thu 15 Oct 2026 22:00:18 +0000
Files and hashes: 1: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: dFOSuf59Qdkie7Cn6gZZweJepIO/xLdjz02PEXYzo/k=)
2: Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa (hash: W4o6cddb54HLP4AcX6qxzKIWMKDAcAqZyEJok2ZHE/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:39:89:96:6a:cb:d5:b5:55:06:af:36:20:ac:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Oct 14 22:00:18 2026 GMT
Not After : Oct 15 22:00:18 2026 GMT
Subject: CN=7829f8f441aaec9cb781687779e854e5fa69f29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:03:88:1e:81:09:f8:82:b2:de:dc:78:fe:
2c:99:7b:1c:31:39:b4:d4:33:ec:11:37:ba:a8:37:
62:09:5d:52:8a:e1:64:60:95:25:ac:5f:3c:92:60:
e2:e5:56:f6:56:0f:40:10:e5:91:77:c6:b0:27:f9:
c7:dd:e3:9b:36:ba:e8:f2:cf:92:97:fe:75:88:76:
e9:44:cf:c3:fb:5f:72:d6:cb:ee:3d:98:d9:59:55:
0d:3d:32:25:17:14:85:fd:01:83:5b:c5:cd:08:18:
61:3b:7d:cd:5b:79:ca:2f:83:67:89:35:38:3e:d7:
a9:14:54:0c:58:e2:96:a0:0f:0d:82:c4:16:7c:9c:
64:af:52:b5:9b:3a:be:91:89:e2:86:a0:c1:80:a4:
77:c9:6c:ce:27:9c:4e:bd:0e:f8:8b:03:d1:c9:29:
94:72:b0:15:99:f2:56:6a:60:b2:11:36:98:7f:17:
eb:35:37:c4:23:df:ab:cc:6c:21:40:10:84:98:24:
19:df:d7:cb:38:6f:da:21:e1:c2:d3:ad:3b:8f:39:
89:fc:e3:21:ba:cb:5e:2c:fd:2d:1b:da:44:c0:dd:
cb:fc:89:4a:24:8a:97:bf:a4:ee:ac:f5:97:b6:6e:
3f:48:6c:65:c8:66:f6:7b:aa:58:63:eb:50:24:e4:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:29:F8:F4:41:AA:EC:9C:B7:81:68:77:79:E8:54:E5:FA:69:F2:9E
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:f0:44:1b:8a:05:77:a8:f3:0a:61:4d:02:39:20:73:a1:
28:04:22:28:bc:e1:81:5c:d6:02:c4:7f:6b:5b:a3:76:b7:c8:
cf:0f:4e:4a:25:03:0e:55:ef:02:3f:2a:9d:cb:1f:57:13:80:
34:66:40:92:64:98:b7:e4:0e:64:8a:12:fb:73:4b:22:09:11:
00:c6:73:7c:ec:1c:bf:37:73:16:8a:88:38:f9:c8:ae:18:ca:
fd:fb:3d:60:98:bd:db:e7:60:f2:10:df:54:72:15:89:47:ba:
3b:b1:9a:f3:f4:72:6b:84:dd:82:33:1b:7f:df:bb:f6:96:d9:
12:a0:4a:f4:ca:8f:56:c5:f3:83:f8:0d:1b:04:64:3a:fa:27:
f4:e6:54:a7:92:77:ba:81:a2:54:b3:90:68:55:71:06:30:3c:
4d:e9:cc:21:2e:40:7e:4f:85:44:df:60:bf:82:2a:0a:14:e4:
e2:bf:63:3d:69:bd:65:dc:c4:b6:39:31:e3:9e:87:79:7e:cb:
47:8f:64:35:72:2c:7e:22:ea:2d:ca:d4:e8:cd:b1:29:f1:9f:
bf:c0:ab:8a:d8:66:ce:39:20:da:d6:c8:28:5e:73:ef:9a:0b:
70:3f:58:9b:3e:e0:5f:42:8e:13:ae:af:1e:ce:87:a8:95:91:
10:06:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:17 2026 by rpki-client