Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: v5zdd/yo2Mv9g8PX9I0t8K2H5GepB4ye+lfpWYd3qe4=
Subject key identifier: E2:0D:64:5C:00:35:8D:7C:2E:C8:27:1C:31:45:D4:74:07:BC:29:C0
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 019E31BBEA38CA751F8F15A0C162BD70C808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 172C
Signing time: Sat 16 May 2026 17:00:59 +0000
Manifest this update: Sat 16 May 2026 17:00:59 +0000
Manifest next update: Sun 17 May 2026 17:00:59 +0000
Files and hashes: 1: 348GlYel7WKf7j6VpPBbdI2F0AY.roa (hash: 8CB29xF2GvA/FLxPFcEF5rA4l97+T5SM5ICvhUC1S3w=)
2: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: zRyOWMHhzHWa2vBmtWxE9cYymoR2KV29NVHvoSfApwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:ea:38:ca:75:1f:8f:15:a0:c1:62:bd:70:c8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: May 16 17:00:59 2026 GMT
Not After : May 17 17:00:59 2026 GMT
Subject: CN=e20d645c00358d7c2ec8271c3145d47407bc29c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:26:da:dc:78:e5:d9:9b:37:45:c6:cb:36:
f7:26:26:1c:9e:86:45:14:85:25:d2:2b:77:63:52:
67:2b:74:6d:a6:4e:34:9a:09:e4:85:36:cb:5c:be:
9f:63:3c:8a:a4:b9:14:4c:4f:a5:83:f3:e0:d4:8f:
aa:c0:74:9f:e8:c4:50:a5:55:68:db:c9:ce:a4:16:
61:b1:06:c1:e1:66:8d:2a:95:f1:17:9b:69:cd:28:
e1:ec:c9:c3:63:e1:6f:5c:b7:f1:20:46:3d:f9:ac:
21:37:78:19:0a:4b:87:de:e0:e5:b3:aa:65:ac:4c:
93:5b:3b:72:e2:b0:6b:aa:16:1b:43:9f:9f:15:d0:
9a:42:5b:dc:ce:50:40:9f:67:a3:2c:e6:0c:0f:48:
c9:39:58:84:cc:46:e4:20:5e:e7:8a:b8:97:62:6d:
4b:12:59:9e:ba:8f:ce:11:94:1f:8a:03:f8:48:f6:
e6:af:ea:4e:4b:19:87:ae:76:6d:e8:5c:98:a1:7d:
3b:74:02:3e:90:9b:be:e2:79:4b:74:2a:7e:2a:93:
3b:b9:24:07:d4:37:a4:8c:7d:8c:09:b2:4a:76:eb:
62:b6:a2:8a:13:07:f1:5b:79:0b:94:03:ca:a8:81:
45:6b:63:cf:b0:75:14:f2:c8:2b:5c:9d:54:92:83:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0D:64:5C:00:35:8D:7C:2E:C8:27:1C:31:45:D4:74:07:BC:29:C0
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e5:9b:27:ac:14:51:ce:89:fa:54:ca:d2:a6:4f:fc:5a:42:
45:89:b1:60:37:5d:1f:47:ee:ec:b4:ad:c1:a8:1c:d0:ec:16:
00:93:7a:03:73:d1:3b:f8:ed:ab:c8:36:97:c0:1b:0a:40:37:
1d:6e:3d:01:3a:a2:80:8c:4f:96:7e:c3:98:05:55:7b:34:4b:
25:92:af:12:59:f9:1e:51:c4:8d:aa:cd:49:3d:d3:bf:72:a8:
bf:f0:d8:a0:ba:ee:e4:c2:d6:80:77:13:1c:78:cc:51:4e:2d:
80:3c:70:00:37:ef:85:64:f6:ef:75:3e:d0:84:53:a9:b0:6e:
f3:01:01:cd:46:fc:8a:08:00:3d:3c:85:93:39:77:10:33:35:
0b:fe:1b:e5:15:f2:a6:20:ae:0c:c8:7c:74:4f:53:7d:e6:c0:
67:8a:63:dc:cf:9f:cc:09:2a:4f:20:4d:31:9d:33:cc:71:2c:
5b:1d:79:91:a9:f6:64:3f:16:5f:ed:11:46:44:12:48:19:55:
61:c2:fb:24:cd:64:02:04:83:5a:ea:d7:f3:89:24:97:6f:d4:
ce:04:a8:26:09:f3:e9:d0:84:10:78:c5:3d:0a:0c:ae:1b:00:
ba:16:bb:34:49:58:27:c5:19:fc:6e:b5:12:fa:7c:33:3d:b6:
91:20:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:15:05 2026 by rpki-client