Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: 2mrpNDYDTPz2+sgvIq+TvvgXJsF3GNf6P74KdOgAGEg=
Subject key identifier: 1E:51:60:D7:2D:6B:97:E4:A7:7B:24:ED:8E:75:50:21:8D:88:C4:67
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 01A001381FE92B1CEA677F106B1A0A6C7FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 181C
Signing time: Fri 14 Aug 2026 17:00:50 +0000
Manifest this update: Fri 14 Aug 2026 17:00:50 +0000
Manifest next update: Sat 15 Aug 2026 17:00:50 +0000
Files and hashes: 1: 348GlYel7WKf7j6VpPBbdI2F0AY.roa (hash: 8CB29xF2GvA/FLxPFcEF5rA4l97+T5SM5ICvhUC1S3w=)
2: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: iObE5/R15LIRVdOXwA/bNrgojjbAm1QpUKUKijp/zKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:1f:e9:2b:1c:ea:67:7f:10:6b:1a:0a:6c:7f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Aug 14 17:00:50 2026 GMT
Not After : Aug 15 17:00:50 2026 GMT
Subject: CN=1e5160d72d6b97e4a77b24ed8e7550218d88c467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:0c:15:53:c8:9b:c8:c3:c1:e7:62:9d:c8:
2b:f9:08:37:2b:bc:0c:cf:71:74:32:a5:5e:e2:d4:
ea:40:6f:3f:fb:d2:1e:38:77:01:88:36:61:40:b7:
af:d3:d6:44:5f:4d:e4:94:57:fd:be:36:8f:29:01:
3b:56:fb:3a:05:5e:3b:92:26:99:3d:be:c5:8e:b5:
68:66:20:d6:8e:f3:4c:6a:66:a7:f2:e4:f5:66:ed:
c7:4b:69:f7:4e:b2:12:83:b3:b8:75:2b:5a:02:ca:
c3:a5:64:02:36:0b:c0:2b:7f:8c:0c:2e:d7:46:9a:
ab:b5:f0:68:3c:c6:f9:36:f5:8b:f4:51:c4:e2:24:
b1:99:9c:8e:be:a8:9d:1c:70:ec:92:ef:8f:40:a6:
4f:18:09:4e:07:4b:03:d5:97:fd:9c:e8:42:94:0d:
fc:a1:13:87:c3:34:63:df:54:e4:f4:75:bc:68:6b:
4a:9c:69:b9:eb:b7:b7:b6:66:55:e1:a1:69:67:fd:
d6:ec:32:f9:6c:bb:9d:fd:3f:2c:70:5d:8c:20:ba:
02:c7:34:f5:78:4b:2d:86:08:b6:a1:0d:0d:95:a5:
67:38:d3:75:5a:8e:e1:a8:1f:a9:e6:03:15:57:00:
9e:f0:21:f6:91:eb:f9:83:6d:85:a3:fb:f8:cc:d1:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:51:60:D7:2D:6B:97:E4:A7:7B:24:ED:8E:75:50:21:8D:88:C4:67
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e5:df:cc:8f:9f:1b:9c:a4:6e:16:c4:40:ab:17:a7:fc:20:
e7:a9:dc:b5:a8:82:6b:b5:74:ca:9e:6a:d6:79:df:ff:5b:1c:
8e:bf:b6:73:e5:be:f1:06:a9:77:6a:0a:22:0d:c0:cd:19:a0:
0e:3f:02:55:ac:68:36:03:a6:47:9e:aa:27:d4:a5:cb:9b:59:
3b:47:b7:e8:b4:4b:eb:54:ac:6e:e6:32:4d:4e:12:61:e0:3a:
f5:77:e8:03:18:f8:dc:f7:5e:82:f4:c9:0e:e7:c9:43:1a:bf:
e5:68:11:b2:b6:83:70:24:db:ca:fc:92:96:2d:6e:ed:ec:6a:
d1:1e:b1:28:ff:05:5c:49:da:0a:9b:75:08:00:89:c2:d8:e6:
76:66:5b:dd:a4:ca:63:40:3b:c7:fd:37:e5:bd:f7:82:9a:3a:
67:1c:42:4a:41:5b:ed:e5:69:4a:90:5e:b4:ce:44:b0:47:60:
ca:8f:41:71:16:95:8a:0c:54:97:9a:2e:3d:c4:69:df:ea:33:
7b:d5:b1:8c:8c:fa:07:15:60:db:47:9a:31:f1:8f:3c:42:1c:
fc:71:a4:87:3d:8c:e8:16:63:8e:f3:c2:e5:05:4f:ae:09:a4:
9f:34:44:d6:15:15:75:4e:6c:44:9d:78:a1:68:bc:23:d0:03:
df:ce:db:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:56 2026 by rpki-client