Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: u07sBpprG/NhjSpqmnPB7JZiUnYy6djXiEJhvSuY0eU=
Subject key identifier: 5C:15:18:B2:0E:AF:18:CF:C6:34:BD:1F:66:1E:8E:08:9D:13:A3:F9
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 019D389BF6CB9B896C84AC910C703CFC3A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 16AB
Signing time: Sun 29 Mar 2026 08:00:38 +0000
Manifest this update: Sun 29 Mar 2026 08:00:38 +0000
Manifest next update: Mon 30 Mar 2026 08:00:38 +0000
Files and hashes: 1: 348GlYel7WKf7j6VpPBbdI2F0AY.roa (hash: 8CB29xF2GvA/FLxPFcEF5rA4l97+T5SM5ICvhUC1S3w=)
2: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: DU4TW024KhihAG91HHhgLZCHdAP9g26FLNQPeOkhmqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f6:cb:9b:89:6c:84:ac:91:0c:70:3c:fc:3a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Mar 29 08:00:38 2026 GMT
Not After : Mar 30 08:00:38 2026 GMT
Subject: CN=5c1518b20eaf18cfc634bd1f661e8e089d13a3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:bb:6a:35:20:1f:57:50:a6:1c:d9:ab:b9:
48:b9:48:56:e0:ec:ad:61:88:52:8f:c7:e1:22:a6:
88:f0:96:21:00:1a:e6:d6:29:58:9f:fa:d7:93:a1:
e7:e3:8b:8f:43:14:62:d0:bb:c2:04:95:75:47:a1:
e0:42:0d:4a:ff:74:00:c8:e8:ab:06:da:63:15:c7:
d1:09:ac:d8:87:f0:48:97:9e:44:b0:f3:35:b5:00:
bd:47:0b:58:8e:25:8d:0a:f7:0d:8b:0d:71:a3:98:
67:6d:93:35:8a:a1:bf:7a:78:56:04:a3:9f:19:f2:
b9:f1:af:5a:5f:32:e6:be:8f:0b:54:9c:cc:d2:ca:
95:04:88:e7:e7:c4:58:01:8f:f2:9e:9b:a5:e7:d1:
66:47:9f:3b:39:32:8d:9e:fb:db:5f:fc:f8:11:bf:
1b:5e:ea:c7:30:cd:ed:75:e6:ad:48:b2:55:a2:6a:
4d:06:7a:30:46:6e:cb:3c:79:87:24:81:62:fe:27:
6d:83:70:6a:e9:cd:b9:f5:86:4f:a2:e3:0e:69:ca:
06:e3:fd:46:df:a6:d9:0c:8f:89:e1:4e:98:49:63:
f7:88:bb:58:79:d9:a6:02:8e:c9:70:c6:0a:c7:b0:
2f:01:7d:b0:1f:cf:b0:8b:fc:1c:fb:47:a9:e3:42:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:15:18:B2:0E:AF:18:CF:C6:34:BD:1F:66:1E:8E:08:9D:13:A3:F9
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e9:68:5e:f0:d0:29:fa:8d:eb:f6:bd:3a:12:97:f1:6c:73:
3e:cf:a9:5d:3e:f1:ba:73:4b:26:f5:f0:47:8b:8f:80:c0:dc:
02:e9:bd:6d:64:38:be:53:0f:83:b5:c1:56:6f:a2:05:e6:36:
fc:60:c2:19:76:28:8d:07:12:31:b1:c7:fc:d7:12:1a:34:05:
39:2c:00:76:5d:53:2c:ff:18:67:2a:52:1d:3a:c0:06:51:64:
31:40:ba:0a:8c:96:96:9f:4f:e9:30:d3:07:7c:fb:8e:d3:64:
bc:e4:f5:10:0a:ae:ad:a7:c2:8c:e3:da:99:19:98:50:66:70:
ca:f2:8c:54:3d:70:93:d2:93:b2:8a:b7:ad:f8:16:e3:b2:dd:
4a:ff:20:c4:94:ff:49:29:10:99:b6:cd:8c:e0:9b:f6:2f:93:
ae:e6:53:c5:c5:62:47:b3:7c:cf:e3:ea:46:a5:95:8d:28:6c:
67:51:38:fe:92:4d:3a:af:9d:28:97:c0:bd:0b:0f:84:33:3b:
fe:c0:90:55:ff:07:66:36:ad:f0:e2:11:f8:b1:13:2e:db:9d:
76:95:3f:af:b2:77:c7:75:e4:55:76:75:4c:74:d0:12:07:c1:
be:2e:d4:80:ae:84:ba:a4:82:96:8c:1a:b7:a7:4c:5c:18:0b:
5f:85:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:08 2026 by rpki-client