Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: HctOjL7N4mSi/P/uTJXFHGPV6tmbfPOaMcrrRlyOTZ0=
Subject key identifier: BC:E3:61:C9:DC:5E:50:E5:35:F4:23:2D:62:85:4D:79:75:DC:08:AD
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 01A13D4A2CCC0971704CEBD61CBD8BAFB5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 0A42
Signing time: Thu 15 Oct 2026 02:00:33 +0000
Manifest this update: Thu 15 Oct 2026 02:00:33 +0000
Manifest next update: Fri 16 Oct 2026 02:00:33 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: bowqOY9SVawr5I/IaSYpEs9JjgmEXt7PXtjfEPUG3C0=)
2: uBIxs7ssxXDGyk8SQNxkeydPi80.roa (hash: EJE4RSVi+Vk5YmcZI9DMOpSqKh06AU4ky+hWC3DDJTc=)
3: xNCffOjDpgYu18GPK2NDcOgiELA.roa (hash: fzGsF3eRfGxp0+8ldtwDE45DuXXkb7TE5rh669GrYQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:2c:cc:09:71:70:4c:eb:d6:1c:bd:8b:af:b5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Oct 15 02:00:33 2026 GMT
Not After : Oct 16 02:00:33 2026 GMT
Subject: CN=bce361c9dc5e50e535f4232d62854d7975dc08ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:13:2a:8b:44:7a:90:3e:4c:a5:bd:bb:fd:
aa:36:87:cb:7b:8d:58:76:96:cb:84:9e:47:62:11:
b6:13:de:2d:7d:ad:a6:a0:ce:53:5f:a4:dd:03:fe:
1e:c3:fb:7a:97:62:2c:8f:06:5d:ea:e4:e5:90:8f:
1b:c8:f7:9c:3b:a2:85:69:0f:5d:38:1d:d6:a5:71:
d4:ab:cb:d4:34:de:8d:d7:27:c9:85:d0:12:93:3b:
c0:27:7e:57:4d:17:dd:e8:0b:c6:4e:b5:c0:8f:22:
2d:63:ea:91:53:45:a7:bd:83:13:b3:1e:32:4e:85:
9e:65:e2:41:fe:1b:ff:81:02:45:09:b6:60:3c:3e:
60:eb:12:07:25:52:5a:de:17:88:11:c0:f2:c5:27:
a2:26:e4:c0:88:b2:68:13:2e:95:a9:c7:d2:f7:27:
ec:37:55:74:92:ab:fd:30:07:07:4a:c2:59:a7:35:
8e:78:99:93:41:b7:0f:4d:91:90:7c:2c:38:32:6e:
bb:98:ac:fc:cd:15:2a:d9:ab:61:18:46:37:94:ce:
af:94:e2:f6:21:ef:4a:d0:de:c9:ca:77:5e:87:46:
79:62:5d:b4:2a:b4:ff:6e:a7:79:45:1f:7d:a7:00:
57:9b:21:55:2f:f2:76:20:46:52:88:47:88:c4:57:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E3:61:C9:DC:5E:50:E5:35:F4:23:2D:62:85:4D:79:75:DC:08:AD
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e9:f9:c0:d2:b0:8a:61:1f:bb:d1:1b:c9:86:7d:eb:19:e0:
8a:f1:d0:75:09:31:fc:d8:69:43:73:54:39:3e:6a:44:81:25:
26:be:b2:11:27:70:c4:79:58:f6:58:ac:60:2c:e2:50:79:a7:
49:f9:98:79:c0:c9:6d:63:a8:c1:a4:67:f4:61:a1:40:83:7e:
6c:0c:0c:fa:75:d4:ee:f5:a0:95:b2:9d:6c:17:d6:f4:9b:77:
3c:1e:52:59:10:12:31:e0:0f:d7:b4:b9:c8:df:64:5c:40:03:
e4:ee:e5:ec:f8:cc:68:50:07:f0:65:e2:e8:db:41:97:9e:3b:
98:2c:34:67:16:0c:10:48:99:fb:93:f1:bd:9c:3e:a9:d7:84:
4e:0d:6b:ee:5b:37:79:de:10:d7:f3:fd:d6:c4:fb:ee:09:71:
d2:6f:ef:c1:07:af:2d:ab:bb:d8:69:05:d9:3c:a9:08:e7:2d:
7a:66:81:75:63:1c:0d:58:64:9a:a5:a7:53:d7:e6:9d:82:36:
89:f0:ef:93:de:7b:58:7c:b9:28:b3:b8:9b:a9:41:b0:df:f3:
18:c9:2d:f1:0d:87:01:ef:23:02:d0:31:f1:1e:00:fb:09:65:
89:85:71:d0:30:72:9d:bc:23:64:2b:7a:d0:4f:7a:87:b1:b0:
de:56:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:21:01 2026 by rpki-client