Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: IrEFU+badUacZ9Vbr/Z/Uh/HttgUtTYGZqNwu9w3YEs=
Subject key identifier: 5A:0A:FA:A5:5C:EC:8D:94:A3:EA:D9:2A:42:58:3D:5F:60:F9:AE:F7
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 019D389BCC3CEBAC2D19F942CF0741C7AD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 082D
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: JMK4NhCJPR6cRFjt4+eKu9lPUPTg6w+ELbDcrOVdB6s=)
2: daqjoUQutGPSPWpp1MBlnqMi5s0.roa (hash: dLUynKpTq26uEi3G0kNMPoVLBPgdqfEJFefVyZLupvY=)
3: uBIxs7ssxXDGyk8SQNxkeydPi80.roa (hash: EJE4RSVi+Vk5YmcZI9DMOpSqKh06AU4ky+hWC3DDJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cc:3c:eb:ac:2d:19:f9:42:cf:07:41:c7:ad:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=5a0afaa55cec8d94a3ead92a42583d5f60f9aef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:c6:ea:a5:8c:08:94:ad:9d:98:05:f6:fa:
fb:b6:ef:5c:01:43:d7:a5:87:c6:7d:e3:fa:41:cb:
69:ef:93:04:7d:c9:3a:f0:cc:39:cf:3c:52:e9:64:
d4:a0:dc:50:2f:62:d0:f3:fa:6b:68:8e:35:2b:99:
0d:d3:7e:c2:2c:e3:87:82:e9:66:eb:e3:cc:f3:40:
99:00:6e:a1:f4:d4:95:1d:8d:51:35:0f:aa:1a:c4:
6f:8a:1e:30:11:de:4a:05:f8:35:6e:c4:c1:9e:dd:
c0:07:54:63:12:67:24:dc:21:3c:c2:d8:57:94:a1:
38:36:c5:63:e2:78:6e:14:a4:56:6c:5c:08:7d:1c:
f5:f2:1f:0f:51:c7:a4:f5:ef:c0:49:b6:e4:1a:7c:
fe:60:07:38:f6:7a:c0:90:1f:63:93:a6:50:8a:5a:
ac:22:fa:94:cb:49:8d:40:6b:21:61:49:17:1f:b0:
c2:45:73:51:79:05:70:c1:01:77:1f:7a:bf:74:2f:
1c:a2:5f:bb:1e:4e:02:07:aa:68:6e:0a:a5:dc:4f:
65:2d:75:20:ee:a0:af:70:0e:51:2e:40:b3:58:62:
7a:04:fc:a9:b0:21:5a:18:b8:f3:a5:2e:07:92:1a:
33:ac:93:91:c2:96:27:0a:f0:e5:d8:41:98:44:a5:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0A:FA:A5:5C:EC:8D:94:A3:EA:D9:2A:42:58:3D:5F:60:F9:AE:F7
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:65:50:73:05:12:c4:82:09:bc:8c:1f:22:b3:25:4f:f7:b2:
c0:0e:0f:15:1d:ab:92:85:cc:c2:e0:c4:f8:2c:04:61:a0:a5:
cd:77:3f:43:1c:c0:14:ad:99:e9:09:c3:18:2e:ac:d8:af:73:
0c:57:df:c2:da:be:60:1b:9d:1f:4a:0d:79:da:ef:c6:ae:59:
bf:29:4e:0f:f7:d2:fb:d7:ba:a4:c3:9a:d1:89:4e:bf:80:d1:
ca:6f:d0:48:90:a4:3f:55:4f:ed:bb:b6:72:01:13:d9:90:16:
c5:e8:5c:79:14:a7:b7:fd:41:98:28:c3:29:16:ab:3e:2d:e8:
05:1d:e9:39:7b:18:a9:8e:86:2d:90:1c:f5:e7:14:b3:4f:c0:
1a:28:9e:1b:f4:95:ff:f7:f6:18:d3:70:fe:af:d9:73:63:8d:
21:86:08:3f:a5:59:ee:6b:cf:60:03:a8:8f:fd:aa:9d:a9:52:
b3:f7:af:e3:3d:27:be:41:0f:fa:01:be:5d:39:c4:b4:1b:92:
4c:29:bc:2e:3d:17:08:54:13:56:5f:69:01:e4:05:ab:e6:c1:
55:cf:84:ad:9d:39:ad:27:d1:89:6b:6c:03:0d:4e:34:4f:f1:
5f:7f:91:a9:42:6e:a5:0c:85:75:eb:12:b0:f2:fe:56:d4:6e:
96:0e:d5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:09 2026 by rpki-client