Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: XgUo+56ubne8/JjOzMVr0OYPx6YGGqST9bTIifB1gh4=
Subject key identifier: BD:B5:46:69:2E:D0:B4:F0:BA:E7:95:F8:2C:78:1A:84:D3:E4:40:61
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 01A000CABB069E1CCD6C8AD05C886616D657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 099E
Signing time: Fri 14 Aug 2026 15:01:21 +0000
Manifest this update: Fri 14 Aug 2026 15:01:21 +0000
Manifest next update: Sat 15 Aug 2026 15:01:21 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: fLmG1D9WzVr2J0PFaoHua8Owhst3pI5p5y5Je/NW7GM=)
2: MIWe6_AUcHSjRgC4Sn1hvPGPAVQ.roa (hash: RHnTGPBWdCvZaUsgPteZ8dK8qDQOfdI5+BZrUWBa1No=)
3: uBIxs7ssxXDGyk8SQNxkeydPi80.roa (hash: EJE4RSVi+Vk5YmcZI9DMOpSqKh06AU4ky+hWC3DDJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:bb:06:9e:1c:cd:6c:8a:d0:5c:88:66:16:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Aug 14 15:01:21 2026 GMT
Not After : Aug 15 15:01:21 2026 GMT
Subject: CN=bdb546692ed0b4f0bae795f82c781a84d3e44061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:2d:82:c3:2d:4c:98:c3:47:c0:e4:40:0e:
52:6b:ca:94:95:94:3e:08:68:a3:3c:0c:e0:8d:cd:
91:f0:bb:82:9d:ef:e2:84:3f:18:c7:22:ea:31:8d:
2c:60:11:35:e7:4a:82:f5:9a:f9:88:02:1d:c2:18:
58:8f:91:8c:f8:8e:bd:62:e1:39:a1:27:2b:f7:cd:
12:1b:ae:ee:43:ef:16:31:e0:82:8e:ee:72:82:3c:
e3:3a:39:ad:0e:23:ff:12:6e:b5:36:f3:a4:09:7b:
e9:fb:c7:9a:a6:32:d9:df:ca:cb:1c:40:ba:e2:bd:
ce:6e:60:5f:5a:9f:aa:58:e0:eb:9f:9f:17:8a:d6:
08:1c:6c:b0:85:ba:f0:d4:1c:d9:1c:e9:34:73:11:
68:45:20:95:3a:fc:00:22:bc:6d:f9:70:54:25:bf:
bf:4c:ff:94:26:cb:92:55:57:6d:05:68:39:ce:33:
58:11:5e:0f:b3:5a:67:bd:cd:b9:8e:12:8b:1c:13:
53:9e:ac:f6:36:e6:4e:ab:82:16:7b:3f:3e:97:1c:
f8:df:f1:43:41:6f:b3:33:a2:b8:1d:07:dc:b8:23:
87:36:6a:a8:37:32:2e:f7:61:3c:31:d3:8b:e4:e0:
4e:8c:f3:e5:25:9a:06:41:78:03:e4:df:90:f3:73:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B5:46:69:2E:D0:B4:F0:BA:E7:95:F8:2C:78:1A:84:D3:E4:40:61
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:22:b8:dd:1f:98:d8:47:cf:a5:f1:f1:84:f3:68:1d:0a:36:
e8:8d:1b:b1:8a:50:3f:1b:9a:23:9d:88:b0:75:b1:09:b2:b2:
06:fa:95:55:0f:b5:24:4b:bf:62:91:bb:d6:b0:c5:c6:93:13:
22:62:1f:7c:da:0f:52:fd:18:38:eb:d9:9a:22:73:52:73:bb:
79:20:ae:60:ae:0a:a1:01:9c:21:9f:34:e6:34:a0:78:aa:0a:
83:c2:b6:b9:4b:eb:79:40:68:9d:e0:a3:98:14:3a:e4:04:4f:
19:69:0b:7d:70:7c:66:b9:b7:87:a2:5e:85:b4:dd:57:5a:18:
7d:0c:d4:de:89:6e:c9:68:22:e3:3b:13:b8:78:32:44:04:21:
1b:07:eb:4f:95:e7:1e:12:33:60:40:a0:9d:a0:e4:5b:23:32:
d3:05:ef:af:59:a1:f4:90:d0:ff:47:c8:86:aa:a0:47:f4:48:
77:b9:71:bd:b9:0a:bb:a1:be:67:96:5d:fa:ba:79:05:32:95:
33:ca:bf:4e:9f:f7:4c:f6:68:b3:bb:fb:a0:27:d2:9f:7f:1c:
3c:d5:bd:1b:87:60:7e:26:54:6e:80:72:f6:3c:3d:ca:53:5b:
e6:88:12:cd:b8:13:3e:7c:29:d9:9f:19:fc:e9:f0:0b:55:bf:
39:56:6a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyrsGnhzNbIrQXIhmFtZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOTJjOGM3NzliNmVkNmVkZTcyYThjZjExNDkwZWY2ZDdh
OWU5MjEwHhcNMjYwODE0MTUwMTIxWhcNMjYwODE1MTUwMTIxWjAzMTEwLwYDVQQD
EyhiZGI1NDY2OTJlZDBiNGYwYmFlNzk1ZjgyYzc4MWE4NGQzZTQ0MDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sQtgsMtTJjDR8DkQA5Sa8qUlZQ+
CGijPAzgjc2R8LuCne/ihD8YxyLqMY0sYBE150qC9Zr5iAIdwhhYj5GM+I69YuE5
oScr980SG67uQ+8WMeCCju5ygjzjOjmtDiP/Em61NvOkCXvp+8eapjLZ38rLHEC6
4r3ObmBfWp+qWODrn58XitYIHGywhbrw1BzZHOk0cxFoRSCVOvwAIrxt+XBUJb+/
TP+UJsuSVVdtBWg5zjNYEV4Ps1pnvc25jhKLHBNTnqz2NuZOq4IWez8+lxz43/FD
QW+zM6K4HQfcuCOHNmqoNzIu92E8MdOL5OBOjPPlJZoGQXgD5N+Q83PT7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL21Rmku0LTwuueV+Cx4GoTT5EBhMB8GA1UdIwQY
MBaAFOKSyMd5tu1u3nKozxFJDvbXqekhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMt
NWViYjYzNzgwMDllLzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMtNWViYjYzNzgwMDll
LzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApiK43R+Y
2EfPpfHxhPNoHQo26I0bsYpQPxuaI52IsHWxCbKyBvqVVQ+1JEu/YpG71rDFxpMT
ImIffNoPUv0YOOvZmiJzUnO7eSCuYK4KoQGcIZ805jSgeKoKg8K2uUvreUBoneCj
mBQ65ARPGWkLfXB8Zrm3h6JehbTdV1oYfQzU3oluyWgi4zsTuHgyRAQhGwfrT5Xn
HhIzYECgnaDkWyMy0wXvr1mh9JDQ/0fIhqqgR/RId7lxvbkKu6G+Z5Zd+rp5BTKV
M8q/Tp/3TPZos7v7oCfSn38cPNW9G4dgfiZUboBy9jw9ylNb5ogSzbgTPnwp2Z8Z
/OnwC1W/OVZqEA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:12 2026 by rpki-client