Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: Mq4lVbqESQQaSedLyg4HKO65GlBgtIUYsGgs041KRsk=
Subject key identifier: 34:64:4A:FB:31:65:B8:F2:0F:4E:59:74:B5:C5:45:59:9C:C7:32:3A
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 01A1E096512CDE6EFFCFA396D8410C674A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 15BC
Signing time: Sun 15 Nov 2026 19:01:49 +0000
Manifest this update: Sun 15 Nov 2026 19:01:49 +0000
Manifest next update: Mon 16 Nov 2026 19:01:49 +0000
Files and hashes: 1: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: VBtasBsALqgn7N8MxHlVrV0EI5FC4Fs7Iz7BqIM8vf8=)
2: Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa (hash: W4o6cddb54HLP4AcX6qxzKIWMKDAcAqZyEJok2ZHE/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:96:51:2c:de:6e:ff:cf:a3:96:d8:41:0c:67:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Nov 15 19:01:49 2026 GMT
Not After : Nov 16 19:01:49 2026 GMT
Subject: CN=34644afb3165b8f20f4e5974b5c545599cc7323a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:b9:78:af:15:fc:9b:75:0a:14:a0:89:2e:
a1:94:99:87:e0:09:cf:81:87:9a:75:42:7a:76:d2:
ec:65:69:ec:6c:c7:cf:91:ae:f3:e0:7f:48:e3:3a:
b4:87:13:32:c3:29:39:6f:97:c3:65:8a:8e:b3:71:
7c:f0:02:3c:e0:d4:5c:be:80:0a:5e:cf:2a:fd:bb:
53:15:6d:e0:6f:7f:f5:a5:6a:c5:26:a2:6f:70:f2:
ce:6e:91:b5:57:73:b0:bd:ce:1e:74:7f:87:0e:65:
ac:1f:b1:dc:a1:26:84:f6:92:85:9c:8e:92:cd:b1:
4e:db:71:01:22:11:6c:25:fe:9d:34:95:9f:2b:7b:
87:1a:e5:a7:c2:2c:d6:e6:74:94:12:8e:80:12:2b:
63:fc:9d:ec:9b:d4:ec:26:ac:46:00:b9:47:db:65:
e3:46:80:c0:ec:ca:35:a9:eb:f2:a3:bf:82:40:0f:
9a:35:3f:eb:f7:0f:89:72:89:4a:ca:40:35:77:9e:
f8:d2:11:bf:fd:f7:0f:fa:b5:2e:77:7f:c3:c4:3e:
0f:65:95:75:5c:bc:bb:18:be:df:b0:ea:4f:80:3c:
84:82:e9:9e:60:c3:1a:9c:0b:3e:c8:68:a6:ae:c4:
37:ba:5a:c4:18:ce:9d:2d:a4:7c:2f:c1:36:2e:d6:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:64:4A:FB:31:65:B8:F2:0F:4E:59:74:B5:C5:45:59:9C:C7:32:3A
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0b:9d:d4:b8:b4:52:34:b1:01:44:38:6a:0c:04:44:56:52:
b1:42:4f:9c:ee:52:5e:a4:13:86:32:69:3e:03:6b:ed:22:bd:
e6:8d:e7:cc:3a:e2:65:25:f5:f6:e6:ab:54:51:ef:5f:f8:ca:
b3:28:bb:60:39:08:c2:67:df:fb:73:70:03:ac:cb:db:ea:df:
62:aa:30:e0:9d:61:b2:a8:50:8b:a1:21:e5:b1:1b:07:21:3f:
ac:1b:db:dd:0a:34:b1:a6:da:bb:10:97:b3:c2:17:4f:f4:49:
d4:51:5b:37:3a:82:e1:2c:dc:ce:6b:7e:bb:a7:e9:57:50:b2:
b2:1a:2c:86:d0:e9:78:28:74:9b:7b:20:c0:96:09:ea:b0:7a:
c4:ac:d5:1c:7c:11:6c:7e:f9:75:68:11:7c:cb:af:5d:fe:a6:
57:40:5e:6f:87:66:93:7a:4f:9c:92:29:99:56:bb:6d:fb:96:
01:2e:58:b7:ef:fd:27:40:d0:28:96:6f:ea:80:c8:f9:6a:28:
f2:56:76:10:20:5a:a7:45:5b:2a:5c:52:1e:3c:4a:94:3a:2d:
cb:01:4f:20:67:4b:fb:9f:23:e2:d5:23:ad:df:83:3c:b1:6a:
1c:2c:f5:a5:aa:fe:1b:df:23:23:f8:b0:a7:50:86:80:df:9b:
d4:2d:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:04:20 2026 by rpki-client