Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: xFnmxdI2ZjzbGuYsRuIU7K6zRE5IZOHy4eh5eK7kN7U=
Subject key identifier: 8B:B8:16:06:4F:6E:2E:E0:43:43:98:B7:42:43:F8:D1:80:EE:BD:FC
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 019CAC0FDC20B6EFD966CF5E7B48C1C77682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 130A
Signing time: Mon 02 Mar 2026 01:00:46 +0000
Manifest this update: Mon 02 Mar 2026 01:00:46 +0000
Manifest next update: Tue 03 Mar 2026 01:00:46 +0000
Files and hashes: 1: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: TtA+V77CSVfaW3oq98aXO5i6+ztJ3n0fKfRa/jaja98=)
2: Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa (hash: W4o6cddb54HLP4AcX6qxzKIWMKDAcAqZyEJok2ZHE/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:dc:20:b6:ef:d9:66:cf:5e:7b:48:c1:c7:76:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Mar 2 01:00:46 2026 GMT
Not After : Mar 3 01:00:46 2026 GMT
Subject: CN=8bb816064f6e2ee0434398b74243f8d180eebdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:38:6a:a0:6d:4b:93:8b:1d:6c:81:1f:6f:
b3:13:f3:df:37:07:82:73:67:ca:9c:d1:fe:cf:1c:
aa:53:38:e6:65:1f:95:2d:15:a6:ed:c3:27:88:c5:
61:23:1a:84:55:23:c3:fa:29:1e:52:68:f2:73:6e:
c2:dc:e3:0d:31:1e:14:8a:46:75:20:0f:d3:71:20:
e3:03:4b:7f:60:f6:93:e1:0c:1a:8d:33:ad:ed:69:
d6:7c:a1:27:93:0d:f8:ae:91:1a:42:c6:f3:14:a4:
f6:84:ed:e8:fa:bf:50:e1:d8:23:9d:70:6b:04:da:
ef:08:c5:98:79:1c:1e:16:7d:5d:52:7b:8f:c9:b9:
da:6d:94:55:1d:47:d1:ec:db:e7:df:bd:23:bc:40:
aa:c7:22:4e:a6:95:b7:e9:0e:b3:b9:49:86:a3:46:
fb:d5:c9:df:7c:6e:ef:a0:32:4d:73:7c:a3:f7:e9:
43:b8:88:05:53:a3:9f:17:ac:b3:58:72:69:b2:df:
b4:4a:39:1b:84:19:1c:bd:bb:bb:e5:94:49:7f:fa:
7a:27:f4:d6:16:d3:db:9d:ea:ea:e4:83:31:64:1d:
32:89:1f:1e:ba:0d:b6:cf:f4:71:f3:aa:99:2c:4a:
87:e5:26:cf:10:a2:e0:bd:28:d4:87:9e:55:88:fd:
21:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B8:16:06:4F:6E:2E:E0:43:43:98:B7:42:43:F8:D1:80:EE:BD:FC
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:77:11:f9:83:45:68:3c:63:f4:d1:f9:a5:44:65:80:72:d8:
77:89:c0:ed:6e:41:6d:0f:ad:e3:34:d5:b3:a2:b2:cc:21:9e:
06:4e:ce:62:11:b6:94:70:37:89:b9:4c:35:c5:eb:f1:71:1c:
27:1d:68:bf:a8:04:b5:eb:40:f8:23:ce:5e:8d:a9:81:aa:c2:
1d:65:7c:79:8a:3a:06:77:20:a6:06:08:ad:7d:ee:e4:cd:dc:
3e:e3:7a:1c:09:04:66:69:e4:be:de:be:37:f6:02:eb:9a:57:
fb:e0:48:96:40:e5:c9:1a:ad:08:96:7c:33:41:4e:a3:2c:c9:
bd:df:03:aa:ac:41:a8:28:bc:13:c4:19:3b:52:ea:bc:c7:34:
fa:b9:66:12:24:6d:ad:aa:6b:a4:48:9e:7e:fd:a9:c5:ed:39:
39:ab:49:70:25:05:33:c3:35:93:75:7a:d3:4c:3c:46:14:12:
e0:39:c3:e2:1a:d3:30:9c:b4:ac:20:71:99:66:3d:c1:0d:27:
bc:9d:41:61:7b:26:5d:13:b9:13:fe:8b:c3:2b:d8:42:42:32:
3a:f5:ea:6e:c2:ee:9a:c7:99:ed:00:ba:4a:d9:51:51:e9:04:
e2:36:5a:2c:6f:ef:a6:3f:cb:83:2c:ac:c7:20:a8:c6:0b:eb:
57:3c:3c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:07 2026 by rpki-client