Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: 4HgHnwYCGB8iQ5y5Tqoy8cLxBF+EH9yUxtocHwuOl68=
Subject key identifier: F5:44:B7:E6:40:46:6E:5A:5A:70:8B:A3:C2:87:83:85:C9:8A:81:F6
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 01A0C4B2492514FF9EF87E9A4FFA9D2B1F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 1529
Signing time: Mon 21 Sep 2026 16:00:13 +0000
Manifest this update: Mon 21 Sep 2026 16:00:13 +0000
Manifest next update: Tue 22 Sep 2026 16:00:13 +0000
Files and hashes: 1: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: Z+ebBSeSs5D8gz1LDbLYqftZXkdXnc1SdfuJXMs0CtM=)
2: Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa (hash: W4o6cddb54HLP4AcX6qxzKIWMKDAcAqZyEJok2ZHE/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:49:25:14:ff:9e:f8:7e:9a:4f:fa:9d:2b:1f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Sep 21 16:00:13 2026 GMT
Not After : Sep 22 16:00:13 2026 GMT
Subject: CN=f544b7e640466e5a5a708ba3c2878385c98a81f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:03:a9:cb:c8:77:da:38:36:45:f8:92:ec:
96:56:1c:e3:ad:75:4e:60:39:4d:f4:c6:75:e1:08:
c4:5b:02:0a:a5:c1:26:39:ce:0b:ff:be:da:c1:49:
ad:ba:8e:a2:e9:bf:9a:e1:7c:c9:45:39:3c:3f:f7:
9f:09:49:15:36:21:b4:f9:7c:f2:74:2c:ab:c2:eb:
8f:a9:ba:e7:1e:0e:02:f5:64:83:d9:ca:97:9d:23:
10:b7:b0:30:78:d4:db:a7:4a:90:fd:33:a8:0b:ba:
7c:f1:de:c1:ea:46:aa:34:0b:d1:c9:6c:a2:3b:4b:
f0:37:83:8a:fd:ae:93:87:65:e7:f7:54:51:49:ee:
7e:54:ba:b3:ed:2b:ef:eb:81:51:8e:5a:3b:77:ad:
98:fe:54:0e:45:92:a3:cf:67:b1:a0:f1:d3:a8:0b:
65:8c:ee:45:d2:b1:c2:c9:86:0f:01:8c:9b:ac:05:
a3:ba:76:94:3f:f6:fa:f0:58:3e:e4:f9:83:32:10:
a7:a2:a1:56:c9:3d:73:69:27:f0:1e:e0:f7:3b:14:
ae:1f:82:b3:57:1c:da:b6:06:ab:bd:61:c6:30:ab:
b2:fe:35:c6:63:b7:7f:87:ee:8b:5e:a6:da:13:59:
3e:0d:8e:52:d9:bd:d3:f8:d8:dc:7d:33:47:30:05:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:B7:E6:40:46:6E:5A:5A:70:8B:A3:C2:87:83:85:C9:8A:81:F6
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5b:3c:2f:57:1d:78:4d:33:f7:92:f2:0e:de:24:5c:bc:72:
d1:c9:62:dc:1f:9b:39:72:4d:54:33:2c:82:08:59:f7:43:51:
7c:f7:66:be:ce:0a:f2:b1:55:b7:b6:79:95:76:1b:f1:d8:7e:
e2:03:9e:ab:6f:43:36:9d:b2:5b:b7:3e:01:88:56:d1:b1:93:
1e:1b:ef:6d:4a:ca:77:8f:65:84:9a:dd:0a:24:dc:ae:18:b2:
5d:8a:5d:93:fb:ab:1f:8b:d8:f2:dc:21:df:37:0a:15:aa:fa:
00:1c:be:f6:a4:3b:4e:f8:8f:54:0f:47:a8:e4:90:ad:2c:f9:
1a:06:23:c3:4b:c1:80:c1:4b:90:db:15:d9:cd:cf:2d:4b:e8:
c6:29:fc:43:cc:10:db:89:48:ad:f4:38:16:3e:77:45:89:80:
ba:ea:f0:96:1b:c5:52:c2:39:92:30:65:92:de:6c:07:c5:9a:
46:a9:01:aa:2a:08:2e:08:72:3f:57:07:e2:3a:04:37:cd:2a:
2d:45:95:fd:c1:0f:8f:6a:da:d6:74:14:8e:8e:6a:d7:3f:f4:
25:62:d5:7e:6c:20:62:b6:7f:9e:38:e4:2c:8e:e2:6b:dd:46:
e8:c9:30:50:0a:e3:6d:e4:19:95:60:2e:66:7f:87:57:d9:73:
0a:5f:a0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:20:25 2026 by rpki-client