Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: buBXevnhzC11vkk+T+qO0ODoCdmqXi9e/gcMusDrDr4=
Subject key identifier: 38:86:83:40:E6:E1:04:5A:20:58:65:2A:7A:EB:EC:EC:19:41:B1:27
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 019FA8D0929D375E25DC54208C50B7D3AB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 1496
Signing time: Tue 28 Jul 2026 13:01:09 +0000
Manifest this update: Tue 28 Jul 2026 13:01:09 +0000
Manifest next update: Wed 29 Jul 2026 13:01:09 +0000
Files and hashes: 1: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: vSRT3XboUknrrYJJ6UMim0Ev9XVkimGp7te7y0jZWIM=)
2: Dzm93e6ypltfPR0ZoD-ImPIRYCE.roa (hash: W4o6cddb54HLP4AcX6qxzKIWMKDAcAqZyEJok2ZHE/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:92:9d:37:5e:25:dc:54:20:8c:50:b7:d3:ab:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Jul 28 13:01:09 2026 GMT
Not After : Jul 29 13:01:09 2026 GMT
Subject: CN=38868340e6e1045a2058652a7aebecec1941b127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:ce:21:6a:f9:39:84:53:29:b5:c2:74:6c:
e9:67:30:eb:3f:c8:64:db:bb:89:f5:b6:ab:5b:0b:
ba:32:fe:b2:8c:6c:ab:81:2a:40:23:50:b3:dc:05:
5d:72:29:1c:c9:5b:d4:da:30:70:4f:87:64:ac:c9:
eb:c1:87:43:a3:90:e8:a5:ce:10:a7:28:06:d7:93:
50:a7:5c:a4:66:b8:44:b8:1f:5b:a2:50:54:4c:cb:
13:f5:42:0e:3a:d2:5c:6f:fc:79:68:48:9c:04:df:
1d:33:fa:5c:d4:02:40:08:08:3f:61:ec:17:8f:41:
47:f1:67:07:f6:bb:15:4b:6e:46:ed:74:43:a5:d5:
03:06:08:3d:12:a8:6b:fb:f3:5f:c0:4e:4e:3a:54:
dc:e0:c4:d6:ec:77:f7:d3:69:7c:4a:3a:00:13:9c:
13:a0:b4:1f:3a:4a:ef:79:30:e0:8a:3c:8b:46:8d:
15:55:f4:d2:da:44:c9:7d:e2:a8:b8:90:4f:0b:40:
28:2d:84:47:5c:4d:d4:de:4b:4e:97:a7:86:e9:06:
eb:18:80:ba:5e:69:43:ce:f1:33:61:26:8a:82:0a:
f8:d9:2c:8d:7c:e2:ea:b3:ab:e1:7a:85:73:96:f3:
d9:5d:70:98:d4:ee:a9:4f:65:17:87:c7:8d:85:45:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:86:83:40:E6:E1:04:5A:20:58:65:2A:7A:EB:EC:EC:19:41:B1:27
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cb:6c:e3:74:08:f0:20:a5:d0:dd:a4:4c:c8:43:a1:5b:70:
5d:ab:a2:3f:02:8c:e0:0a:a0:f3:79:ba:f5:99:c0:28:f3:bf:
c8:f3:f8:e6:d7:f7:1f:56:96:2a:95:13:e9:b5:78:c9:68:be:
19:b9:bf:38:76:11:e4:7a:c0:19:35:e5:82:3e:fb:7b:af:2a:
d7:77:31:b9:51:42:61:f9:b0:31:94:e5:6f:ba:7e:18:13:00:
f3:4a:e7:19:5c:2f:b5:d4:bc:ea:c2:06:ac:e9:c9:35:a4:8f:
e0:7a:d4:e1:1b:aa:73:bf:85:9b:e9:ef:12:d6:78:15:3b:8b:
96:8b:2b:c7:9f:ef:08:c0:1f:4b:a2:02:39:59:a8:25:27:f5:
74:91:d7:0a:16:24:3e:4d:8e:44:f0:90:25:92:ab:a7:1a:7c:
82:f7:77:b0:c1:a7:a8:8a:6d:6a:dc:d8:b1:9c:96:5c:2a:56:
35:16:89:da:4c:d2:c4:53:60:3b:6c:13:7a:22:7c:5d:21:bb:
ca:15:9b:c4:52:c5:e5:96:49:39:09:67:ea:10:aa:f8:21:94:
f1:31:85:52:e8:c2:87:c9:33:c6:33:ce:93:2e:e4:d7:42:86:
fe:d7:52:da:7e:92:d2:3e:48:85:41:a2:22:80:5b:74:87:26:
26:94:6d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:14 2026 by rpki-client