Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: g7Q8OfHAWZxXrHA6nmoYKQatzPl/QiMYbwzhqqn0Qc0=
Subject key identifier: 33:F0:A1:62:E0:37:09:35:9A:BD:72:C7:B9:46:57:F7:5B:7C:3C:8D
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 019CAD90A34FBC96E4D11E46CF5778AC44E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 1663
Signing time: Mon 02 Mar 2026 08:01:02 +0000
Manifest this update: Mon 02 Mar 2026 08:01:02 +0000
Manifest next update: Tue 03 Mar 2026 08:01:02 +0000
Files and hashes: 1: 348GlYel7WKf7j6VpPBbdI2F0AY.roa (hash: 8CB29xF2GvA/FLxPFcEF5rA4l97+T5SM5ICvhUC1S3w=)
2: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: MoDpBaxFsBYbXRIoG6VNBPZsNw044kBHxPca9sRkP+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:a3:4f:bc:96:e4:d1:1e:46:cf:57:78:ac:44:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Mar 2 08:01:02 2026 GMT
Not After : Mar 3 08:01:02 2026 GMT
Subject: CN=33f0a162e03709359abd72c7b94657f75b7c3c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:a8:bc:fb:5a:69:51:cf:b0:df:d7:5d:8f:
a7:52:74:bd:41:1e:af:ec:fc:92:c9:36:7b:ac:21:
ce:1b:c5:27:7f:d0:22:29:25:6d:69:97:53:ef:59:
4b:6b:d5:7d:b3:98:7b:05:ee:da:3d:78:08:bd:d9:
b3:e0:37:c3:40:dc:0c:16:98:3a:12:97:32:44:fb:
a6:fd:1a:25:d6:61:fc:03:38:48:e3:d3:a0:2a:1e:
4a:44:72:de:f8:97:c1:23:f1:b6:36:3f:49:93:7e:
60:18:b8:d3:ed:0b:ae:43:e3:68:8c:67:af:4d:37:
08:a2:9e:be:58:4d:c5:98:80:e7:fb:76:0f:41:a8:
33:cc:60:de:9d:d4:ff:83:78:77:90:11:b3:ce:66:
bb:39:17:00:81:06:a3:ed:2f:bb:ea:60:98:87:2f:
94:f7:fb:64:d1:6c:86:c7:d7:84:36:e3:19:61:09:
b2:f8:e9:a2:86:7d:b2:42:99:25:38:f4:68:1f:a5:
ed:80:c7:8e:f4:99:89:15:7f:e3:6d:68:64:f7:08:
f4:ef:19:b4:17:cb:c7:ba:8b:90:8c:ac:e0:06:ef:
ba:40:97:d4:44:41:b2:6e:31:97:aa:59:40:5a:e9:
36:82:28:3a:64:5b:11:ca:eb:e7:a8:fe:b4:59:65:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F0:A1:62:E0:37:09:35:9A:BD:72:C7:B9:46:57:F7:5B:7C:3C:8D
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1f:c9:79:1f:8b:56:0e:0d:5b:1c:84:1f:86:e4:76:1d:8d:
64:dc:9a:4d:f3:0f:51:d5:59:74:08:d4:6e:bb:5b:a7:05:c4:
d4:97:69:94:19:92:94:aa:16:35:71:ff:8f:25:2d:cc:be:94:
9f:54:61:3e:71:61:23:17:78:0e:f4:9e:d7:97:70:cd:8d:4f:
7f:1e:5c:b8:f6:31:a4:91:cb:91:8c:4b:bb:6d:ae:4f:5a:57:
8a:83:aa:0c:70:e2:a8:97:77:67:bf:62:1e:65:3b:31:ea:4c:
ed:72:db:6d:61:75:d6:1e:66:39:92:f3:4b:32:c7:07:f5:01:
43:20:c1:89:61:46:26:6b:b8:c4:f5:22:6d:62:92:24:1c:8a:
df:02:5f:36:9c:7a:2b:18:67:3b:17:9b:36:81:e0:4c:89:bb:
3b:a4:8a:89:44:3f:25:3e:5d:0f:00:7e:09:24:7f:8b:12:ea:
b0:1b:45:97:9a:51:71:7b:5a:7a:55:60:34:56:2a:01:30:53:
e9:87:fb:fc:c8:55:a8:0e:07:a8:17:a0:3e:13:a9:67:f2:7c:
03:0c:77:d9:19:f7:7d:ce:97:3a:b6:b1:8a:6b:03:08:cd:c2:
35:d9:62:52:c4:71:bd:ae:49:c9:ee:f4:f4:69:74:f9:5d:0b:
87:49:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:34:09 2026 by rpki-client