Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: 25n8ZYtQKwM52NBtsKQMlr7chVMdiBrlf27LHOp+Z0Q=
Subject key identifier: 44:4C:AF:EA:AA:F0:B5:ED:B6:0E:79:26:53:3C:CA:71:BA:18:7A:BF
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 019D9B19A2A60A29C633C570EF0640DB79C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 16DE
Signing time: Fri 17 Apr 2026 11:00:41 +0000
Manifest this update: Fri 17 Apr 2026 11:00:41 +0000
Manifest next update: Sat 18 Apr 2026 11:00:41 +0000
Files and hashes: 1: 348GlYel7WKf7j6VpPBbdI2F0AY.roa (hash: 8CB29xF2GvA/FLxPFcEF5rA4l97+T5SM5ICvhUC1S3w=)
2: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: z907LbAhiveQdimsohR8eERT+JLmrXLMEseuhbtfCa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:a2:a6:0a:29:c6:33:c5:70:ef:06:40:db:79:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Apr 17 11:00:41 2026 GMT
Not After : Apr 18 11:00:41 2026 GMT
Subject: CN=444cafeaaaf0b5edb60e7926533cca71ba187abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:eb:67:8f:d6:e2:31:c9:1f:b0:f9:96:47:
c9:9a:a7:8c:82:9f:77:d1:ec:ee:b3:00:45:b4:8b:
b8:1e:e5:23:65:98:c9:2a:e9:1a:12:a7:5a:ec:a4:
d4:f2:7d:38:22:52:3d:d1:6f:87:ca:a6:e0:fe:18:
0a:9c:88:1d:76:42:0b:a1:24:b6:47:6f:ac:5f:f9:
95:b9:3e:52:c5:0a:2f:8e:23:05:61:31:52:d3:ad:
af:0b:e7:a7:6f:b8:81:4c:0a:75:18:cf:63:63:32:
56:b3:21:c1:03:29:85:6f:67:68:41:40:45:b8:05:
f5:1b:5b:f2:c4:2b:64:84:fc:08:f3:4b:2c:2f:33:
9f:0c:7d:a0:00:9d:9c:4e:b6:b7:36:22:de:1d:5e:
2d:d4:0f:63:89:19:97:16:39:0f:22:01:2f:00:e3:
d7:a9:d5:ec:cc:01:ce:26:59:ad:8c:d1:21:ac:f7:
11:49:a0:51:ae:3d:22:93:74:6c:5c:3b:80:7d:16:
36:36:46:f3:e6:44:d5:d7:fd:18:7d:f1:30:ec:4d:
cc:6d:8e:89:b8:9a:55:e1:5b:13:39:23:e8:75:f7:
da:16:3d:44:41:6c:f6:3a:0d:e8:b0:63:64:15:d4:
a8:a2:36:f4:24:ed:84:34:8e:f3:79:b0:fb:cf:a7:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4C:AF:EA:AA:F0:B5:ED:B6:0E:79:26:53:3C:CA:71:BA:18:7A:BF
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:34:a8:e2:41:6a:30:5b:06:3c:0e:09:db:58:a2:1e:aa:41:
62:b2:6c:23:51:7f:9b:ae:ee:ea:65:bd:75:3b:70:a4:d6:a9:
38:fe:bf:2b:21:6a:e4:39:b4:2c:98:1a:44:24:c1:7e:1f:fd:
f4:c2:96:fb:f7:e9:5a:04:b0:1f:8b:0b:93:81:7b:8a:6c:68:
09:ea:31:a6:bb:ca:47:d7:58:7e:b7:02:2b:65:5d:36:e8:bb:
49:96:a0:6b:f5:83:8e:1a:39:e1:9f:dd:53:9a:4e:04:8f:d5:
03:99:b6:8c:34:f8:e7:86:25:42:16:20:b7:78:56:6c:5a:51:
8a:76:85:67:56:ee:7f:35:33:cd:ce:e1:04:08:bc:8e:25:5c:
c4:25:d2:a0:3d:28:94:9e:f6:de:4c:e4:9b:ee:2d:23:a1:ae:
5c:4f:72:86:9f:93:80:db:ed:81:51:d3:a6:57:50:50:af:dd:
b5:b1:e0:2f:f7:6d:2e:45:f1:b1:4f:8c:ec:aa:bc:b9:69:89:
9a:30:b3:10:83:ee:27:fe:1f:13:d0:d2:be:e3:97:60:28:e7:
f2:49:41:0f:37:53:23:8f:2d:46:3a:d6:22:ad:b8:99:62:5e:
ec:93:7c:75:7f:66:28:37:ef:38:34:bc:ce:c9:93:69:ab:67:
15:84:19:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:09 2026 by rpki-client