Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: nrb9Wa+rB98JuluDPABN6HyGGhX0LMzLAHUqvK19/Dc=
Subject key identifier: D0:81:77:1F:B5:12:1A:FF:84:21:6C:47:3B:98:26:38:A6:5F:AC:7C
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 019D992B5D6939CF79AF21006170110C7EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 085F
Signing time: Fri 17 Apr 2026 02:00:49 +0000
Manifest this update: Fri 17 Apr 2026 02:00:49 +0000
Manifest next update: Sat 18 Apr 2026 02:00:49 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: aEZGBecCloBGjGdNVJHHrXJVoBb+96ffPKtAfRAVO/c=)
2: daqjoUQutGPSPWpp1MBlnqMi5s0.roa (hash: dLUynKpTq26uEi3G0kNMPoVLBPgdqfEJFefVyZLupvY=)
3: uBIxs7ssxXDGyk8SQNxkeydPi80.roa (hash: EJE4RSVi+Vk5YmcZI9DMOpSqKh06AU4ky+hWC3DDJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:5d:69:39:cf:79:af:21:00:61:70:11:0c:7e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Apr 17 02:00:49 2026 GMT
Not After : Apr 18 02:00:49 2026 GMT
Subject: CN=d081771fb5121aff84216c473b982638a65fac7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:9c:ac:f8:00:59:ab:6f:56:e1:fc:9e:ed:
c1:ff:e9:88:f6:5d:48:6b:f5:35:34:70:c7:9d:87:
49:d7:9a:40:50:74:21:2c:2f:cf:f1:f3:a9:6f:0a:
a9:b1:bc:fc:b5:fe:54:28:e0:3f:f5:b7:dd:ec:b6:
e6:3f:a8:c9:29:a1:ed:cb:c3:b6:2c:09:5e:c6:1d:
76:89:52:3b:5c:59:0e:5d:12:d8:36:0c:f8:b6:d9:
26:5e:be:a5:a1:26:66:af:94:13:4b:d3:30:ec:a2:
36:bb:da:a4:82:36:8d:77:ad:29:ee:e7:ef:f1:3f:
01:56:25:85:0f:e9:9e:72:5a:41:ab:4b:b8:80:c1:
57:03:7f:a0:4d:00:06:3a:c3:81:37:e5:ff:89:7c:
d9:1b:9a:41:b8:3e:98:6f:be:9a:0b:e1:66:20:f3:
2c:71:c2:70:88:23:f1:e3:99:82:a4:1c:57:64:e2:
4e:08:cd:53:ce:ec:c6:64:16:db:7a:df:b4:fc:90:
e2:d5:39:7f:6d:9a:dd:a2:b7:39:84:07:95:59:85:
f5:16:9c:a4:8e:05:a4:93:73:79:2f:55:2a:29:69:
ca:b2:6c:db:d7:c4:16:a4:f4:82:fb:53:c1:d4:6e:
51:0c:58:9d:f3:33:6a:63:03:3d:94:bb:94:0b:98:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:81:77:1F:B5:12:1A:FF:84:21:6C:47:3B:98:26:38:A6:5F:AC:7C
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f4:59:07:c9:4a:63:b7:0c:9b:4f:b6:97:11:5d:a6:b3:bf:
ab:19:eb:12:38:ca:a9:5e:4a:d0:98:69:af:0a:4f:a7:45:4a:
6f:f6:95:c8:24:88:41:21:18:31:4c:5a:c0:aa:8a:1d:aa:4d:
58:a7:2b:45:98:57:18:ca:34:e5:1f:56:75:6d:7c:93:e1:8b:
5d:ba:8d:56:b1:80:3c:ce:c6:88:26:d0:80:11:6f:9d:53:3e:
a6:20:51:c6:cb:9e:0e:f7:fe:4b:1c:0c:77:48:dd:b4:e5:4e:
37:a0:c0:e8:ee:9e:2e:3d:94:2e:11:d1:27:ba:88:8e:cc:5b:
01:af:a5:c1:c2:b9:5f:ed:16:ee:96:b5:f6:b8:9c:7d:a2:96:
da:73:2f:cf:82:b9:b6:c8:8d:a1:1b:bf:9a:95:36:53:ae:0b:
d6:10:03:a8:9e:f5:57:c8:67:af:94:e3:9f:e4:a6:eb:e5:c8:
ba:ca:fe:ce:22:84:d7:ed:9d:f0:ae:ce:db:e5:d8:a5:59:b6:
d6:39:73:53:c4:f9:e6:4e:7d:cf:38:04:7a:b8:9a:0e:30:44:
77:9e:a9:83:9e:c4:92:fc:1f:ff:d3:ce:ef:8c:41:67:b3:23:
11:0a:92:3b:c7:aa:fa:fe:ff:bb:97:fd:64:1f:b0:74:72:74:
b1:64:f7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:29 2026 by rpki-client