Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: 6XyEGikH+NiK6Iar/iCJOIe4G4e7m+wmuba2vSSRxhs=
Subject key identifier: 71:E3:AC:65:EC:B8:5C:34:BE:1F:31:71:26:F1:38:93:E8:A8:28:76
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 019CA9B3906770B4F706A57599493A56C261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 07E3
Signing time: Sun 01 Mar 2026 14:00:43 +0000
Manifest this update: Sun 01 Mar 2026 14:00:43 +0000
Manifest next update: Mon 02 Mar 2026 14:00:43 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: PQFklFvKvFiwAYvu6R82ZV/OfpvPRODbQ8Bjbiu5374=)
2: daqjoUQutGPSPWpp1MBlnqMi5s0.roa (hash: dLUynKpTq26uEi3G0kNMPoVLBPgdqfEJFefVyZLupvY=)
3: uBIxs7ssxXDGyk8SQNxkeydPi80.roa (hash: EJE4RSVi+Vk5YmcZI9DMOpSqKh06AU4ky+hWC3DDJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:90:67:70:b4:f7:06:a5:75:99:49:3a:56:c2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Mar 1 14:00:43 2026 GMT
Not After : Mar 2 14:00:43 2026 GMT
Subject: CN=71e3ac65ecb85c34be1f317126f13893e8a82876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:3f:70:8a:c4:33:50:1b:8f:88:6a:e3:e6:
51:46:b1:d6:52:ba:8d:13:34:0d:f2:8b:62:61:28:
c8:7e:3a:c1:18:3d:14:a0:bb:06:13:73:fe:57:c0:
43:94:77:d4:80:63:9f:ba:1e:f9:81:46:5a:1f:3d:
81:d9:ff:22:b6:b2:df:95:d4:db:f4:c8:a4:1a:e1:
08:6f:7c:6b:fb:9d:ff:80:8b:4e:ae:80:03:55:8c:
c3:d9:9a:ed:71:36:67:25:55:a0:35:1c:39:8e:7f:
ab:02:a4:88:1d:02:a5:37:29:7d:fd:69:da:12:88:
1b:8e:62:81:e8:f8:ef:1b:3b:b7:43:47:58:ea:3e:
f2:55:b6:83:ee:26:8e:94:bc:16:18:d7:3d:64:95:
95:99:a0:48:5b:14:93:9a:c4:06:bb:44:7e:10:91:
ff:42:7a:e2:76:23:79:61:2c:20:7d:ec:d0:af:a1:
c7:17:fe:66:c2:95:28:1e:a8:c6:9a:c5:11:f9:06:
0b:84:bd:3b:02:a0:91:96:c8:1d:09:4d:99:3a:d7:
c5:c4:87:8c:c9:23:e3:f7:f3:3d:47:1c:e4:07:91:
ab:c0:cc:6a:74:09:e9:a9:f3:f7:30:cf:91:f6:5a:
ab:15:72:33:d8:83:a7:1e:67:eb:03:18:b4:66:cf:
8e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E3:AC:65:EC:B8:5C:34:BE:1F:31:71:26:F1:38:93:E8:A8:28:76
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a9:99:18:dd:1b:66:9e:bc:e8:80:83:58:b4:23:63:c3:f4:
32:ea:f9:6d:01:91:30:9b:36:06:d4:10:22:97:f0:c1:83:2d:
b2:5f:51:e3:ec:ca:45:0d:c5:dd:76:6c:ea:c5:c1:27:e4:e1:
1d:5f:93:13:9e:a9:09:6c:3e:f3:91:2e:ec:b6:ee:42:b6:1f:
06:42:60:e1:a4:60:03:e1:6f:ae:f0:46:99:c1:16:64:9d:c3:
1f:16:bf:11:79:70:e5:12:85:b8:5f:1a:19:8c:bd:dd:8d:85:
aa:69:ea:45:ef:8f:a5:a8:41:ab:80:2f:dd:98:1a:91:f1:9b:
6f:d5:bc:31:b9:a1:aa:24:06:28:f3:b7:e2:14:45:1d:6d:eb:
20:89:93:51:86:b3:88:2d:3b:58:90:f0:65:12:e1:91:a6:22:
d9:27:f0:ab:61:e1:ac:4a:9f:b6:d0:59:da:4d:ed:c9:5f:c8:
8b:d0:aa:04:b5:c2:0e:ec:20:3b:03:43:86:3c:0a:1b:d7:82:
d5:70:34:de:ee:c8:ab:08:ea:91:e7:56:02:28:dc:d0:06:17:
bf:69:92:97:4f:d1:d6:6f:37:78:63:be:e9:a0:0a:5f:ca:54:
11:c6:f1:86:be:d6:d4:e6:a4:eb:f3:90:51:0f:66:38:b9:fd:
ec:b9:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:19 2026 by rpki-client