
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: R5OjZiWtbVXClqQG3vHzMqMTPrRZ9lJ77AMv5H+V9tY=
Subject key identifier: 5F:26:39:4A:3F:F1:9A:B1:64:82:68:DB:9C:31:4C:49:F7:00:C0:F6
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 019FA9E34A5A526985DA06A794942C7B46A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 0971
Signing time: Tue 28 Jul 2026 18:01:12 +0000
Manifest this update: Tue 28 Jul 2026 18:01:12 +0000
Manifest next update: Wed 29 Jul 2026 18:01:12 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: ZoZFXyJ3QBnIHWgb15GjH1+mV7Re4eAoaFswSjxCwJw=)
2: MIWe6_AUcHSjRgC4Sn1hvPGPAVQ.roa (hash: RHnTGPBWdCvZaUsgPteZ8dK8qDQOfdI5+BZrUWBa1No=)
3: uBIxs7ssxXDGyk8SQNxkeydPi80.roa (hash: EJE4RSVi+Vk5YmcZI9DMOpSqKh06AU4ky+hWC3DDJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:4a:5a:52:69:85:da:06:a7:94:94:2c:7b:46:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Jul 28 18:01:12 2026 GMT
Not After : Jul 29 18:01:12 2026 GMT
Subject: CN=5f26394a3ff19ab1648268db9c314c49f700c0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:8d:be:11:15:9b:2f:f4:ab:9e:50:4e:47:
c7:f2:9c:ee:2f:85:aa:df:92:8e:43:98:c1:6e:65:
ef:8a:ba:9c:a0:11:d8:6b:92:95:a1:f4:75:d8:d3:
e5:cd:66:d7:8d:93:74:fb:67:7d:f1:8d:c3:d3:0b:
9a:b7:c2:b7:d7:0a:19:ec:ec:9f:08:f7:37:a8:d8:
be:56:59:be:cf:2d:9d:01:88:a5:66:f4:95:18:a3:
a4:a7:eb:20:88:4f:fb:c6:b7:31:0d:a4:eb:16:29:
c5:e4:1e:0c:2a:63:61:1b:f5:a5:6e:26:36:cc:be:
f8:99:40:6b:34:cb:a9:60:34:4a:83:11:52:1e:43:
73:6d:84:cb:0c:6a:02:19:c5:0e:10:91:f8:43:0c:
60:6b:e5:89:92:75:b7:ba:54:7b:ba:58:6a:92:0b:
bd:e7:ee:a5:35:30:40:76:da:09:ff:ca:e2:e6:b1:
17:5c:6c:c5:94:3e:f6:88:75:a2:62:d5:de:5c:dc:
73:41:89:8e:96:78:3f:08:ca:87:6d:e1:a5:c6:66:
dc:85:90:82:a6:a8:59:65:ea:1b:89:13:d3:e6:ee:
13:59:e3:5f:79:c6:5e:2a:c2:b3:98:ac:26:4d:53:
e2:df:4f:8a:53:ac:bd:41:02:07:80:90:cb:5d:c2:
fd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:26:39:4A:3F:F1:9A:B1:64:82:68:DB:9C:31:4C:49:F7:00:C0:F6
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:81:22:62:1d:a5:01:31:9e:a8:8c:25:77:98:72:f3:3c:db:
f2:04:b7:c1:1e:ae:21:75:f2:d9:6d:13:c7:56:d4:d4:49:64:
af:a1:ae:63:7e:66:49:ba:67:f7:12:0b:50:75:52:51:16:b0:
94:7f:2a:28:ee:99:a2:47:f7:27:68:54:16:40:84:01:65:b8:
2a:ac:15:90:6c:cc:78:95:77:00:13:38:e2:e5:bd:20:d2:44:
4f:5a:a9:4c:86:bf:0f:08:17:a5:6d:43:50:cf:51:b5:bd:f2:
e0:91:ae:27:47:9d:a3:e3:70:56:34:2a:16:c5:5d:50:f5:e2:
7d:2b:2f:73:f9:90:e5:ae:80:22:28:0e:8a:cc:ec:c7:30:b0:
be:b5:f1:fa:cc:f0:84:1f:99:04:a6:2a:69:00:60:ea:90:d9:
b9:f2:ad:e9:0b:11:a2:0a:d9:1d:96:a7:34:10:69:6b:30:a6:
21:c8:fc:5b:4e:7e:7e:ab:2a:be:2a:91:df:32:20:57:70:70:
75:80:2c:4b:30:4e:67:db:52:32:8b:47:44:ef:96:ab:0a:04:
7a:bc:ac:47:86:cc:d1:6b:40:35:f8:dd:10:e1:89:4b:4a:e9:
8a:ed:50:c5:a4:18:b4:b3:96:8b:a9:df:b9:c7:ff:7d:79:b8:
bc:70:fb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:31:42 2026 by rpki-client