Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: GUjHgItiyOlNz/wS+UKBO6vLD3mVuqIrOBPFnyQ/3Cw=
Subject key identifier: 8A:75:E6:A0:DE:50:22:B9:F2:91:C2:9D:65:8A:C5:1B:4F:F6:13:EB
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 01A0C3D7032DCD51FE2D50537859FEE1EE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 0A03
Signing time: Mon 21 Sep 2026 12:00:43 +0000
Manifest this update: Mon 21 Sep 2026 12:00:43 +0000
Manifest next update: Tue 22 Sep 2026 12:00:43 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: JMLkeyrrHwIrmheOAMcPfCbCaj7RJWy5xL2s4Fzif/c=)
2: MIWe6_AUcHSjRgC4Sn1hvPGPAVQ.roa (hash: RHnTGPBWdCvZaUsgPteZ8dK8qDQOfdI5+BZrUWBa1No=)
3: uBIxs7ssxXDGyk8SQNxkeydPi80.roa (hash: EJE4RSVi+Vk5YmcZI9DMOpSqKh06AU4ky+hWC3DDJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:03:2d:cd:51:fe:2d:50:53:78:59:fe:e1:ee:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Sep 21 12:00:43 2026 GMT
Not After : Sep 22 12:00:43 2026 GMT
Subject: CN=8a75e6a0de5022b9f291c29d658ac51b4ff613eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:1e:93:2d:86:05:be:9a:4d:fc:cb:ab:d9:
81:89:ed:a0:cd:d1:6c:4f:43:ae:89:b1:78:1a:a8:
60:28:49:b2:e0:df:0c:54:a4:0e:33:92:a8:f5:c9:
fd:53:2e:53:f7:7f:49:f4:16:e4:b9:61:38:cc:e7:
44:44:24:ec:73:44:08:5a:78:e8:db:5d:3c:d9:8d:
b5:50:2e:56:84:1f:75:36:66:3c:fd:3a:7e:59:e5:
3e:68:1e:4b:cf:07:3c:79:53:db:5f:b7:bc:b0:03:
0b:1b:c4:a1:c7:56:d5:b6:46:8f:46:e2:5d:cc:95:
24:bc:b5:f3:7e:35:5d:85:84:0c:38:3d:9e:fd:40:
c6:43:25:4e:fa:59:74:42:c4:3e:3f:3a:bc:3b:05:
27:9b:44:76:62:c6:70:d5:70:02:c6:59:4b:ac:6e:
d7:50:1e:f2:8f:fd:11:f9:f3:b5:88:33:1b:8e:d6:
07:b5:b6:b7:89:77:77:51:ef:85:0e:f1:02:c9:2a:
02:69:01:37:7d:6c:b0:1a:53:0d:06:bd:eb:c8:40:
33:d3:e7:cb:33:16:06:5c:b1:e9:1e:02:3b:74:81:
48:51:15:b2:e6:ed:a0:af:ed:3d:f7:ed:82:5f:fc:
3c:12:ed:93:ca:39:4c:7e:6f:47:71:85:5b:c9:be:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:75:E6:A0:DE:50:22:B9:F2:91:C2:9D:65:8A:C5:1B:4F:F6:13:EB
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:73:05:9e:4a:16:19:95:fd:a4:a6:80:b5:ad:4c:f1:c5:5a:
71:0c:8f:1b:17:10:6f:f2:59:bb:1c:17:48:5d:06:2b:fc:f8:
e7:9e:3a:dc:86:20:3d:e0:4f:0e:a5:f8:09:2c:31:62:1e:76:
4a:af:03:07:82:27:93:3d:26:5c:ac:5b:d7:1f:fe:4b:11:1b:
48:f9:70:14:f6:ce:f5:3f:48:b0:08:54:89:24:58:4c:8f:16:
fa:3d:fb:d6:4d:11:c0:df:78:59:8b:ec:92:a6:7c:11:e5:f1:
8a:57:84:e7:9a:65:db:64:e3:68:37:8d:49:48:21:95:8e:fa:
3f:21:34:40:f2:66:ce:0e:49:99:26:60:5a:e0:7a:eb:15:a3:
df:1d:d4:d0:46:ff:26:ea:ec:9d:fd:56:85:d9:9f:c0:49:bd:
01:3f:4b:6c:a4:78:bc:c0:1b:cf:f3:04:c3:af:c7:ba:ae:cb:
66:22:ad:db:6e:7d:7f:9b:54:ab:f0:88:f0:cb:7e:1c:20:53:
b6:ea:0e:21:49:d9:07:1b:46:62:8b:a1:bb:00:58:33:53:b4:
ad:cb:e7:97:32:0e:f4:a2:f3:58:86:fb:30:09:cc:2b:6b:5e:
07:f0:c8:c2:28:f7:90:58:c5:16:87:51:4a:8b:48:b0:2d:be:
98:a7:cd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:52:53 2026 by rpki-client