Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: J425du0LS2URkAnMPl9cCRQEEKAKOWBT1WIT5enMYqg=
Subject key identifier: 47:77:99:A2:20:1D:1D:CD:62:92:7C:AA:97:66:27:B8:4D:86:86:8C
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 019EC0A466618F430C0F319DDFC8D634A0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 08F8
Signing time: Sat 13 Jun 2026 11:01:00 +0000
Manifest this update: Sat 13 Jun 2026 11:01:00 +0000
Manifest next update: Sun 14 Jun 2026 11:01:00 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: va87rR+4dbTvK/QP1jVtifI+LltqDX1iu2KuO8x1dhs=)
2: daqjoUQutGPSPWpp1MBlnqMi5s0.roa (hash: dLUynKpTq26uEi3G0kNMPoVLBPgdqfEJFefVyZLupvY=)
3: uBIxs7ssxXDGyk8SQNxkeydPi80.roa (hash: EJE4RSVi+Vk5YmcZI9DMOpSqKh06AU4ky+hWC3DDJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:66:61:8f:43:0c:0f:31:9d:df:c8:d6:34:a0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Jun 13 11:01:00 2026 GMT
Not After : Jun 14 11:01:00 2026 GMT
Subject: CN=477799a2201d1dcd62927caa976627b84d86868c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:df:c3:24:a2:30:a3:00:ef:00:83:34:22:
fe:5e:5a:64:a6:33:6b:f2:77:0b:df:f4:3e:2b:f6:
d2:09:49:13:89:31:2f:12:7c:d1:97:62:db:3a:01:
1a:c7:f7:de:84:6a:fb:a8:a4:0d:29:b2:2c:87:45:
98:a1:7f:12:8a:a6:6d:19:a3:bf:65:8d:02:54:8a:
d7:c1:1d:f2:ee:b3:f0:41:1d:a0:b7:bf:b6:78:a4:
52:3f:d3:00:11:09:66:e0:ec:85:b2:76:24:07:a7:
18:34:1e:de:84:a2:b6:8b:d8:f7:11:e8:b0:8b:75:
6f:df:e8:a8:c3:0b:70:66:33:68:99:98:b0:a3:5d:
7c:e8:6c:a2:cf:f9:09:49:22:df:42:d3:84:34:84:
8a:33:71:11:62:e3:a4:90:8a:89:12:db:f7:12:6e:
11:ec:2a:16:8c:e8:b6:67:a0:49:c8:f9:79:f1:f3:
f0:5e:04:ad:fb:fe:40:50:26:fb:da:37:02:0d:ff:
72:49:c2:d7:2a:82:18:1c:c9:8e:2a:09:91:f5:5a:
6d:45:47:8a:4c:50:33:5c:e7:6b:0f:eb:99:7e:f1:
c5:e5:03:f6:b0:fd:e8:de:d3:e5:3c:20:7b:c5:b7:
55:94:b8:3b:16:b8:09:a4:e1:a3:54:cf:dd:07:39:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:99:A2:20:1D:1D:CD:62:92:7C:AA:97:66:27:B8:4D:86:86:8C
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1c:2f:b3:79:71:9e:a6:89:79:02:7f:7c:e1:51:48:1d:c9:
66:5d:2d:6c:55:67:65:fc:ac:e9:1e:d5:8e:78:40:bf:84:a0:
a1:bb:51:b6:8a:f7:9a:a2:c5:84:40:d5:07:24:f9:69:a7:91:
67:a7:c6:7e:81:19:5d:00:f7:05:2c:02:b4:b1:a5:3d:23:bd:
77:ab:20:e8:e3:5b:c2:a5:cb:8b:70:eb:6e:5c:85:b8:9c:62:
a4:db:12:a2:53:c4:50:00:95:0b:e4:53:9d:19:9e:50:9a:43:
fe:c6:a9:b0:2f:b8:26:3c:3a:36:94:93:e3:48:bf:d0:d5:e1:
dc:42:6e:cd:6c:fd:f0:86:36:0e:f3:4e:53:f5:7a:b1:51:45:
00:57:fc:8f:e3:33:91:0c:49:a4:0a:09:4e:87:e0:09:2d:28:
fd:05:79:9b:6a:06:f6:75:72:ce:57:e6:de:d3:f6:25:3c:dd:
39:5d:c1:1a:b6:90:06:cd:ba:0a:3e:0b:24:ef:e2:d3:bc:7c:
6a:33:dc:46:3f:78:b1:8a:d5:b8:d3:02:6b:ad:98:a4:bf:48:
12:7f:63:e9:ee:b6:be:34:89:61:a5:80:34:5a:54:73:0d:20:
9d:40:7a:fc:7b:f9:50:92:be:37:5b:f9:d2:8d:88:01:39:5c:
be:2e:d4:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApGZhj0MMDzGd38jWNKDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOTJjOGM3NzliNmVkNmVkZTcyYThjZjExNDkwZWY2ZDdh
OWU5MjEwHhcNMjYwNjEzMTEwMTAwWhcNMjYwNjE0MTEwMTAwWjAzMTEwLwYDVQQD
Eyg0Nzc3OTlhMjIwMWQxZGNkNjI5MjdjYWE5NzY2MjdiODRkODY4NjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTvfwySiMKMA7wCDNCL+XlpkpjNr
8ncL3/Q+K/bSCUkTiTEvEnzRl2LbOgEax/fehGr7qKQNKbIsh0WYoX8SiqZtGaO/
ZY0CVIrXwR3y7rPwQR2gt7+2eKRSP9MAEQlm4OyFsnYkB6cYNB7ehKK2i9j3Eeiw
i3Vv3+iowwtwZjNomZiwo1186Gyiz/kJSSLfQtOENISKM3ERYuOkkIqJEtv3Em4R
7CoWjOi2Z6BJyPl58fPwXgSt+/5AUCb72jcCDf9yScLXKoIYHMmOKgmR9VptRUeK
TFAzXOdrD+uZfvHF5QP2sP3o3tPlPCB7xbdVlLg7FrgJpOGjVM/dBzmR8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEd3maIgHR3NYpJ8qpdmJ7hNhoaMMB8GA1UdIwQY
MBaAFOKSyMd5tu1u3nKozxFJDvbXqekhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMt
NWViYjYzNzgwMDllLzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMtNWViYjYzNzgwMDll
LzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBwvs3lx
nqaJeQJ/fOFRSB3JZl0tbFVnZfys6R7VjnhAv4SgobtRtor3mqLFhEDVByT5aaeR
Z6fGfoEZXQD3BSwCtLGlPSO9d6sg6ONbwqXLi3DrblyFuJxipNsSolPEUACVC+RT
nRmeUJpD/sapsC+4Jjw6NpST40i/0NXh3EJuzWz98IY2DvNOU/V6sVFFAFf8j+Mz
kQxJpAoJTofgCS0o/QV5m2oG9nVyzlfm3tP2JTzdOV3BGraQBs26Cj4LJO/i07x8
ajPcRj94sYrVuNMCa62YpL9IEn9j6e62vjSJYaWANFpUcw0gnUB6/Hv5UJK+N1v5
0o2IATlcvi7Ubg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:57:10 2026 by rpki-client