Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
File: 4LVOM0Iq091sqToY7dguC2jIWlw.mft (raw, json)
Hash identifier: g8CX1zXl3o7iJHf/S5zRlImfRs7bbM0kRsLXOVJbm2w=
Subject key identifier: 68:88:A4:F6:C7:B9:00:11:9C:BF:AC:2C:2C:84:51:4A:3C:EC:EB:D6
Authority key identifier: E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
Certificate issuer: /CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
Certificate serial: 019D38D3B0314A9E57F4EA5A2AEC8C4FB68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
Manifest number: 0B9D
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: 4LVOM0Iq091sqToY7dguC2jIWlw.crl (hash: aItDM3oTKqLGzTfLU/b0S0gpNUopP/3A5K6iiNW45xk=)
2: kIHklMXqFB3plTjcytHieJh2B-M.roa (hash: ZoF+jtSa09y4vfpn8Xs04s6mctTJ+GrzJPmzo0cvvKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b0:31:4a:9e:57:f4:ea:5a:2a:ec:8c:4f:b6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=6888a4f6c7b900119cbfac2c2c84514a3cecebd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:bf:47:4d:0a:75:4c:69:cf:86:60:1a:a1:
5e:b3:36:e5:3d:8a:2d:3b:d3:53:21:21:ae:05:74:
26:b6:69:f8:4d:53:b6:89:6d:de:b2:a3:96:cf:18:
df:5b:db:2c:4d:4c:96:cc:b4:38:1f:86:14:34:65:
21:13:f7:d4:2f:68:91:90:5a:d1:fc:44:42:2e:20:
12:59:60:ee:5a:e5:e0:15:64:0b:aa:fd:69:e0:c7:
1d:e3:22:5b:4f:88:3e:68:c8:79:c8:f8:c8:68:88:
f1:50:93:55:70:7b:5b:84:9a:62:33:52:e8:34:f9:
08:ca:1e:88:db:f8:b7:b1:df:b0:ae:aa:f1:10:49:
59:85:f4:96:54:24:e5:08:39:3b:7a:5b:34:7c:bc:
50:01:6f:c9:6e:ac:88:2d:03:8c:09:73:b7:47:f3:
32:74:84:23:e3:95:5a:7f:36:19:70:f0:de:4b:e0:
c1:3f:6b:04:7c:a6:6f:44:f1:28:42:4b:2c:9a:47:
56:28:6d:b8:ae:9c:ac:b8:c7:68:70:43:98:3a:19:
90:be:cc:82:cb:96:05:56:7b:b9:41:be:a4:92:83:
b0:1d:0b:9d:5a:4b:b0:4f:84:87:83:10:ea:fe:e3:
09:07:02:0b:eb:7a:a6:f4:68:c0:2d:3d:f7:7a:69:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:88:A4:F6:C7:B9:00:11:9C:BF:AC:2C:2C:84:51:4A:3C:EC:EB:D6
X509v3 Authority Key Identifier:
keyid:E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:49:ce:65:f9:1b:f0:8b:42:29:0d:fe:d1:77:27:1d:48:3e:
f2:98:a3:fa:b2:a8:d3:1f:b7:a1:34:31:17:bf:76:97:9c:cc:
22:e3:8e:28:aa:d8:36:01:44:2a:ca:73:9a:05:c4:09:df:bd:
b9:cc:11:80:52:f9:ac:01:cb:ac:e7:5e:d5:e0:bf:6d:29:24:
c7:25:87:9a:80:18:f6:09:81:75:6e:e8:ea:7e:98:93:d7:e8:
36:f7:ca:d6:20:4a:89:5a:18:a6:92:56:7f:5f:74:a7:eb:27:
ad:74:45:18:e6:36:59:2c:47:21:e9:da:0e:45:62:4e:20:b5:
cc:33:47:e8:9f:05:93:47:f1:4b:8b:05:83:da:9a:1d:40:18:
38:3e:95:9d:93:98:e4:fa:2d:d6:e6:ea:55:64:71:fb:36:6f:
05:e3:3d:2b:36:90:33:87:c2:ff:d3:b3:7b:23:04:91:d0:a6:
9f:54:14:10:57:5f:00:b2:9f:59:73:c8:35:a8:2f:7d:6e:5d:
dd:8b:d3:9d:48:09:03:0c:48:da:4f:68:91:ec:8c:2e:00:2c:
2f:2f:6f:1d:24:09:41:a0:53:d0:c8:6d:af:15:15:79:f6:35:
c8:7e:16:43:06:b6:01:16:8b:d1:17:6e:cb:ce:3e:40:0c:55:
86:7f:88:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:04 2026 by rpki-client