Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
File: 4oi1UXtPv_4T0fw--obcf_VWGIE.mft (raw, json)
Hash identifier: Tq7mgdh7roKuMKL63EOvo0Ave9KcTRhzvXM8zZg5Dxk=
Subject key identifier: E2:09:DE:2D:C7:25:7F:5C:BF:55:86:4B:B9:7C:CE:9B:40:DA:2C:B4
Authority key identifier: E2:88:B5:51:7B:4F:BF:FE:13:D1:FC:3E:FA:86:DC:7F:F5:56:18:81
Certificate issuer: /CN=e288b5517b4fbffe13d1fc3efa86dc7ff5561881
Certificate serial: 019D3A544E73FC8C72DFF73345489CB4F918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
Manifest number: 4B
Signing time: Sun 29 Mar 2026 16:01:36 +0000
Manifest this update: Sun 29 Mar 2026 16:01:36 +0000
Manifest next update: Mon 30 Mar 2026 16:01:36 +0000
Files and hashes: 1: 4oi1UXtPv_4T0fw--obcf_VWGIE.crl (hash: +20h/rlTgTCwcaVYuYPrydQOWj1/gJ5m1SDcLSGqS3U=)
2: bgJD44VBNgNX7QzVsv5deioMoUk.roa (hash: LSae3XGL/Q+/vG622sGPyAKFe+sgbvpW87T1AF6mcHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:4e:73:fc:8c:72:df:f7:33:45:48:9c:b4:f9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e288b5517b4fbffe13d1fc3efa86dc7ff5561881
Validity
Not Before: Mar 29 16:01:36 2026 GMT
Not After : Mar 30 16:01:36 2026 GMT
Subject: CN=e209de2dc7257f5cbf55864bb97cce9b40da2cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:4a:58:d2:68:db:88:d5:28:c2:d9:41:0e:c9:
db:be:26:93:59:94:b7:9d:8f:88:94:72:4d:8a:1d:
99:cd:a6:a5:12:cd:22:3c:1c:1a:42:95:9f:6f:e0:
3f:d0:9b:2f:a5:2d:5b:a3:22:79:0d:68:43:5f:77:
c5:23:43:76:09:0a:af:57:33:bc:5d:e8:dc:a6:72:
aa:6b:8e:ae:e7:62:54:d4:96:92:2d:ca:b6:fb:cd:
24:05:14:b2:3e:14:24:c2:52:b3:fe:41:ca:48:b5:
81:4c:3b:94:43:28:45:db:88:9e:c3:bc:06:6c:47:
51:17:3e:df:04:07:09:cd:6a:d2:63:1d:17:ff:eb:
04:ba:91:d8:51:29:ae:8a:59:c1:48:3f:eb:8f:de:
c6:30:27:c0:43:38:b2:d4:fa:ec:8a:57:f0:3d:21:
df:65:1d:b7:65:17:80:3d:6c:56:65:03:f2:36:e2:
1d:68:e8:46:10:24:06:97:3c:0a:4a:72:2d:c1:31:
f8:95:3d:41:9e:1a:d4:86:f0:cb:aa:1c:7c:48:73:
cb:4c:38:01:f9:f1:77:f0:b6:81:6c:d2:6d:89:5e:
ba:76:0c:68:b0:b1:64:ff:fc:a7:db:8f:aa:60:28:
5a:82:15:e4:95:0e:69:57:be:2e:1b:1f:16:01:25:
82:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:09:DE:2D:C7:25:7F:5C:BF:55:86:4B:B9:7C:CE:9B:40:DA:2C:B4
X509v3 Authority Key Identifier:
keyid:E2:88:B5:51:7B:4F:BF:FE:13:D1:FC:3E:FA:86:DC:7F:F5:56:18:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:71:63:80:7a:5b:f4:fb:29:92:3d:5b:83:8f:49:ea:e9:8b:
3e:e5:a5:3a:ba:92:ac:90:ae:5b:59:6c:a8:11:81:7a:bc:27:
49:ff:46:2d:4c:31:1f:05:3c:0b:01:41:53:0d:89:ad:bd:7f:
ce:7e:f2:3e:6e:25:1d:3f:64:44:48:17:7a:c0:d3:5a:44:64:
f3:db:17:9b:3d:da:32:6b:1b:fc:8c:78:c7:db:d9:0f:60:46:
f3:60:a5:18:4a:06:18:cb:91:af:1c:1a:a1:83:37:2d:f6:8e:
b5:c0:81:6c:db:01:73:33:3a:d0:16:79:05:77:cf:95:fd:3f:
a8:04:e6:d7:9c:20:59:8b:b0:36:39:01:d0:b7:f9:c3:4a:7b:
56:46:db:07:d8:c2:4a:e8:3a:a1:a8:81:6c:0a:12:08:5a:d8:
57:a7:c0:7d:df:8f:86:ac:5d:c8:5a:de:53:7e:77:3b:7d:aa:
e3:47:bc:97:31:2d:60:ea:76:7f:31:68:7b:08:9f:7c:e7:88:
5c:a3:9c:b0:6a:d4:14:5f:02:8e:26:c7:8c:bc:39:e5:a2:e4:
af:ea:33:d1:0b:ab:25:bc:ea:0b:69:47:59:e9:86:0a:22:eb:
5a:04:ff:f1:1c:e5:53:42:a1:f7:a2:ec:f9:aa:72:7b:00:3a:
aa:38:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:38 2026 by rpki-client