Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json)
Hash identifier: 0JjK+pPyzmJh070IWkTYO1QdVwj9tM9zkzMFPiXDJ6w=
Subject key identifier: CA:BB:0F:87:C9:5C:52:F4:F8:0E:4A:82:30:6F:00:34:4A:D9:26:78
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 019F18304B86A789CBD28F6CB8C2F0DDC30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
Manifest number: 0F3C
Signing time: Tue 30 Jun 2026 11:00:45 +0000
Manifest this update: Tue 30 Jun 2026 11:00:45 +0000
Manifest next update: Wed 01 Jul 2026 11:00:45 +0000
Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: aGqXbXmzbly4mxBvGWntK/OEzyUa1kIQbrq9FCKTPi0=)
2: NStJJ9e183cFfxVciTY49OglbNU.roa (hash: yb2BwVREODItjweWlbnW4dYNiNyWxIQNgI0RjZN1nJI=)
3: s_-LqLAwoVzNq7MMJZajpyC4Khk.roa (hash: ClKhGIdEbTXNOQjYUKo8kUllH20eM7IYqgOaHPxfrg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:4b:86:a7:89:cb:d2:8f:6c:b8:c2:f0:dd:c3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Jun 30 11:00:45 2026 GMT
Not After : Jul 1 11:00:45 2026 GMT
Subject: CN=cabb0f87c95c52f4f80e4a82306f00344ad92678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:01:01:69:58:a5:e1:7b:44:ce:9e:21:9e:
05:2b:77:a4:cf:77:7f:75:48:c0:65:90:4f:10:43:
87:72:bf:3c:c6:4d:06:19:72:0d:82:7e:52:ea:b4:
4b:4a:d2:52:93:37:a9:b3:f1:e6:12:a6:bf:1b:e2:
d8:f6:6e:64:b9:8d:0d:99:64:d0:ea:a9:32:93:0e:
f1:97:f1:dc:b1:d7:8f:62:14:96:0d:a4:e9:7a:4f:
0f:ec:78:d4:78:b9:a0:f2:ec:91:b6:5a:08:6d:74:
03:f8:d2:f3:d4:e7:5c:46:65:89:26:0d:a7:25:9f:
fb:b5:e9:0c:45:ea:25:10:ad:9d:9e:61:20:51:c9:
43:32:6b:42:c7:a1:01:0c:25:c2:4a:26:c1:9a:69:
a7:d8:b6:61:56:1c:14:65:c0:4d:8b:5e:93:e6:75:
1a:72:ff:08:c6:41:af:c9:6f:98:e8:0a:76:6c:4d:
9b:bd:5e:c7:f4:b6:38:91:2b:7f:c0:e5:db:22:3f:
65:1f:72:2a:7d:15:f2:be:7c:93:16:ed:f5:80:21:
14:00:e1:aa:e0:ec:12:3f:8c:2f:87:48:d4:66:fd:
0b:9b:73:62:07:64:6c:83:ee:41:6d:71:94:56:4d:
6c:50:41:2a:73:b2:bc:9d:f4:7e:f7:06:45:8f:b2:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BB:0F:87:C9:5C:52:F4:F8:0E:4A:82:30:6F:00:34:4A:D9:26:78
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:31:96:3d:08:af:97:dc:e5:04:0b:59:9a:a3:da:82:ee:2a:
94:fd:86:b8:8b:e4:b8:a4:42:86:83:5b:85:ef:8a:f7:0f:60:
0e:64:81:32:2c:07:e1:18:93:3d:25:63:24:56:74:cb:21:22:
35:6b:8f:a3:28:16:4e:5b:55:71:21:67:d5:b9:37:f6:3e:33:
d9:79:42:8b:0f:0a:ac:6d:f7:ad:9e:8b:7c:78:57:e3:d4:35:
f2:00:de:34:89:25:d2:11:39:b0:b5:4c:1e:1f:c2:c9:01:08:
75:34:dd:ff:3f:2a:c3:0e:01:19:7f:ec:0f:42:54:24:f5:25:
e3:01:7a:9b:76:30:ae:80:df:b2:ee:ee:76:71:26:52:4e:50:
a8:c0:08:8d:c3:b1:8d:e1:5d:be:46:91:fd:5d:89:18:0d:f3:
bf:31:42:9e:71:f2:37:19:7e:db:40:20:e5:54:37:a8:3e:55:
9b:c5:62:a6:d6:2d:c7:cc:2f:48:3a:42:d7:f3:9c:5f:4e:dd:
20:93:57:0f:2f:ab:21:ff:88:84:31:32:8e:fd:16:13:3f:d2:
f7:00:46:d3:ca:79:b2:4c:a3:29:0e:65:e6:ba:77:50:e9:b9:
af:d3:6b:af:39:74:22:8c:15:d0:7a:4b:67:ea:0b:31:0a:28:
03:fb:65:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:07 2026 by rpki-client