Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: dP6VlCYgzJQX9DzvB1IDYI3BoxZrzxzbXv+3hevYvOg=
Subject key identifier: 4F:2F:B7:CD:BE:63:5E:D8:C1:0E:D0:B8:3E:5C:BC:56:C1:AD:78:75
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 01A181F4C41A020922C5385C40F26A4A5757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 0F57
Signing time: Wed 28 Oct 2026 10:01:04 +0000
Manifest this update: Wed 28 Oct 2026 10:01:04 +0000
Manifest next update: Thu 29 Oct 2026 10:01:04 +0000
Files and hashes: 1: NAWLn2JmIDnFs18yJqr1oS3wGGI.roa (hash: U8Bdx9Br8Djn05pZrQuUuhdCEFzcfGoUftoSy+juomM=)
2: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: ZEbBVZTfqutC8bgW17LDfaskr5OYGtZP1RV0VRjE2G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:f4:c4:1a:02:09:22:c5:38:5c:40:f2:6a:4a:57:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Oct 28 10:01:04 2026 GMT
Not After : Oct 29 10:01:04 2026 GMT
Subject: CN=4f2fb7cdbe635ed8c10ed0b83e5cbc56c1ad7875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:be:8c:6c:22:3c:fc:8d:30:ec:87:41:64:
84:12:d3:27:cf:4d:d8:50:9c:f5:a2:bc:ec:71:66:
3a:18:b9:4b:b6:1d:8c:bd:66:d1:84:75:c2:dc:85:
33:42:77:09:38:b9:a6:7e:f5:18:21:80:e5:43:05:
b8:df:d3:e7:0d:ff:9f:29:dd:38:04:69:79:3b:c7:
1a:94:8e:6f:0e:89:05:d8:44:ce:78:5d:9b:25:c1:
94:97:6f:c4:68:9b:e1:00:65:88:50:7f:29:eb:18:
03:a0:63:be:78:4c:91:03:b3:58:15:fb:0c:e3:a5:
e2:72:50:3c:fb:99:ae:a0:22:dc:e9:c2:72:32:6a:
6b:4d:8e:99:f0:47:07:79:12:05:10:9f:06:54:21:
c0:c4:1d:e7:d3:1e:98:16:48:c3:37:6c:24:de:84:
fe:5a:1c:1b:8d:92:c6:14:f3:48:5a:fa:27:de:72:
77:ed:df:1d:62:4a:9b:e8:66:92:ba:aa:74:17:fb:
12:6f:45:3c:bd:1f:2f:e3:dd:e3:d9:48:e3:21:6c:
dc:d6:17:f9:41:13:ae:49:88:a0:16:46:77:d9:4c:
3a:08:0e:69:9d:2f:b0:e4:df:99:a8:ba:ed:f7:a2:
49:98:a3:7a:2e:d4:b8:67:b7:a7:39:8b:e7:41:3a:
94:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2F:B7:CD:BE:63:5E:D8:C1:0E:D0:B8:3E:5C:BC:56:C1:AD:78:75
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:39:1d:15:aa:d9:ff:1f:90:af:b1:48:c3:ec:13:2b:b2:ca:
78:52:de:6c:2c:2b:7e:41:a7:11:99:37:fd:e6:89:bd:2c:48:
80:b5:67:cf:93:ab:d1:75:e3:5f:62:6c:cc:6d:22:4c:44:5e:
ca:65:ae:1b:55:36:42:d1:f3:7a:1d:83:70:dd:82:37:e9:56:
a3:61:8f:3a:20:a0:7d:8a:5a:84:a1:72:9a:94:7f:83:f4:74:
48:6b:49:bc:3e:06:75:e1:9e:26:df:61:9f:e6:00:cf:d4:e1:
74:25:07:2f:b2:a1:ea:63:0c:65:30:ff:b2:bf:5a:78:39:b6:
43:0a:9a:ed:d5:b9:59:6e:fa:b8:46:bc:b7:6a:f4:c1:60:81:
a8:e5:be:8e:3b:80:ce:a5:84:9c:fd:2e:47:a2:4f:61:06:27:
5f:19:9f:53:c5:ba:40:01:01:e1:3a:ad:79:a5:5f:ea:61:c2:
76:27:60:33:7d:82:89:5c:0d:8a:a9:e1:8d:d2:28:f0:0e:59:
04:7b:ad:9d:f0:90:da:4e:86:70:ab:2c:56:ac:e1:ed:ff:7a:
f2:af:3e:95:4e:76:66:c5:eb:07:10:ce:ec:66:cb:ed:6e:dc:
67:eb:96:01:0f:14:9d:2d:cf:b3:91:d4:cd:81:81:98:7d:e8:
f5:a9:71:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:27:25 2026 by rpki-client