Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
File: 4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json)
Hash identifier: cYMYkui6mxYxfAKshEuLxttO01Y/kLiS6NLwgfs9OKM=
Subject key identifier: 8C:EF:C7:9E:81:F3:0C:22:B0:95:1C:F0:BF:A0:91:5E:BD:67:8F:96
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 01A00100F4C74890B0D2F0B1C092B12A9288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 16:00:34 +0000
Manifest this update: Fri 14 Aug 2026 16:00:34 +0000
Manifest next update: Sat 15 Aug 2026 16:00:34 +0000
Files and hashes: 1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: tDk9hgYgBPWRAa+4Ut0cHnZfJF4HkrJFq2goJklGtno=)
2: MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa (hash: X0nH2HeW8oMQ0R4XVjts1kBv71dyXZYfSTlTWrarM3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:f4:c7:48:90:b0:d2:f0:b1:c0:92:b1:2a:92:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Aug 14 16:00:34 2026 GMT
Not After : Aug 15 16:00:34 2026 GMT
Subject: CN=8cefc79e81f30c22b0951cf0bfa0915ebd678f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:cf:aa:5a:ee:22:52:2a:17:68:26:12:ce:
9b:e0:17:41:9a:30:75:31:78:77:df:d8:a6:bb:7d:
0e:5d:3b:79:c2:42:a0:7a:15:ab:7a:68:30:ab:2c:
8a:f8:4d:13:e6:e8:0a:fc:03:40:0d:13:1c:56:37:
e6:2c:5f:d6:3c:90:ac:a9:70:70:15:60:b0:7a:77:
81:36:84:13:e2:64:f9:c4:cb:45:fd:0a:70:2d:9b:
b4:b8:2e:1b:64:a4:03:fd:02:4d:89:f6:3a:49:a3:
e5:54:e5:20:d5:48:e3:e3:68:1a:0e:52:50:2c:85:
01:ea:a5:03:32:dd:44:2f:60:df:69:63:16:13:2b:
6e:b6:5f:1d:1c:3b:45:6b:15:49:f5:b7:b4:f8:d2:
57:68:56:f9:2f:dd:85:c7:38:b2:3e:98:39:72:3f:
51:bf:c3:c9:2f:0b:23:e8:df:86:40:d5:8d:e3:99:
38:af:08:16:b0:2c:d6:f5:b9:86:20:25:71:53:67:
9b:4b:e1:fb:d5:93:b6:84:a4:98:44:36:2d:05:09:
86:76:cf:6c:6d:99:58:f4:78:96:5b:79:a3:05:bd:
fa:0d:bb:31:7a:30:ff:d7:fe:b5:c8:c5:94:a5:ba:
ad:18:d9:cc:06:7a:ce:36:cd:47:64:6c:46:c5:a2:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EF:C7:9E:81:F3:0C:22:B0:95:1C:F0:BF:A0:91:5E:BD:67:8F:96
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bd:d7:c4:9a:14:f1:3d:05:bc:cd:06:29:43:04:01:46:f4:
17:bd:38:d3:d4:d6:b4:f2:59:d2:9b:77:fe:0d:3b:45:dc:dc:
fa:26:4d:ef:37:52:a5:e9:46:95:a0:5e:bf:cd:33:df:af:31:
48:7d:a0:e3:e0:19:bc:4b:82:2f:4e:58:a0:5b:19:92:66:d9:
63:13:cf:ab:26:08:23:7b:ea:ec:58:3d:fe:6d:6c:d8:a1:0e:
51:e4:fa:1c:70:ef:dd:23:d5:5c:85:36:20:31:37:1f:99:72:
30:30:33:08:ad:b6:0e:aa:e5:da:8b:0b:25:60:67:15:a7:6d:
01:79:0e:6e:43:14:44:e2:bb:43:75:6b:b8:69:62:99:44:b0:
2c:1c:6b:5b:a4:f3:56:a0:2e:99:8a:8b:95:b8:da:2b:8a:3f:
0d:41:09:c7:ea:61:a0:77:05:78:f8:1d:ba:83:92:d1:31:af:
24:f7:9d:a3:90:fc:df:6d:e2:19:10:6b:9c:1a:10:f4:89:7a:
9a:af:0c:28:e9:0e:9a:35:c0:81:ca:54:a2:d0:05:f3:dc:54:
4c:3e:2b:55:da:92:f9:ed:7d:be:d3:9d:88:b8:f1:db:82:3c:
05:84:bb:6e:3d:2b:e0:f4:7a:be:72:c9:c1:49:0b:e1:7f:37:
b7:d3:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:06 2026 by rpki-client