Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json)
Hash identifier: 3Wi4QJxbs8LP2oRtXOtmNUCIui2yTJdfel4foV1CCjE=
Subject key identifier: C7:15:2F:3B:5E:00:81:E9:53:F8:E0:E0:D0:DA:D8:85:E9:5E:A7:33
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial: 019D37F77F59931496B8CE857A4E17AE5571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
Manifest number: 0460
Signing time: Sun 29 Mar 2026 05:00:59 +0000
Manifest this update: Sun 29 Mar 2026 05:00:59 +0000
Manifest next update: Mon 30 Mar 2026 05:00:59 +0000
Files and hashes: 1: OmjdAjVWAeN7nazvaN8tyky8gB4.roa (hash: oILOHbkx48Up7aMbK7MsGxijo68OXba8v88+kgI/k8w=)
2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: jOZR8kXbzau6K4agck9hvu/+pgKozS47R6RWUgAUPdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7f:59:93:14:96:b8:ce:85:7a:4e:17:ae:55:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Validity
Not Before: Mar 29 05:00:59 2026 GMT
Not After : Mar 30 05:00:59 2026 GMT
Subject: CN=c7152f3b5e0081e953f8e0e0d0dad885e95ea733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:33:40:e8:98:ff:e2:fc:2f:26:7f:56:00:
5a:0b:34:b8:51:ad:3a:42:1c:4a:46:12:2d:08:28:
61:d9:77:be:62:fa:d6:69:d3:14:71:c3:b5:b3:d0:
0c:b1:a3:09:d1:ca:a6:f8:9d:28:da:b9:63:a9:24:
c1:53:f8:2a:b9:67:d9:cf:9f:07:78:8b:6f:a7:84:
ff:97:80:6d:7e:13:69:77:44:ec:cc:9d:d7:b9:86:
49:13:a1:21:57:59:55:a8:c4:48:43:fc:7b:4b:14:
6a:d8:a2:60:08:c6:e0:0e:63:b2:f8:0a:ff:42:aa:
19:7c:a7:2b:98:e7:00:86:1c:c6:cf:e2:d1:11:da:
4f:1b:c3:17:2d:27:89:88:e6:77:0e:e8:b1:38:6b:
f2:8f:48:35:37:4a:6c:08:7f:e6:1b:ca:66:99:2c:
83:ba:2e:7e:08:f4:d8:ab:a7:d0:d1:6a:80:e0:72:
45:18:73:20:80:b1:ef:59:fb:e1:cc:2b:fb:c2:db:
ac:c4:f8:d3:11:f7:3c:a9:34:be:b8:d2:c9:86:6d:
f6:9e:4f:69:ea:d6:aa:d3:a2:33:42:1e:9b:ac:82:
4e:84:bf:9b:c1:ff:2e:9d:7f:8b:1b:90:be:2f:7c:
76:b1:6a:3d:f2:5c:44:6e:80:9c:9b:ad:58:11:b5:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:15:2F:3B:5E:00:81:E9:53:F8:E0:E0:D0:DA:D8:85:E9:5E:A7:33
X509v3 Authority Key Identifier:
keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7d:c5:d7:a7:a4:4b:9b:15:b1:8e:76:a8:a0:9c:36:46:d0:
31:61:f0:e7:d4:be:20:bd:91:44:b0:c6:70:a1:6f:e8:99:9f:
e3:d2:97:39:22:12:8c:56:bd:2a:50:be:f0:1e:64:9b:0e:71:
61:60:16:fb:fd:5e:dc:f5:ad:22:38:06:ee:c7:f2:38:4a:04:
d1:03:c6:86:8f:14:3e:41:39:3a:d0:1c:4c:ca:b8:2d:98:71:
ee:5a:21:96:cf:5e:3a:15:67:62:d1:5f:7a:c3:a2:3e:42:2a:
a7:be:24:11:a8:15:a2:70:52:34:5b:0a:b2:53:e8:2d:71:96:
d7:6f:0d:b3:af:7b:43:11:e1:45:b0:8f:48:8b:39:7a:7d:02:
4d:63:87:ad:03:82:2e:97:e1:c8:de:25:4b:14:6c:2f:12:b0:
71:fe:12:6b:a3:7c:05:59:85:cc:95:06:1a:f9:76:ef:52:88:
af:68:fe:67:9f:0f:4c:f9:01:40:6a:d1:43:1e:21:12:95:98:
d6:31:72:d6:b8:89:3d:08:e5:b1:d9:43:d7:d6:9d:be:cd:d6:
ae:00:31:2d:37:2a:6c:e0:92:a1:2b:d3:12:20:c1:1f:bd:71:
41:6c:6a:b1:9d:1d:ce:59:88:5b:c2:cb:69:7f:89:02:ad:cf:
ac:45:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:26 2026 by rpki-client