Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json)
Hash identifier: c21h/MvTNCEoDgqUs7WTcLVIWVXpPm9I1LIMBMGgVzA=
Subject key identifier: 8B:15:5A:65:7B:33:4A:E3:17:22:E8:4A:59:5E:34:95:DF:4A:A1:A0
Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Certificate serial: 019DCFE363C91E46821BAD72E318D3093414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
Manifest number: 0320
Signing time: Mon 27 Apr 2026 17:01:19 +0000
Manifest this update: Mon 27 Apr 2026 17:01:19 +0000
Manifest next update: Tue 28 Apr 2026 17:01:19 +0000
Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: djRQu/8K6mXxtYe1PKMu/4hlREAHA39RV8VqHrl2LDk=)
2: Qu5Uc6FGCB6Uw3VbbjAKqmFxNlI.roa (hash: bpE3q+0F77eucA0rQszJF+sVUPQwfiSRj3/qDaiDMq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:63:c9:1e:46:82:1b:ad:72:e3:18:d3:09:34:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Validity
Not Before: Apr 27 17:01:19 2026 GMT
Not After : Apr 28 17:01:19 2026 GMT
Subject: CN=8b155a657b334ae31722e84a595e3495df4aa1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:74:7a:23:e5:6e:53:ee:f4:fb:47:f4:aa:
0c:37:61:33:81:11:9c:3d:8f:2b:0d:2f:db:93:c6:
7c:a9:6e:b3:95:c0:5a:b5:d2:0d:cd:d6:3a:00:d9:
99:c1:f5:5e:e0:5a:48:e3:a0:89:ac:84:69:35:57:
ab:ec:ff:61:f6:a3:c6:21:32:56:64:18:09:3f:89:
9d:67:de:e4:36:56:ec:9a:7f:51:18:ac:3e:48:42:
a2:c1:18:8d:31:03:8a:e2:3c:83:31:4b:f1:a6:a1:
e6:5d:41:55:c3:da:f5:68:72:f9:78:17:c9:d7:35:
f7:62:18:0c:c2:94:d5:18:56:41:e5:ce:e9:f9:70:
97:1f:24:9e:42:9f:88:42:2c:67:1c:65:76:9a:63:
a2:4b:df:a8:b9:6c:83:d2:eb:09:37:92:da:22:20:
5b:1d:9d:98:75:da:37:a5:e0:41:ff:37:e6:87:38:
59:ad:33:dd:89:5b:63:4f:2c:df:f7:47:04:31:77:
9a:de:5f:a7:5d:fa:87:a0:ec:e0:e8:5e:88:3b:61:
0a:f2:d6:56:a9:a0:b6:a4:17:63:bf:a5:4a:04:82:
6b:3c:7a:c6:12:f5:5a:c4:8c:a1:90:c0:22:96:76:
cc:18:fd:43:70:ab:95:f2:8d:85:5d:5f:c7:e3:0c:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:15:5A:65:7B:33:4A:E3:17:22:E8:4A:59:5E:34:95:DF:4A:A1:A0
X509v3 Authority Key Identifier:
keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c0:49:86:c5:2f:c2:7c:2a:3f:e7:91:47:de:bd:dc:5c:2f:
ab:69:d3:a6:d1:02:53:e6:6c:9d:07:00:4d:8a:f5:3e:5f:91:
fc:c4:81:d9:63:c9:a5:10:5a:fe:7e:fa:32:eb:c7:62:9f:06:
97:ad:63:b1:92:b4:e7:f8:5f:9a:c4:c3:60:2e:2b:2d:d0:5c:
87:34:ab:db:f9:93:52:e1:ff:78:4d:ba:a6:cb:ec:bd:cf:80:
44:5a:d6:d3:1c:3d:97:3c:a4:c7:17:2b:c7:87:de:72:ef:72:
1d:a3:a4:2f:88:08:4d:2b:69:f4:d1:6e:1d:38:e1:0a:45:4d:
69:8c:f8:79:11:ad:44:49:5c:43:d8:dd:af:41:1a:d4:e4:94:
52:d1:14:50:47:b5:f8:c1:64:89:92:b2:c8:48:53:49:d2:58:
31:b9:47:ef:bc:8c:52:78:f9:a3:0f:db:4f:29:cb:a8:6f:4b:
ab:b7:c1:4a:8c:b7:40:44:78:de:c7:5c:3e:42:a3:bd:7f:05:
e5:10:88:ee:4c:c9:20:c6:a1:05:1b:eb:43:79:49:61:36:12:
2c:46:71:49:0e:6c:a0:d0:ab:1e:ba:18:ff:31:55:ac:57:db:
40:1c:af:5b:56:e0:74:95:5d:f6:96:3d:af:cc:ed:20:7a:0c:
e2:fb:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:31:17 2026 by rpki-client