Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json)
Hash identifier: bR4gtrHR3Dq0LB9uD7gtPgiQc678NSy7apgAxg6AbXQ=
Subject key identifier: 35:0D:95:35:75:9C:8E:FC:52:07:6C:09:A3:00:4E:C6:6D:21:03:7B
Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Certificate serial: 019EB98F1B8214B5C7B81C96DCDA9615C134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
Manifest number: 0399
Signing time: Fri 12 Jun 2026 02:00:24 +0000
Manifest this update: Fri 12 Jun 2026 02:00:24 +0000
Manifest next update: Sat 13 Jun 2026 02:00:24 +0000
Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: vRKOZT5ue1iDz9IKI/8mPS1I/PD9qQ5/TYkHnCdYRXQ=)
2: Qu5Uc6FGCB6Uw3VbbjAKqmFxNlI.roa (hash: bpE3q+0F77eucA0rQszJF+sVUPQwfiSRj3/qDaiDMq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:1b:82:14:b5:c7:b8:1c:96:dc:da:96:15:c1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Validity
Not Before: Jun 12 02:00:24 2026 GMT
Not After : Jun 13 02:00:24 2026 GMT
Subject: CN=350d9535759c8efc52076c09a3004ec66d21037b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:60:b4:b4:07:36:34:50:bb:32:bf:e1:da:
41:5b:0a:a4:7d:8f:da:df:8e:28:bd:72:b3:57:45:
78:b4:fd:92:5c:be:b1:c0:e3:86:69:39:64:98:98:
12:98:93:cb:51:eb:5f:38:f1:b4:c4:f6:6a:91:99:
9e:e6:73:29:38:81:7f:01:1e:a3:2f:1b:d2:c4:37:
8c:b4:09:16:ba:1e:5c:12:11:1f:54:7d:91:77:9c:
2e:8d:22:5c:98:3d:43:fa:8b:71:0a:80:6f:59:ef:
c1:ca:d0:4a:9f:1f:33:7e:cd:25:5f:e8:d1:5a:1e:
e7:a8:2d:c7:4d:a5:4f:14:5e:2f:d9:ec:4d:a7:41:
79:7d:0c:d9:65:b2:df:e5:26:b9:df:eb:0b:2a:e3:
74:99:22:50:f3:33:ee:17:82:9e:60:54:6e:70:93:
ca:16:d0:cb:3c:88:d3:d4:72:0a:c9:02:1c:01:c3:
0d:b5:8a:6f:08:45:c4:f3:41:80:15:f1:b7:a2:cc:
f7:34:5d:85:ce:88:73:3f:6a:ab:48:0a:27:d6:f6:
ba:21:da:de:06:81:bf:f1:2d:7e:42:b6:03:7a:03:
5b:cd:1d:b2:16:0f:ce:3d:a2:91:e2:f2:75:55:4e:
16:ab:5b:45:e0:5b:e4:90:84:3e:e7:0b:69:66:24:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0D:95:35:75:9C:8E:FC:52:07:6C:09:A3:00:4E:C6:6D:21:03:7B
X509v3 Authority Key Identifier:
keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ee:47:3c:99:05:2c:23:c6:64:a6:1f:d3:cc:16:27:d7:c4:
e1:8d:61:e4:6a:ed:ec:50:75:55:6c:0d:d7:e0:98:44:bc:7e:
54:0c:f4:31:36:1d:58:c8:6c:2a:92:3a:6e:9e:51:c8:a4:21:
16:6b:7b:91:24:08:05:88:22:a7:28:a6:4d:3b:f8:e1:4f:01:
69:d7:07:39:b8:dd:f5:38:3a:d1:79:aa:44:c5:8b:3e:d6:3b:
ec:40:88:0f:79:39:27:bf:4f:10:a6:24:88:81:c6:76:0a:03:
d8:f8:d7:16:62:7b:8c:13:06:a5:c1:20:8a:6b:2d:a9:bb:fe:
a1:c4:91:7c:91:dd:b9:c3:2e:fb:0f:6d:69:9f:38:a3:07:2b:
95:88:c3:58:61:ae:b3:4b:04:12:d0:a5:9a:44:d0:54:8f:4c:
1f:e2:40:55:5a:81:55:e5:cf:8c:ae:e8:6c:84:a2:d6:b6:73:
c4:13:84:6d:f1:87:b7:2a:48:e0:d6:29:2e:99:33:a9:12:22:
f5:b0:88:90:5f:f6:ba:fe:d1:72:4f:38:00:e2:fa:54:1a:82:
8b:d0:54:f4:bc:61:ab:04:b2:9c:01:00:54:02:47:94:9f:02:
96:75:ea:8b:ca:94:1f:e7:c8:07:a9:64:d4:50:00:38:bf:c5:
b2:7f:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:55 2026 by rpki-client