Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json)
Hash identifier: gF1xnNYOdAXCVNklJCytAmMfmaSms9BRFpEBb+ibhYQ=
Subject key identifier: FE:1A:77:20:D0:CA:92:8B:5B:CD:3C:FB:09:8C:07:7E:BE:63:3B:7B
Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Certificate serial: 019CE635F5C4C32411E4693B0408C979849A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
Manifest number: 02A7
Signing time: Fri 13 Mar 2026 08:00:21 +0000
Manifest this update: Fri 13 Mar 2026 08:00:21 +0000
Manifest next update: Sat 14 Mar 2026 08:00:21 +0000
Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: VKz9sDaNGxHjVXweI/3faPn2aNoSmIRYRLdSGxif3z8=)
2: Qu5Uc6FGCB6Uw3VbbjAKqmFxNlI.roa (hash: bpE3q+0F77eucA0rQszJF+sVUPQwfiSRj3/qDaiDMq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:35:f5:c4:c3:24:11:e4:69:3b:04:08:c9:79:84:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Validity
Not Before: Mar 13 08:00:21 2026 GMT
Not After : Mar 14 08:00:21 2026 GMT
Subject: CN=fe1a7720d0ca928b5bcd3cfb098c077ebe633b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:4d:0b:11:ad:9f:aa:2b:98:1b:a6:11:70:
15:e4:82:8f:5f:8c:7d:be:ad:69:47:cd:50:6f:ab:
14:3f:c5:a0:7d:fa:7a:2d:78:8c:ab:01:4b:0f:96:
a8:1b:5b:49:93:4c:37:75:fc:08:b8:a2:74:80:e1:
3a:07:92:f9:a8:c1:15:32:fc:00:89:ce:7c:dd:7e:
28:94:72:30:bf:1b:f4:e1:34:87:3b:8f:45:12:dc:
79:bb:17:9c:00:9e:39:ea:db:60:76:4f:84:b3:b4:
4d:ec:7c:97:3e:18:af:c5:d7:c6:42:83:a3:79:58:
d9:f9:92:4b:7d:e1:96:ba:7f:af:4a:77:76:09:ef:
97:3b:f2:3c:76:a8:4e:90:6e:2f:8b:b8:54:85:00:
c3:29:d7:5f:4e:fb:ec:8f:16:8a:eb:0f:7e:ba:67:
83:83:e8:ce:70:4e:e9:20:b6:06:80:a0:b2:28:18:
4a:1e:73:64:72:c6:f0:17:51:65:17:31:b5:1b:f8:
a9:fc:e8:3f:19:41:aa:e6:3e:a9:68:2d:bb:fb:f3:
cf:e1:ca:bf:90:bb:47:b1:ab:d3:0e:0b:12:7a:a9:
28:66:f8:44:51:ba:19:ad:ff:b1:0d:26:ff:d9:51:
3d:fd:cb:7b:70:d1:8b:78:f2:d3:bf:e5:d1:76:b7:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1A:77:20:D0:CA:92:8B:5B:CD:3C:FB:09:8C:07:7E:BE:63:3B:7B
X509v3 Authority Key Identifier:
keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:dd:e1:bc:c8:72:ce:90:fb:02:b1:3a:65:63:22:85:c8:d9:
e9:e0:ab:e7:0e:5f:14:b8:a5:c2:41:12:5a:03:ef:7d:6d:f6:
61:78:5b:68:a6:62:99:ea:c5:02:f5:3d:81:55:d3:be:7f:b2:
bd:f0:69:a3:48:63:82:a7:aa:7b:b8:ab:3a:60:05:f6:c6:a5:
8c:b0:3f:25:b2:9e:4f:d5:39:ce:7a:c9:b2:7b:c0:c6:f8:9f:
8a:30:b8:f6:de:80:0a:cc:4b:3d:0a:fb:eb:9e:37:6b:8d:23:
b2:69:c5:75:fe:c9:ab:27:b8:a7:d2:09:cf:2b:1a:9c:16:16:
49:4a:01:56:e7:fc:81:46:be:5b:01:39:18:40:18:37:59:e3:
2f:36:46:93:fb:69:ee:be:2b:6e:7c:3e:e0:5e:78:fa:23:04:
59:5a:dd:3c:84:e2:7f:9f:67:cc:4f:3e:86:87:12:b7:32:24:
fc:73:97:36:9f:73:8f:1a:b7:9c:5b:36:2a:34:22:13:a6:b1:
82:41:fe:c8:90:7a:3a:6e:8d:ff:b7:c9:1a:f5:d8:1f:5b:38:
b8:2d:b0:d7:c1:eb:c6:83:8b:52:6c:a7:df:51:0b:94:e9:59:
15:33:8c:ab:cd:7a:37:84:57:4d:f1:5b:d6:95:b8:3e:dd:af:
8c:ae:ce:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmNfXEwyQR5Gk7BAjJeYSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZTFiZjUzZWJlZDdiNTQ4MDg2ZjRhZjY4MDM0NTQwZjIw
YTc4ZWMwHhcNMjYwMzEzMDgwMDIxWhcNMjYwMzE0MDgwMDIxWjAzMTEwLwYDVQQD
EyhmZTFhNzcyMGQwY2E5MjhiNWJjZDNjZmIwOThjMDc3ZWJlNjMzYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPtNCxGtn6ormBumEXAV5IKPX4x9
vq1pR81Qb6sUP8Wgffp6LXiMqwFLD5aoG1tJk0w3dfwIuKJ0gOE6B5L5qMEVMvwA
ic583X4olHIwvxv04TSHO49FEtx5uxecAJ456ttgdk+Es7RN7HyXPhivxdfGQoOj
eVjZ+ZJLfeGWun+vSnd2Ce+XO/I8dqhOkG4vi7hUhQDDKddfTvvsjxaK6w9+umeD
g+jOcE7pILYGgKCyKBhKHnNkcsbwF1FlFzG1G/ip/Og/GUGq5j6paC27+/PP4cq/
kLtHsavTDgsSeqkoZvhEUboZrf+xDSb/2VE9/ct7cNGLePLTv+XRdrfibQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4adyDQypKLW808+wmMB36+Yzt7MB8GA1UdIwQY
MBaAFODhv1Pr7XtUgIb0r2gDRUDyCnjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUt
MmM5Njc5YWNlOWIxLzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUtMmM5Njc5YWNlOWIx
LzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgN3hvMhy
zpD7ArE6ZWMihcjZ6eCr5w5fFLilwkESWgPvfW32YXhbaKZimerFAvU9gVXTvn+y
vfBpo0hjgqeqe7irOmAF9saljLA/JbKeT9U5znrJsnvAxvifijC49t6ACsxLPQr7
6543a40jsmnFdf7Jqye4p9IJzysanBYWSUoBVuf8gUa+WwE5GEAYN1njLzZGk/tp
7r4rbnw+4F54+iMEWVrdPITif59nzE8+hocStzIk/HOXNp9zjxq3nFs2KjQiE6ax
gkH+yJB6Om6N/7fJGvXYH1s4uC2w18HrxoOLUmyn31ELlOlZFTOMq816N4RXTfFb
1pW4Pt2vjK7OOA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:54:32 2026 by rpki-client