Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json)
Hash identifier: 5XnqYLap4fcsBW8gydmZ+lOmSB1SYtbwRrDSmZ3M0OQ=
Subject key identifier: A4:A2:A0:4E:BD:B3:B4:7C:94:67:6A:DA:A6:B7:03:B7:DB:0D:1F:45
Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Certificate serial: 019FA14D3ACDC83ECAD2B656F12C51E27B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
Manifest number: 0411
Signing time: Mon 27 Jul 2026 02:00:20 +0000
Manifest this update: Mon 27 Jul 2026 02:00:20 +0000
Manifest next update: Tue 28 Jul 2026 02:00:20 +0000
Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: b6+VUBTpp9jTT6HczibWQslED7NVZ+F/8U07aZIhVBg=)
2: Qu5Uc6FGCB6Uw3VbbjAKqmFxNlI.roa (hash: bpE3q+0F77eucA0rQszJF+sVUPQwfiSRj3/qDaiDMq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:3a:cd:c8:3e:ca:d2:b6:56:f1:2c:51:e2:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Validity
Not Before: Jul 27 02:00:20 2026 GMT
Not After : Jul 28 02:00:20 2026 GMT
Subject: CN=a4a2a04ebdb3b47c94676adaa6b703b7db0d1f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ff:53:bd:be:2e:c9:0a:67:d5:72:3e:47:fa:
11:10:8d:e4:68:2a:eb:2a:53:bc:3f:67:86:9d:8a:
20:72:3e:ce:b9:2e:6b:0f:86:86:90:87:52:9d:93:
c6:40:b0:71:c6:95:41:cd:1a:80:e1:00:41:37:64:
b6:fb:99:92:71:cd:c8:e4:de:71:d2:33:b9:bb:6a:
14:b3:12:00:94:23:c1:64:4d:4c:7d:ed:47:c8:b5:
d3:19:9c:de:b4:e9:cf:3a:32:48:d9:f0:d9:51:8d:
e1:38:ac:92:4a:ad:3c:c1:4a:44:73:99:cd:dc:73:
dc:73:34:bd:0c:66:80:b1:1f:0e:75:63:08:af:72:
f0:c3:90:cc:5f:a3:d1:7b:27:15:2b:5d:75:db:b5:
b8:29:4d:b5:95:bd:6b:46:a9:25:46:66:85:f8:39:
4d:68:26:1c:fe:1b:49:60:2d:ef:1a:24:25:55:ea:
f8:f8:c5:c1:12:06:33:5d:6e:45:9f:91:7b:2d:a4:
65:2d:f3:8b:e1:df:9a:94:c6:6f:e2:f7:b3:df:a1:
9d:c2:c8:13:fe:02:10:c1:5d:e3:73:26:2f:44:51:
6d:0b:df:35:09:b7:c3:b2:dc:5d:e6:42:80:53:96:
0c:94:c4:b0:23:8a:5c:23:1e:7e:46:68:7c:84:78:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A2:A0:4E:BD:B3:B4:7C:94:67:6A:DA:A6:B7:03:B7:DB:0D:1F:45
X509v3 Authority Key Identifier:
keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:11:7f:80:bc:da:e3:21:bc:34:21:ba:a3:bd:f7:b2:c1:58:
29:57:84:32:61:13:e9:eb:ee:29:b0:e1:c6:ca:c3:af:25:2b:
5e:f5:5d:44:b2:82:5a:2e:cd:04:ff:3f:4d:12:d7:14:d7:34:
06:38:e7:4f:60:d2:f6:e7:4b:1a:48:cb:1c:fd:93:eb:f3:0b:
05:ac:23:5d:dc:81:e4:56:4e:bd:06:94:71:d5:26:88:66:59:
3a:75:9c:7f:45:72:2a:f9:c7:0a:5c:d1:56:9b:55:5a:a3:2c:
1a:2e:67:5c:c6:91:b2:a2:b7:b0:d2:93:46:bf:4f:34:49:34:
44:11:44:af:8a:f1:cd:8d:fa:12:ce:bd:5c:60:f3:ac:ce:99:
95:e2:e2:8b:c1:39:18:87:b7:eb:b1:9d:83:fa:8d:55:d0:6e:
72:1f:d5:4b:1c:a2:56:f9:6e:9c:d6:2b:68:56:44:f6:56:41:
80:a9:98:fe:7e:5b:35:51:33:79:a2:79:f8:bc:a5:19:c3:6b:
6d:c0:32:81:2e:d5:0c:fc:50:ab:9b:aa:2a:e0:a0:62:8c:7e:
ad:f9:c9:91:df:42:1e:1d:48:01:07:e9:01:52:e3:c3:4c:f0:
7f:77:1d:3b:60:f9:b5:49:51:e6:90:5f:94:47:54:eb:25:7c:
3e:5e:9e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:31:04 2026 by rpki-client