
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json)
Hash identifier: b+K9a4R/7SlRjgT9j51o2cxTWgEnbSaX9/IBKNC3EBI=
Subject key identifier: 92:05:C6:48:72:36:6C:F6:58:16:33:53:ED:15:2F:40:CB:99:37:7B
Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Certificate serial: 01A08AFA04D49E292B45182B1C30EEF055E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
Manifest number: 048A
Signing time: Thu 10 Sep 2026 11:00:36 +0000
Manifest this update: Thu 10 Sep 2026 11:00:36 +0000
Manifest next update: Fri 11 Sep 2026 11:00:36 +0000
Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: Cd/laAVmbwwkb/ucHnIsaBq56XOEqXkJJ29VnN4qvuY=)
2: Qu5Uc6FGCB6Uw3VbbjAKqmFxNlI.roa (hash: bpE3q+0F77eucA0rQszJF+sVUPQwfiSRj3/qDaiDMq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:04:d4:9e:29:2b:45:18:2b:1c:30:ee:f0:55:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Validity
Not Before: Sep 10 11:00:36 2026 GMT
Not After : Sep 11 11:00:36 2026 GMT
Subject: CN=9205c64872366cf658163353ed152f40cb99377b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:61:5d:67:19:ea:79:aa:88:bb:89:9b:1b:
40:73:b9:b9:66:f8:12:20:b2:45:b0:15:05:b6:26:
6a:1c:56:33:7a:f5:bd:6f:6c:cf:96:40:d5:b5:aa:
a1:c8:f7:e8:1b:1d:27:6a:e2:96:7b:6b:2d:5e:91:
07:96:ba:58:54:73:de:9f:1d:e5:01:4e:5e:dc:f8:
78:a0:81:78:b8:ef:87:e5:97:34:8b:57:59:cc:0a:
d0:98:1f:24:ee:17:50:2f:06:23:8c:9e:72:e1:9c:
57:74:a4:c4:94:d4:10:08:28:8f:3a:8c:8e:98:07:
75:f2:87:9b:1d:b5:1a:91:a1:ca:d8:87:8b:87:8f:
c8:dd:43:71:23:33:8f:7f:2c:bc:ce:47:e9:3d:31:
95:89:f3:bb:63:6f:38:86:56:04:80:2d:a3:76:33:
4b:fa:be:36:8b:15:c8:bf:43:c6:a1:83:95:19:be:
b6:94:1d:0d:55:39:1c:56:07:44:f0:30:79:f2:cf:
f6:47:ba:73:13:f8:b3:a5:b3:46:28:15:d4:5a:68:
c1:be:64:fc:49:af:85:49:db:6a:e0:d2:9f:f7:fc:
83:1a:c5:cb:d8:7d:e1:f3:64:f4:39:06:77:d9:16:
3d:5a:03:a2:c9:d0:a9:50:9a:18:c8:b8:d8:7d:0e:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:05:C6:48:72:36:6C:F6:58:16:33:53:ED:15:2F:40:CB:99:37:7B
X509v3 Authority Key Identifier:
keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1d:84:6d:04:fd:4b:d0:2d:14:b4:23:c3:cd:ae:ff:1e:43:
89:a9:ce:9f:25:1e:4d:3a:b3:87:62:9b:97:b6:9b:b2:97:11:
25:1e:df:30:0e:fd:29:4b:da:64:7a:15:9d:9c:d8:e5:c3:58:
85:59:d8:37:24:ba:f2:91:83:9a:b9:5b:83:bf:f9:e5:18:d1:
f6:23:cc:ec:21:aa:41:74:f2:10:b4:8c:77:3c:ab:8a:37:86:
ba:f9:7f:36:90:9b:05:c5:bc:10:89:8c:a0:9b:ea:da:af:5e:
af:41:30:9b:43:e6:7e:a9:f9:bf:bb:3e:37:60:08:04:03:79:
0b:d9:86:d8:79:87:8f:f0:54:b7:7e:37:9a:00:28:7d:c0:45:
8e:37:e0:c9:32:9e:bc:1e:85:83:12:bc:88:64:04:71:4e:7a:
ba:4a:76:4d:68:e0:7f:57:fb:f4:99:2d:61:4d:bc:97:88:0d:
0b:1e:68:28:6b:28:36:c9:38:52:de:4c:2d:21:e7:32:db:b3:
f0:0f:b9:c5:69:bd:f3:5c:97:6b:02:aa:ba:5d:34:0e:bd:bc:
16:b4:80:de:4c:6c:ff:1f:70:76:b6:a3:88:80:c0:4e:9e:08:
f6:e7:6a:22:38:6f:d8:8c:cb:38:25:8f:d3:2a:e2:42:b6:5f:
e8:72:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:41:30 2026 by rpki-client