Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
File: 4OU7sw0HUg-FeuZW962BPyLv0VI.mft (raw, json)
Hash identifier: pIkyoQcY7e+fidFVdUQuy30g1IiZIOw1k2oG9Q5igZ8=
Subject key identifier: 48:97:99:81:B3:F1:F7:E8:14:DF:A1:CF:1D:48:8F:16:1D:E8:70:2A
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Certificate issuer: /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial: 01A1702512EC928C4C0E44AE5DE57435F630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
Manifest number: 0352
Signing time: Sat 24 Oct 2026 23:00:40 +0000
Manifest this update: Sat 24 Oct 2026 23:00:40 +0000
Manifest next update: Sun 25 Oct 2026 23:00:40 +0000
Files and hashes: 1: 4OU7sw0HUg-FeuZW962BPyLv0VI.crl (hash: NURHGdoCusEixHixXv1oCn8dCHqtA7WfGO0Ddn17HGM=)
2: VdHoxGlnRqHLH1BFJzKzY5i5REw.roa (hash: dsaCJE0OYhxYSMRnj1r3I0s5ntGNaUFaI5WVluKFvG4=)
3: xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa (hash: LniWd40MUm27qbAUJ/AFuq8QyhRMHVdc7tCz6NRyg3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:25:12:ec:92:8c:4c:0e:44:ae:5d:e5:74:35:f6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Validity
Not Before: Oct 24 23:00:40 2026 GMT
Not After : Oct 25 23:00:40 2026 GMT
Subject: CN=48979981b3f1f7e814dfa1cf1d488f161de8702a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:72:6d:ad:31:1b:ab:54:c8:4c:2c:94:a9:
35:f5:7b:6e:17:18:25:8d:7e:97:b4:4c:3d:39:4a:
b3:0b:2f:7d:4c:b0:88:16:4d:4e:5a:75:e9:29:e0:
8e:0f:9d:fb:ea:d4:e1:5c:20:05:eb:fc:0e:08:11:
ac:f2:12:33:01:1f:70:a5:3f:21:2e:f0:45:a4:9e:
e5:29:de:17:fd:c0:62:1f:2f:7c:38:33:db:b4:6c:
07:30:16:cd:66:db:0d:d6:64:59:99:d0:6e:4c:6c:
0d:d3:3e:ed:67:b0:d3:cf:e7:78:9c:22:0c:d0:7d:
75:d6:ae:e9:84:d0:08:b6:49:6d:25:bc:d2:70:41:
cb:91:ba:75:b3:10:5e:91:05:56:4d:d1:fa:3e:88:
14:d7:8d:90:9b:30:41:c1:18:ef:d4:6d:7d:11:12:
33:b7:d6:f5:c0:8d:fc:ee:55:6a:67:5e:ca:4a:34:
41:f8:e8:e7:a6:70:aa:0e:a5:bb:87:75:f3:9c:33:
c6:35:4b:fe:41:a0:b8:dc:aa:1a:ae:ff:63:8f:b7:
d0:66:90:74:6e:e5:aa:2e:86:9f:2e:bc:66:3e:5b:
ae:06:7f:1d:1a:0d:d8:35:bc:99:7b:2c:72:1c:d6:
06:fa:ce:fc:85:41:32:99:44:a0:13:7b:2a:2a:62:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:97:99:81:B3:F1:F7:E8:14:DF:A1:CF:1D:48:8F:16:1D:E8:70:2A
X509v3 Authority Key Identifier:
keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:db:c1:f0:5c:9e:f7:40:b8:3f:7c:2a:91:41:9f:25:42:96:
c1:77:df:da:34:c1:89:8d:3a:9b:9d:af:70:68:81:6f:67:2f:
ed:1c:dd:b0:f3:a1:5e:3a:b4:e7:8c:16:f3:2c:ed:7b:cc:d5:
d9:1c:43:e3:e0:d0:51:8c:68:3d:95:f1:21:53:ba:fa:a8:54:
cd:d5:44:0a:27:01:3d:59:d0:4b:29:22:7f:96:d3:ed:2f:4f:
f5:8d:a2:0a:62:6e:e3:b4:48:4a:76:2d:ef:19:37:db:10:7d:
1a:67:55:36:54:0b:6c:9c:79:78:70:90:05:87:2b:5d:b7:64:
01:06:ab:ba:42:44:f6:06:33:d7:1c:5f:ad:0e:30:70:ef:93:
ff:7c:ca:f8:6c:6a:d9:91:e4:ca:e0:7e:9d:28:13:a9:78:2a:
b2:14:06:34:a5:d7:b7:ad:40:af:f9:06:ca:95:08:65:da:b0:
1b:2d:5c:4e:18:31:13:89:02:d2:2a:55:b1:75:86:c6:09:78:
7d:a4:b6:97:f8:fd:ad:f3:08:04:86:cc:d0:42:46:83:f5:ef:
2e:fd:be:32:45:ad:36:3c:ba:51:bb:99:e7:75:05:6c:0c:7e:
91:81:50:52:9a:bb:2b:7b:36:42:9d:23:3f:77:15:d0:fc:b2:
22:02:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:10 2026 by rpki-client