Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
File: 4OU7sw0HUg-FeuZW962BPyLv0VI.mft (raw, json)
Hash identifier: vnV7e4G49R6KpExGGnkjQaCNswSGOHpPfw1nIZuSa1s=
Subject key identifier: C9:E1:2D:09:2A:38:58:5A:C6:29:85:68:CA:FD:4C:8A:2A:87:DF:21
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Certificate issuer: /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial: 019D389C348D616432FEADA8AF9F2836B5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
Manifest number: 0123
Signing time: Sun 29 Mar 2026 08:00:54 +0000
Manifest this update: Sun 29 Mar 2026 08:00:54 +0000
Manifest next update: Mon 30 Mar 2026 08:00:54 +0000
Files and hashes: 1: 4OU7sw0HUg-FeuZW962BPyLv0VI.crl (hash: 65/EyD3QjUb3BQDaR93CQzRgbIYiTN1yv0mfLOaz0aQ=)
2: VdHoxGlnRqHLH1BFJzKzY5i5REw.roa (hash: dsaCJE0OYhxYSMRnj1r3I0s5ntGNaUFaI5WVluKFvG4=)
3: xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa (hash: LniWd40MUm27qbAUJ/AFuq8QyhRMHVdc7tCz6NRyg3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:34:8d:61:64:32:fe:ad:a8:af:9f:28:36:b5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Validity
Not Before: Mar 29 08:00:54 2026 GMT
Not After : Mar 30 08:00:54 2026 GMT
Subject: CN=c9e12d092a38585ac6298568cafd4c8a2a87df21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:71:02:cf:88:56:66:38:c6:a9:c7:92:74:
fd:c8:e3:46:ac:0f:36:b1:cf:2d:24:4e:79:3f:b3:
c2:81:11:d8:e9:80:5a:02:40:8a:3d:11:fd:b6:5d:
ce:8d:0f:a1:c3:eb:45:08:7c:82:30:03:74:c5:69:
09:b7:fa:f6:b2:c4:44:47:2d:26:78:d9:ad:d2:0a:
c0:97:3d:c3:da:ec:b7:2a:36:a2:9e:45:1c:e0:2b:
12:8f:33:b6:0b:96:c2:3a:69:72:f7:7e:fc:b1:f9:
5c:4e:1f:6f:7c:74:43:2e:4d:46:73:e5:94:a4:74:
27:9b:20:2f:da:fb:95:22:c7:31:55:20:d9:4b:e5:
21:1a:f9:03:ea:a9:69:90:91:65:71:ac:ac:94:be:
fe:df:39:62:07:4c:05:61:c7:3a:af:67:73:d1:82:
3d:77:29:8a:e5:b2:1d:a0:69:c1:6d:16:93:90:70:
57:b4:2f:fa:90:95:08:ff:df:fe:d6:5e:81:8b:50:
3a:c3:d2:7a:5f:0f:9e:6d:f1:fe:67:98:ea:06:5c:
82:b4:29:29:6a:dc:70:56:5c:2d:fd:e4:ad:d4:78:
c6:4d:8a:a5:c8:c4:c3:34:89:9d:5a:07:91:ff:96:
63:e0:fe:d6:35:9e:f6:09:a8:e0:12:6a:73:f2:8a:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E1:2D:09:2A:38:58:5A:C6:29:85:68:CA:FD:4C:8A:2A:87:DF:21
X509v3 Authority Key Identifier:
keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:68:af:c0:00:3d:8e:c8:bf:42:be:6a:05:00:ef:d4:87:e7:
18:87:4e:44:a9:21:f9:ae:5d:3d:12:55:0a:73:82:80:54:13:
61:f6:e3:76:38:bf:75:93:39:4f:39:d1:49:7f:55:db:51:88:
70:36:f7:3d:3d:69:1e:46:2e:64:62:33:42:e5:87:fa:e2:04:
56:85:6f:96:73:72:92:c6:5c:69:b3:18:95:e9:55:e8:55:c7:
bf:75:d6:a3:0c:51:fc:ea:93:ea:1f:f8:4a:97:58:e0:d5:a4:
58:21:bf:0a:01:39:25:7c:36:65:46:00:5b:f3:21:7e:1d:48:
26:9e:b1:c3:17:5a:c7:03:91:f9:a5:cb:78:c6:e0:36:ae:f1:
ff:ed:38:2c:d9:d4:b1:ac:39:10:12:16:8a:75:76:21:02:87:
6a:af:6d:21:3d:23:f3:4f:96:0d:91:09:57:3b:e6:7e:e0:98:
8c:34:e0:c2:ce:f5:90:b1:00:9a:04:81:43:08:e5:49:21:21:
40:14:32:af:5a:f2:75:89:99:ba:38:87:b9:d0:a1:cc:3f:cb:
64:af:2b:e9:be:02:31:c2:d8:ac:03:05:97:4a:1f:d1:55:10:
ac:db:56:3b:5a:06:23:a5:44:df:a7:a4:a4:45:07:e5:3d:15:
9a:da:4c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:20 2026 by rpki-client