
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
File: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft (raw, json)
Hash identifier: 5aUvf5khBb7MowYTM0hELEUtghXUuZU5Hjm5BUtM3/4=
Subject key identifier: 8C:07:C5:36:B6:1B:3B:FD:CA:B4:EE:28:4B:71:7B:67:19:51:B8:53
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Certificate issuer: /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial: 01A0EC9C86EB33CD4579054AAF007265D1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
Manifest number: 13BB
Signing time: Tue 29 Sep 2026 10:01:15 +0000
Manifest this update: Tue 29 Sep 2026 10:01:15 +0000
Manifest next update: Wed 30 Sep 2026 10:01:15 +0000
Files and hashes: 1: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl (hash: zh7yXPg7IThpJtfi020RI5031GbYjDGrGU+/zJCMZ+4=)
2: qUacdXtveFfY3GQNxyBrLFI9QWg.roa (hash: 64sJ2iCdgQ8mYBa6Be5jblKVmgBgQDa2NTvtAAMiVRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:86:eb:33:cd:45:79:05:4a:af:00:72:65:d1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Validity
Not Before: Sep 29 10:01:15 2026 GMT
Not After : Sep 30 10:01:15 2026 GMT
Subject: CN=8c07c536b61b3bfdcab4ee284b717b671951b853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:a0:59:68:f8:55:79:7d:fe:25:32:64:87:
01:e2:6c:8a:8d:96:af:5e:8d:a8:3d:56:9e:2a:58:
2f:d2:65:a6:f1:de:61:67:0a:24:0d:ca:71:20:d3:
2c:2c:65:34:d3:ad:1c:ad:e1:c5:fc:50:3b:13:04:
1b:04:72:32:fa:dc:f4:8a:28:f5:35:d7:03:a9:21:
51:07:63:49:c0:75:b4:89:06:31:86:81:8f:2e:40:
94:8c:e0:e1:cb:4e:52:ce:53:4d:b4:b0:f1:cb:41:
2b:a2:5d:37:73:7d:ea:7c:29:1e:86:ab:d0:24:12:
52:9d:16:1c:5b:9a:8f:1f:a6:9c:12:e1:ac:84:87:
fd:84:01:2e:a9:94:b1:b6:98:29:08:00:b6:8e:1b:
1f:00:39:fc:92:16:af:33:36:31:5b:9d:0e:4f:20:
6b:7b:9c:aa:a7:6f:a0:0f:d4:26:81:b9:cc:87:e5:
fe:af:1e:3d:df:7c:33:05:a0:fc:0b:22:b9:14:f9:
df:3a:90:98:39:3e:f8:56:86:51:5f:3d:af:00:0c:
b7:87:13:3a:6b:e8:cd:6e:99:a3:6a:35:5c:d8:af:
69:56:38:4b:df:59:12:ff:37:72:71:b7:76:d6:8b:
14:68:3a:e6:0a:2f:45:d0:3e:e2:35:34:90:d5:18:
b4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:C5:36:B6:1B:3B:FD:CA:B4:EE:28:4B:71:7B:67:19:51:B8:53
X509v3 Authority Key Identifier:
keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:19:af:0e:31:96:4b:7e:cf:d2:dc:50:b7:87:82:dd:4c:59:
be:7f:73:43:9b:aa:7c:8e:5e:cb:d7:24:51:bf:7c:92:59:95:
73:01:9d:37:0a:a6:62:dc:86:d3:81:7f:3b:a6:8b:07:03:2b:
44:2c:90:5b:85:b9:75:b7:54:0e:df:0e:c0:6b:0e:9f:86:9c:
c3:46:24:5f:e8:79:6c:19:19:b3:d1:ab:88:a0:23:74:57:ad:
9a:df:b9:f5:2a:80:43:10:6d:c7:d9:09:01:43:78:e2:65:7f:
9f:84:b2:01:0e:2c:b8:49:a5:2a:93:39:73:e8:6e:34:9c:32:
98:2b:6f:57:cb:0e:df:0c:32:ee:a0:38:1b:55:ac:3a:67:21:
c5:73:7f:36:16:83:0f:50:89:a7:83:9c:b5:88:68:54:45:cd:
35:4b:a3:97:f2:ef:78:59:a7:26:82:47:8e:f9:01:ef:36:1a:
73:64:62:b8:3d:2b:31:e9:4b:8b:43:25:25:d6:0b:0d:b5:a4:
70:a0:9b:99:f6:22:b8:09:57:ce:7f:71:9a:56:51:e7:a1:8c:
b6:67:95:0c:8b:50:78:5b:b7:0a:e9:dc:2f:de:97:e1:59:05:
ae:57:97:a4:00:15:16:12:ba:01:94:50:e1:fd:ef:a2:5c:43:
17:3c:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:19:58 2026 by rpki-client