Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File: 4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier: xzhLmWUmeGtnRb/ZKqGNZbFXe4gN+nNdHUtycyKs2JE=
Subject key identifier: F5:63:CF:18:14:ED:43:C8:B8:BA:47:AA:21:69:3F:45:EC:72:FC:E7
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial: 019D29613B5728407F27A980A439F82B2654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number: 0B5F
Signing time: Thu 26 Mar 2026 09:02:11 +0000
Manifest this update: Thu 26 Mar 2026 09:02:11 +0000
Manifest next update: Fri 27 Mar 2026 09:02:11 +0000
Files and hashes: 1: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: YiEwKUBbyWoQyacQYR6BMRJv0aSzzHTeI0YGFKhUdj4=)
2: uZAkdvgnla4W0XfXq_LcU0XnYDc.roa (hash: yjPqez282iszAcd+/RqL31Peh6NQ/8RPBG85snT1+sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:3b:57:28:40:7f:27:a9:80:a4:39:f8:2b:26:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Validity
Not Before: Mar 26 09:02:11 2026 GMT
Not After : Mar 27 09:02:11 2026 GMT
Subject: CN=f563cf1814ed43c8b8ba47aa21693f45ec72fce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:ec:3c:b1:fc:9b:70:66:0a:e7:c7:ef:7a:
19:f5:12:fb:20:8d:89:19:da:8e:3a:63:14:53:d3:
b4:f3:42:eb:57:8f:4b:42:bc:5d:0a:68:d2:56:91:
3f:1b:10:f7:cb:ab:3b:f6:9f:0a:dc:cf:99:29:6b:
06:c3:be:16:20:3a:56:cd:13:61:74:68:88:2d:65:
07:80:62:df:77:a1:a7:f1:66:a9:7c:01:da:c6:c3:
00:27:3f:c4:ea:db:19:c4:ba:eb:49:65:39:f5:8e:
af:ea:e6:61:30:a9:e3:90:45:2c:3b:ff:69:42:f4:
77:49:05:da:d1:d7:a6:ac:fc:81:e3:5f:da:0f:0a:
0b:91:f6:5c:90:c3:cb:f9:dd:88:1f:22:17:0e:4d:
4d:45:3e:4b:3c:d5:3b:61:25:2a:c8:5b:a4:d2:51:
91:f0:8d:d1:60:10:a4:a3:7f:af:44:04:56:ea:44:
fe:42:ac:a7:05:a8:35:bc:5f:97:ab:68:e5:42:41:
12:48:df:00:ca:7a:62:09:05:27:f2:e1:8c:cc:de:
01:e0:c5:95:38:f6:18:f7:11:dc:f1:1d:88:03:d7:
88:52:66:55:97:08:ca:9f:57:f5:fe:3c:46:e7:bc:
ef:c1:d8:b9:2f:6e:41:aa:10:f5:ec:51:2c:2d:ea:
c9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:CF:18:14:ED:43:C8:B8:BA:47:AA:21:69:3F:45:EC:72:FC:E7
X509v3 Authority Key Identifier:
keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1a:5a:54:a2:20:5c:4f:77:d4:de:d1:9c:52:12:b7:12:ef:
3e:ae:b6:0c:c0:e6:97:a3:ad:02:b4:7e:ae:6c:66:81:5c:27:
c1:8a:bd:72:1a:95:5d:81:de:5d:21:0d:38:1f:c4:82:14:74:
76:14:b1:66:2b:bd:35:a3:a4:16:a6:00:f5:3d:15:7c:22:d7:
9b:5e:6c:a6:a4:36:14:3d:ba:17:01:c8:89:9b:f0:08:7a:53:
46:b8:79:48:fd:f1:e0:a5:81:58:06:cc:b4:07:c4:24:45:96:
2b:27:1b:e0:96:23:e5:96:44:fa:8a:b3:a5:31:f5:bc:00:c6:
98:69:76:5a:1a:3e:c2:85:70:d5:a2:8e:9e:0a:fb:f6:e0:8e:
53:bc:b8:61:6d:da:f1:06:0c:55:6f:37:5a:57:37:cc:15:a4:
94:da:5d:ba:f7:47:06:e9:b5:1f:21:cf:8f:79:ba:d4:55:13:
88:c2:4b:f1:01:26:6d:c4:3b:cf:4b:cf:40:78:93:4d:04:6d:
49:59:2e:a1:f9:47:1e:71:a4:7b:1d:86:70:9e:87:b8:fd:40:
b2:aa:eb:d3:ca:8a:79:e9:19:ab:6a:94:ea:a1:76:f4:a8:9a:
a9:49:b2:36:17:20:55:c0:1d:52:5d:45:ba:11:cb:ab:6e:7c:
b5:63:c0:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYTtXKEB/J6mApDn4KyZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZWJkYjY5YTMzZThmM2FmMzYzYWUxNDRmODUzNTM4ZTgw
MzFiNjMwHhcNMjYwMzI2MDkwMjExWhcNMjYwMzI3MDkwMjExWjAzMTEwLwYDVQQD
EyhmNTYzY2YxODE0ZWQ0M2M4YjhiYTQ3YWEyMTY5M2Y0NWVjNzJmY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2rsPLH8m3BmCufH73oZ9RL7II2J
GdqOOmMUU9O080LrV49LQrxdCmjSVpE/GxD3y6s79p8K3M+ZKWsGw74WIDpWzRNh
dGiILWUHgGLfd6Gn8WapfAHaxsMAJz/E6tsZxLrrSWU59Y6v6uZhMKnjkEUsO/9p
QvR3SQXa0demrPyB41/aDwoLkfZckMPL+d2IHyIXDk1NRT5LPNU7YSUqyFuk0lGR
8I3RYBCko3+vRARW6kT+QqynBag1vF+Xq2jlQkESSN8AynpiCQUn8uGMzN4B4MWV
OPYY9xHc8R2IA9eIUmZVlwjKn1f1/jxG57zvwdi5L25BqhD17FEsLerJgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVjzxgU7UPIuLpHqiFpP0XscvznMB8GA1UdIwQY
MBaAFODr22mjPo8682OuFE+FNTjoAxtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kOGM0YmEtMWM0OC00ODBiLWJiNTkt
ZDIzMTBiYmEwZTExLzEvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kOGM0YmEtMWM0OC00ODBiLWJiNTktZDIzMTBiYmEwZTEx
LzEvNE92YmFhTS1qenJ6WTY0VVQ0VTFPT2dERzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBpaVKIg
XE931N7RnFIStxLvPq62DMDml6OtArR+rmxmgVwnwYq9chqVXYHeXSENOB/EghR0
dhSxZiu9NaOkFqYA9T0VfCLXm15spqQ2FD26FwHIiZvwCHpTRrh5SP3x4KWBWAbM
tAfEJEWWKycb4JYj5ZZE+oqzpTH1vADGmGl2Who+woVw1aKOngr79uCOU7y4YW3a
8QYMVW83Wlc3zBWklNpduvdHBum1HyHPj3m61FUTiMJL8QEmbcQ7z0vPQHiTTQRt
SVkuoflHHnGkex2GcJ6HuP1Asqrr08qKeekZq2qU6qF29KiaqUmyNhcgVcAdUl1F
uhHLq258tWPAJA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:40 2026 by rpki-client