Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File: 4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier: BsvyaIZ1AbuwIy3W3dmo3r5ZuS0VsVz79Me+ERDyCA8=
Subject key identifier: A8:FC:E0:2A:46:4F:B0:09:F8:9E:96:E5:16:78:11:69:AE:E6:AE:8A
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial: 01A0D5DD9CF5E115D1402EC5767B57C412D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number: 0D46
Signing time: Fri 25 Sep 2026 00:01:05 +0000
Manifest this update: Fri 25 Sep 2026 00:01:05 +0000
Manifest next update: Sat 26 Sep 2026 00:01:05 +0000
Files and hashes: 1: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: YNyy02dZa7A2GA4c9C4/s2YtRmrTF6OpYmIR6BQigv4=)
2: uZAkdvgnla4W0XfXq_LcU0XnYDc.roa (hash: yjPqez282iszAcd+/RqL31Peh6NQ/8RPBG85snT1+sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:9c:f5:e1:15:d1:40:2e:c5:76:7b:57:c4:12:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Validity
Not Before: Sep 25 00:01:05 2026 GMT
Not After : Sep 26 00:01:05 2026 GMT
Subject: CN=a8fce02a464fb009f89e96e516781169aee6ae8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:1e:45:1a:23:a9:ba:e2:5e:c7:41:b3:f3:
0e:aa:66:9e:b8:8d:7b:2c:ed:50:b2:94:6f:ca:2a:
22:1b:ca:4b:f0:ba:12:c4:cc:38:97:09:af:98:b6:
ab:6c:b2:3f:05:66:33:c4:19:ab:c2:b2:d5:d8:b6:
86:08:70:75:81:8e:d0:b3:0c:9c:ef:45:f9:aa:f1:
57:36:80:a9:f9:4c:3b:e0:e2:6f:3b:b9:a4:bc:72:
03:9d:68:52:5a:24:08:45:3c:8d:e5:1c:f0:9e:9b:
44:b9:9b:ea:7f:2b:74:82:a3:39:15:87:27:35:f5:
05:ae:ce:28:2c:a4:8f:6b:8b:be:ba:8a:3a:3d:68:
71:a6:9a:cd:c9:8c:89:0c:15:46:bb:aa:cc:ef:ad:
2b:d2:35:13:ea:77:5e:24:86:ff:b8:d5:5a:37:73:
70:8b:68:73:d3:2a:98:4a:b7:a6:5f:b0:bb:6c:26:
ca:ae:5a:e0:85:d0:a3:a3:ef:5f:95:1b:7e:aa:01:
43:59:97:6a:69:e2:82:21:f4:32:b7:61:35:88:3f:
a6:3b:3e:13:47:87:4f:cf:39:61:2b:f4:4d:90:4f:
0b:24:e0:96:c1:9b:d6:f7:ea:9f:a6:5c:7d:ea:af:
3c:3e:91:16:f3:75:75:2b:2c:2b:7c:c0:bc:65:6c:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FC:E0:2A:46:4F:B0:09:F8:9E:96:E5:16:78:11:69:AE:E6:AE:8A
X509v3 Authority Key Identifier:
keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7c:ac:44:b2:72:7c:2a:8a:bc:0c:48:af:e2:0b:ff:e5:56:
92:79:04:8a:75:da:0c:40:7b:9e:a2:3d:84:35:24:2f:3d:99:
1d:03:f8:6f:d6:69:24:44:ba:4d:a9:e6:b0:40:16:0d:eb:a2:
d7:ed:73:42:02:05:16:28:44:c2:5d:77:05:47:f8:a6:32:1d:
26:61:27:ce:e7:a6:88:a4:2b:ca:13:ce:60:3c:49:dc:55:4b:
77:f7:5d:38:13:0a:f9:7a:fc:7d:ad:48:67:f5:12:9d:12:68:
b0:68:dd:ac:16:31:a8:b0:29:da:bf:f6:b2:90:79:0a:3c:4b:
2c:10:43:ea:b2:47:62:36:80:b1:17:85:c9:ca:61:98:26:3b:
7d:28:cf:8a:99:2a:9c:07:24:20:e7:33:b4:b4:73:4b:c9:af:
bd:03:23:06:53:99:df:ad:9a:88:c1:51:91:02:35:c0:16:51:
b3:a9:e8:b6:2b:51:ad:49:ba:3d:d6:f8:c2:e7:dd:63:35:c9:
0f:16:8d:f4:c6:b3:e4:ab:1d:24:3c:a9:0c:8c:58:67:7e:54:
8a:a5:d4:8c:43:09:ea:64:bc:7e:4a:f0:2a:81:e8:9c:e7:79:
f0:a1:42:6d:82:e0:1e:36:74:a9:b2:4a:8e:da:d4:f9:ea:17:
80:b5:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:44:08 2026 by rpki-client