Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
File: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft (raw, json)
Hash identifier: LIZOOM6SQPQJZL9LSJmYOrULFWnPElzqVdGnVcegI1Q=
Subject key identifier: 9A:F2:0A:25:34:4C:02:4F:F5:22:D6:8F:54:57:87:FD:B8:08:FD:B8
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Certificate issuer: /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial: 01A0D538E64AE9E6198301A29B79C0DE6EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
Manifest number: 0E8B
Signing time: Thu 24 Sep 2026 21:01:10 +0000
Manifest this update: Thu 24 Sep 2026 21:01:10 +0000
Manifest next update: Fri 25 Sep 2026 21:01:10 +0000
Files and hashes: 1: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl (hash: SwzCYjCy2jsES9Q+SqkZz0GC83mmdgB8suD9k37yhdQ=)
2: cqN849EjWfM345GXc2cPDSbYDxc.roa (hash: aUeWIhEEAn2M72ZX6VRyeBzWISXgl36qTjMPEKU7NaE=)
3: dMiPF5hRDsmVGyczjp5h0yMXvNA.roa (hash: 3OGMUms6N3Q+YmbW4ivKKL6p/UH/QnXPY3TzgOYxtkk=)
4: yXUhi2vBjaa8ds8k-vv6CwFfTf0.roa (hash: qLNfF2ctfPtKdPk/SFwkzQElr0ANhZieliEEgaCLo18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:e6:4a:e9:e6:19:83:01:a2:9b:79:c0:de:6e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Validity
Not Before: Sep 24 21:01:10 2026 GMT
Not After : Sep 25 21:01:10 2026 GMT
Subject: CN=9af20a25344c024ff522d68f545787fdb808fdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:27:07:5a:45:91:3f:d9:01:16:ea:53:b3:
46:a5:d1:5f:81:d7:9f:32:9f:12:b7:eb:f3:67:cd:
3d:c0:f8:e6:1a:9b:b6:14:e4:ad:40:8e:1e:44:45:
01:7e:b4:ee:e6:0b:b0:fa:36:b2:f9:8c:f5:4c:7b:
a9:70:23:3d:7d:9f:34:fe:2e:0f:c9:c5:31:ad:76:
e4:9e:fa:f7:0f:b5:b0:73:51:34:bb:5a:7b:91:7c:
07:53:05:b6:57:a3:15:48:a1:5b:18:e2:7b:92:5c:
1f:19:d9:dd:bc:24:4a:37:53:76:51:65:b8:64:e7:
c6:cd:3c:f6:39:43:79:bf:5e:c6:7f:e7:4f:46:63:
c3:13:04:25:2f:1c:c9:41:98:49:6b:79:2e:af:00:
73:46:26:8f:cd:f9:3a:85:8c:b8:b5:80:96:1e:d4:
8c:3e:a3:f3:16:12:8e:26:3e:1a:8a:6e:7a:ff:7f:
f4:66:51:21:21:cc:06:a9:1a:b3:06:a8:46:5d:16:
d5:26:9b:35:78:17:1d:2e:63:be:b5:0d:98:49:a0:
e8:86:0d:f0:9d:a8:60:be:d6:20:8d:4c:ba:7a:0d:
40:97:0c:e2:f9:b5:94:ba:5e:1f:f1:f1:71:f5:33:
59:1d:3a:41:25:9e:af:d4:50:d4:9c:92:80:7a:68:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F2:0A:25:34:4C:02:4F:F5:22:D6:8F:54:57:87:FD:B8:08:FD:B8
X509v3 Authority Key Identifier:
keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:23:4f:83:95:d3:dd:e0:94:0e:20:2a:9a:03:88:3d:9e:a7:
1c:03:19:30:46:a5:f9:09:61:7f:6d:07:40:34:3e:a6:e6:dd:
0e:ec:c6:16:d9:f6:91:64:8a:3f:93:e8:12:ac:eb:cf:63:a2:
c6:d6:b0:91:64:e4:26:e1:fa:d6:95:7f:ae:61:5f:0e:bb:2b:
1f:60:3b:ee:90:43:75:5e:60:d0:1e:c4:bc:18:02:1d:59:b3:
99:73:d0:96:a6:1d:47:2b:f7:56:24:e0:d3:30:4a:f6:85:66:
a0:65:82:14:cb:21:e2:20:b9:3d:10:9c:f1:9f:02:ff:f6:05:
95:cf:f5:f1:0b:c2:39:48:60:61:8a:8e:12:a7:8b:ed:5e:61:
7f:45:50:16:fd:59:35:d1:bf:9b:ec:ce:91:1b:a5:dc:ae:50:
11:7d:65:45:e6:d3:fc:7c:4c:5f:48:63:ac:12:7e:ad:20:f4:
a2:10:79:ee:02:70:de:2c:2a:0e:c6:d1:87:8f:73:39:81:9a:
c4:0f:c7:5c:a9:9d:4f:bd:7c:9a:c2:e1:b0:4d:a4:e7:cd:de:
ac:66:b4:4c:7d:39:82:0b:51:fe:50:06:f4:9e:3f:af:ad:55:
7f:f5:bf:c2:52:42:2d:f2:3f:71:47:2e:42:15:3f:1f:9c:03:
11:6e:74:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:57:41 2026 by rpki-client