Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json)
Hash identifier: 5JL8stOpO4dickOyz4qiz9SJWPMYBVv28dazm4GGwVo=
Subject key identifier: 4F:7B:56:FB:1A:D4:C4:CC:1F:9E:AD:20:8C:61:12:05:CA:35:E1:1A
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial: 019D2884820A0B56CC5DAADAE7F9D9BD38EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
Manifest number: 0458
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: OmjdAjVWAeN7nazvaN8tyky8gB4.roa (hash: oILOHbkx48Up7aMbK7MsGxijo68OXba8v88+kgI/k8w=)
2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: Nl1astx+MkXdzq4buaEN9URiv8o3TbWgiQqDADgIxGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:82:0a:0b:56:cc:5d:aa:da:e7:f9:d9:bd:38:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=4f7b56fb1ad4c4cc1f9ead208c611205ca35e11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:03:c0:51:10:43:37:7d:ae:92:a3:99:28:
f3:57:e4:04:c9:d9:d2:01:6c:9f:a8:28:4b:a9:96:
99:83:71:53:c9:1b:33:36:d2:4e:12:ac:67:6f:e7:
1a:40:17:de:92:cb:20:66:66:6f:93:86:f1:99:73:
f9:61:ad:5b:bf:04:f2:0e:4d:d7:0a:e0:30:ea:74:
58:db:94:86:b2:a9:17:b1:3b:d2:f1:d9:5a:4f:1d:
5f:1d:15:cf:35:d3:91:8e:5c:35:0c:f1:61:3a:0e:
59:0a:c5:9f:ed:b1:1b:0b:45:de:4c:e8:93:08:8e:
08:e1:c2:52:04:c1:0e:6b:42:7c:f5:bf:00:2f:eb:
10:95:57:d6:80:0a:7d:3e:f1:9c:5d:4a:e3:a7:00:
72:20:cc:ca:e7:c1:5f:3e:04:9c:f8:e7:a2:a2:d0:
d0:35:03:c9:8b:33:7e:41:df:cd:ed:69:b4:d2:33:
c6:c3:31:ec:69:45:a8:96:24:8f:4e:2c:d9:72:ca:
7c:40:a0:e0:ce:89:e0:e7:dc:82:29:db:ce:ad:70:
61:83:06:f2:26:6e:12:16:f4:07:96:a6:5b:d4:64:
d5:50:a5:85:14:0f:1d:ee:8b:da:81:53:c2:71:f1:
11:f3:34:6d:78:27:75:b7:a0:01:aa:6a:c8:cd:28:
da:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7B:56:FB:1A:D4:C4:CC:1F:9E:AD:20:8C:61:12:05:CA:35:E1:1A
X509v3 Authority Key Identifier:
keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:25:10:cf:32:8b:7b:27:9c:b9:73:34:50:a0:ee:57:eb:3d:
7f:d6:47:ed:b4:6e:e9:60:5e:ce:c6:9c:fe:7c:58:4c:2e:0a:
2e:85:e0:9f:21:76:4e:c9:77:2a:dd:3f:9e:b1:ae:41:fc:9c:
89:1c:91:28:a0:54:de:51:78:74:a2:09:1f:2a:d6:72:e9:55:
db:bd:16:90:5d:a7:51:0a:da:c8:99:83:36:f7:7f:62:4f:0f:
42:7d:8e:da:d7:25:ee:fc:af:cd:6d:42:e3:53:c5:84:7f:42:
cc:5c:1a:e9:41:77:e8:93:4b:cb:f8:4a:3b:1b:51:12:de:89:
68:b9:16:8e:df:e8:4e:fc:45:64:c3:93:26:2b:23:da:6c:4c:
62:38:f8:50:51:f3:c3:7f:c7:52:a7:0f:b2:b3:c7:a5:34:34:
be:46:25:26:2d:d2:3b:ba:21:cd:a3:84:65:09:18:83:e8:3d:
00:34:b3:5c:09:63:01:4a:46:9f:36:6a:ec:94:50:16:04:36:
ff:f5:11:99:c1:5f:44:36:5c:fd:80:29:1f:c5:4b:d1:68:ce:
04:cd:bb:be:de:73:94:f2:33:4c:94:45:e2:75:67:18:a0:ea:
db:4f:5f:0c:32:d9:a6:ea:35:11:67:b5:f8:70:3f:ef:67:1d:
25:d5:a6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:05 2026 by rpki-client