Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json)
Hash identifier: tow+sOsfoLHohl1lfClXgX1W7pXn8XdAUsP/fHUvHkE=
Subject key identifier: 22:27:13:9C:71:65:69:7D:5E:06:F9:27:DA:86:5C:F3:60:CF:95:B0
Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Certificate serial: 019F8FEC0986047BBCC09F3B24FAA99D4E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
Manifest number: 0408
Signing time: Thu 23 Jul 2026 17:00:38 +0000
Manifest this update: Thu 23 Jul 2026 17:00:38 +0000
Manifest next update: Fri 24 Jul 2026 17:00:38 +0000
Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: brqnkGOZW9Ig40z3pOgxEg93vS4EGIsDJX3qg6XGbPY=)
2: Qu5Uc6FGCB6Uw3VbbjAKqmFxNlI.roa (hash: bpE3q+0F77eucA0rQszJF+sVUPQwfiSRj3/qDaiDMq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:09:86:04:7b:bc:c0:9f:3b:24:fa:a9:9d:4e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Validity
Not Before: Jul 23 17:00:38 2026 GMT
Not After : Jul 24 17:00:38 2026 GMT
Subject: CN=2227139c7165697d5e06f927da865cf360cf95b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:57:3b:86:52:ad:d9:cf:ea:49:7e:67:75:
16:0b:f4:52:6e:2d:a1:e8:64:0a:8b:1a:cf:36:15:
20:e8:da:83:cb:41:af:71:6b:d6:0e:91:a9:b9:b9:
a9:bc:ef:cf:63:69:c9:b9:18:bc:20:60:5b:cc:10:
8b:d0:63:ee:aa:4c:28:93:25:7e:cf:7f:fa:97:0d:
d4:0f:ce:20:c3:a8:f7:9c:ea:25:4f:8e:1a:e0:03:
6b:6f:3d:9d:e8:a4:1d:06:89:df:7b:09:ac:3f:b3:
b1:f7:80:5e:a7:9e:c8:c8:e5:f2:14:9d:92:88:9d:
11:25:03:b3:9a:fe:78:75:e2:66:29:79:19:a0:80:
e2:57:ee:61:8a:15:de:57:9c:bd:58:78:ae:00:76:
81:c4:85:c7:06:7a:41:f5:0b:58:ce:9c:30:8d:eb:
ec:a9:0e:dd:a9:9b:a9:6a:67:9a:bf:63:03:88:da:
b0:f7:bf:bf:14:46:0f:02:2f:ce:73:4b:7b:0b:af:
72:b3:f9:67:da:98:4e:83:f3:fe:ef:57:78:05:41:
ca:60:26:93:39:8b:d7:3c:df:7c:9d:de:6b:e4:19:
63:5b:81:72:1a:50:fe:cd:30:f0:ab:3b:06:2d:3d:
f7:8c:41:ff:a1:69:6b:97:4b:2c:00:c8:0e:75:6e:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:27:13:9C:71:65:69:7D:5E:06:F9:27:DA:86:5C:F3:60:CF:95:B0
X509v3 Authority Key Identifier:
keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:20:91:59:76:69:85:99:97:b3:03:d6:f9:95:ee:c0:cd:7f:
ce:d0:40:fc:d3:8d:e0:15:17:b6:52:72:18:fe:36:9a:c7:68:
14:a5:37:c5:26:e8:08:11:d9:74:0c:9e:77:6c:00:73:68:06:
16:c7:b3:20:a3:20:74:0c:16:1b:cd:ad:de:a1:01:7c:91:e7:
0b:7a:54:95:18:a5:a6:af:69:52:f7:85:58:89:d9:64:1d:43:
88:da:87:80:f1:c5:2a:2d:c0:29:e5:a6:18:7e:00:18:44:fc:
d5:d8:42:b5:cf:90:3a:08:67:c0:90:fd:f4:cb:a3:49:b0:0e:
80:04:5d:65:c2:bd:75:5c:46:30:9e:ac:76:95:f9:d9:58:43:
6d:a3:0d:0f:ad:98:07:36:8c:66:80:81:cb:a4:4a:67:51:e0:
e8:51:08:c2:af:b6:30:41:5e:4f:09:e0:87:ce:5a:08:07:36:
81:43:a7:91:30:35:4e:7d:d8:89:81:de:da:e2:55:8c:91:e6:
c5:c7:49:35:3b:cd:7a:02:0d:1b:6a:f9:9e:1f:34:7b:a9:87:
ef:f8:24:20:84:9c:08:88:5e:3c:0f:46:be:2d:6a:ba:9b:3c:
c2:a7:16:34:6b:07:b0:b5:db:6e:c2:2c:f2:c5:4f:ab:0a:79:
6a:fb:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:39:28 2026 by rpki-client