Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
File: 4OU7sw0HUg-FeuZW962BPyLv0VI.mft (raw, json)
Hash identifier: HKBLW/2aFbatoS6mcVjUMmCC4ZeHZadm3me2Nsp7VlU=
Subject key identifier: F5:31:3F:12:87:C0:F9:91:97:56:27:58:8E:59:C8:F8:46:C5:8A:85
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Certificate issuer: /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial: 019D29296AB502CCF029C2F1E24C1C8620A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
Manifest number: 011B
Signing time: Thu 26 Mar 2026 08:01:13 +0000
Manifest this update: Thu 26 Mar 2026 08:01:13 +0000
Manifest next update: Fri 27 Mar 2026 08:01:13 +0000
Files and hashes: 1: 4OU7sw0HUg-FeuZW962BPyLv0VI.crl (hash: 2reWEGcgD4VyhoUcHgG00Wtae3Y8/9p7+MH4E6rNEDg=)
2: VdHoxGlnRqHLH1BFJzKzY5i5REw.roa (hash: dsaCJE0OYhxYSMRnj1r3I0s5ntGNaUFaI5WVluKFvG4=)
3: xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa (hash: LniWd40MUm27qbAUJ/AFuq8QyhRMHVdc7tCz6NRyg3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:6a:b5:02:cc:f0:29:c2:f1:e2:4c:1c:86:20:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Validity
Not Before: Mar 26 08:01:13 2026 GMT
Not After : Mar 27 08:01:13 2026 GMT
Subject: CN=f5313f1287c0f991975627588e59c8f846c58a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:ce:a0:ed:c0:b0:ed:4a:1f:68:63:e1:8e:
77:40:83:8d:05:02:cd:ba:74:97:a9:25:ca:bd:1b:
02:da:31:56:b4:93:e1:1c:c6:97:8f:d4:99:e2:8e:
7b:8c:bb:27:cd:ef:01:00:ab:21:69:14:fe:82:f0:
aa:c1:80:f7:53:4d:da:da:b0:58:bb:3b:91:73:a2:
fe:d8:95:81:b1:47:80:fe:03:4c:5e:08:18:b1:14:
78:60:36:86:9b:cf:91:41:d8:0b:fa:1e:7e:e1:0c:
2f:44:6f:5b:81:04:37:e1:91:92:3d:47:2d:7c:16:
0c:bf:6f:f3:5d:cd:f5:fa:50:34:03:f9:2a:89:e6:
bc:41:f6:8e:12:2c:ad:72:c1:d4:b2:59:d5:68:13:
2e:46:51:cf:db:91:48:19:f9:49:14:22:08:9b:13:
f3:d7:c3:5a:b2:da:00:a4:d5:ef:d6:03:26:3b:49:
02:e0:a2:a1:b9:67:15:4d:d5:7a:e7:dd:a2:e8:55:
71:f3:0b:fc:75:e8:08:a3:1a:ee:c3:b0:4a:ba:d8:
eb:fd:b4:cb:a7:b4:8f:5b:37:8f:51:fa:98:7a:c1:
5a:4b:80:eb:2c:ca:09:d3:4f:0e:a8:43:64:65:d5:
26:39:3a:77:07:e9:a0:c7:cc:ee:99:c9:96:58:72:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:31:3F:12:87:C0:F9:91:97:56:27:58:8E:59:C8:F8:46:C5:8A:85
X509v3 Authority Key Identifier:
keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:da:15:0e:96:81:c6:b0:76:27:0d:38:f0:08:bb:d3:72:3e:
ed:51:db:46:1b:3c:76:f4:f3:69:51:1e:6a:b7:8d:02:0d:fd:
f6:28:60:4a:b2:5f:2f:71:da:fa:35:4c:2d:4f:3d:98:45:4e:
0d:6f:23:da:1c:85:31:a4:aa:45:b1:42:06:9e:c7:85:8c:f5:
f5:c2:d0:53:c4:d3:b7:0f:71:49:58:0b:4f:1e:14:dc:c1:f4:
a5:b0:4e:00:d1:e4:b8:f6:c1:6e:97:82:2c:49:98:e2:eb:18:
b7:b9:63:45:eb:d1:2e:a3:d9:6d:63:bf:75:d9:2c:f2:3b:3a:
d4:3a:cd:55:ae:82:ab:8d:25:9a:89:91:00:10:aa:52:c8:89:
0c:24:26:56:ae:ef:be:48:be:ce:39:9e:60:a8:39:0e:a4:12:
3e:a8:6e:ce:80:7e:35:35:0b:80:bd:99:01:9e:76:ef:b6:d1:
47:6b:c0:3a:e1:cf:1a:cf:50:30:3b:d8:e7:ed:8c:d8:56:a4:
4b:fe:ad:05:ab:ee:58:13:c8:df:7a:58:82:39:8b:2c:da:a2:
0d:b5:31:23:f9:29:9b:13:1e:59:b8:99:ff:fd:d8:84:af:18:
b3:d9:df:85:85:79:c9:3d:5b:4e:f1:c3:1b:d6:e3:b5:ba:3c:
5d:27:b5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:49:32 2026 by rpki-client