Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
File: 4OU7sw0HUg-FeuZW962BPyLv0VI.mft (raw, json)
Hash identifier: wh3ofgdC0LnngagSVd/PG8NHniRebhZi9NY5tH+tPH4=
Subject key identifier: 26:51:16:85:82:BD:71:57:FE:EA:16:AB:3F:20:7A:8E:E7:EC:E5:A2
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Certificate issuer: /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial: 01A1CAE94EF05D51A2B3EDD96B07AD3FD4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
Manifest number: 0381
Signing time: Wed 11 Nov 2026 14:00:50 +0000
Manifest this update: Wed 11 Nov 2026 14:00:50 +0000
Manifest next update: Thu 12 Nov 2026 14:00:50 +0000
Files and hashes: 1: 4OU7sw0HUg-FeuZW962BPyLv0VI.crl (hash: dYg19Hcpo7hwGW5Zw1nhS+Je5UW6lPh4SAUg+y4JweE=)
2: VdHoxGlnRqHLH1BFJzKzY5i5REw.roa (hash: dsaCJE0OYhxYSMRnj1r3I0s5ntGNaUFaI5WVluKFvG4=)
3: xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa (hash: LniWd40MUm27qbAUJ/AFuq8QyhRMHVdc7tCz6NRyg3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:e9:4e:f0:5d:51:a2:b3:ed:d9:6b:07:ad:3f:d4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Validity
Not Before: Nov 11 14:00:50 2026 GMT
Not After : Nov 12 14:00:50 2026 GMT
Subject: CN=2651168582bd7157feea16ab3f207a8ee7ece5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ba:ab:b4:d9:51:b3:a1:00:ae:a2:75:b3:69:
8e:d9:0b:66:77:ac:59:79:cf:e3:2b:ba:b1:73:99:
e0:d9:bd:21:54:74:22:a7:ca:6b:80:b3:42:f3:8c:
1b:8e:18:fd:de:10:63:02:99:6e:b6:a1:6d:10:e1:
98:e6:85:1a:8d:a4:bc:e3:68:da:8a:55:1c:43:68:
cd:45:98:d6:a3:0d:a8:90:b6:1f:66:47:e8:09:7a:
20:d9:cb:d5:06:09:f9:5f:cb:3b:73:4b:dc:5c:63:
fd:44:87:43:f1:b9:fd:79:63:ec:89:1c:a6:0a:e7:
ba:a8:a7:53:73:45:e9:bd:31:d7:de:f5:1f:13:9c:
0d:0d:0f:a8:f4:3d:2a:45:96:92:09:d1:f1:83:65:
21:a2:2f:e6:9d:9e:fa:1d:8f:15:0e:13:be:6e:e7:
46:f6:6b:55:52:f9:d8:f1:b6:55:9e:0f:f9:1a:7f:
33:fc:97:47:51:21:17:8d:86:70:3a:50:c2:b9:10:
62:cd:8b:79:ef:b8:45:ff:1a:63:d6:ec:b9:42:64:
5b:d8:cd:67:e7:fa:39:13:fb:de:fe:d3:83:cf:34:
59:ba:f1:2e:24:cb:4d:b5:7c:49:ab:65:a7:25:3b:
5d:a6:11:7d:d8:16:18:fa:a9:b7:27:4e:09:5d:93:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:51:16:85:82:BD:71:57:FE:EA:16:AB:3F:20:7A:8E:E7:EC:E5:A2
X509v3 Authority Key Identifier:
keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a5:22:f7:49:a8:f2:6e:32:87:ff:56:29:40:b5:1d:6a:5c:
c9:69:6e:c7:df:66:27:95:75:58:7d:ea:2c:c7:32:f3:f6:8a:
fe:be:0e:21:95:8f:22:6a:ec:b8:ff:9b:fa:01:ff:51:4b:78:
6e:ae:61:88:cd:04:dc:fc:ae:6a:57:07:fb:82:95:51:be:4f:
49:c8:10:ba:70:cc:4f:1f:f0:e2:06:dc:5e:5d:f1:69:29:41:
8c:e6:ed:b7:e2:08:80:a3:ac:1e:2c:50:09:5e:df:ef:63:1b:
1e:0f:61:a2:1d:85:d7:19:c2:ee:13:8e:9a:2d:63:2b:7b:03:
40:f8:67:75:1b:2d:68:e6:24:4b:15:3a:74:88:5c:ce:ad:52:
98:35:89:6f:19:5f:c3:43:d9:a0:ac:15:00:84:43:4a:b8:98:
f1:37:ab:1e:99:9e:0d:cf:01:5d:93:37:1a:74:fa:b9:a7:7f:
a8:02:ad:ae:e0:0f:be:70:de:51:37:57:c5:d0:71:0c:56:60:
23:53:82:f2:84:3d:fe:b9:de:97:6a:45:9b:d5:ba:40:b4:53:
a2:7b:36:c8:aa:5e:0e:dc:33:a9:75:0f:f6:e3:9d:19:c3:81:
f7:19:b5:74:0d:21:4f:bd:7c:3a:67:2f:e3:14:2c:b4:db:6c:
24:50:1f:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHK6U7wXVGis+3ZawetP9TKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZTUzYmIzMGQwNzUyMGY4NTdhZTY1NmY3YWQ4MTNmMjJl
ZmQxNTIwHhcNMjYxMTExMTQwMDUwWhcNMjYxMTEyMTQwMDUwWjAzMTEwLwYDVQQD
EygyNjUxMTY4NTgyYmQ3MTU3ZmVlYTE2YWIzZjIwN2E4ZWU3ZWNlNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bqrtNlRs6EArqJ1s2mO2Qtmd6xZ
ec/jK7qxc5ng2b0hVHQip8prgLNC84wbjhj93hBjAplutqFtEOGY5oUajaS842ja
ilUcQ2jNRZjWow2okLYfZkfoCXog2cvVBgn5X8s7c0vcXGP9RIdD8bn9eWPsiRym
Cue6qKdTc0XpvTHX3vUfE5wNDQ+o9D0qRZaSCdHxg2Uhoi/mnZ76HY8VDhO+budG
9mtVUvnY8bZVng/5Gn8z/JdHUSEXjYZwOlDCuRBizYt577hF/xpj1uy5QmRb2M1n
5/o5E/ve/tODzzRZuvEuJMtNtXxJq2WnJTtdphF92BYY+qm3J04JXZMHbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZRFoWCvXFX/uoWqz8geo7n7OWiMB8GA1UdIwQY
MBaAFODlO7MNB1IPhXrmVvetgT8i79FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE9VN3N3MEhVZy1GZXVaVzk2MkJQeUx2MFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iYzJmNTMtOGU3NS00ZTBlLWJmZDQt
MjliOWJmNTNhNTdmLzEvNE9VN3N3MEhVZy1GZXVaVzk2MkJQeUx2MFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iYzJmNTMtOGU3NS00ZTBlLWJmZDQtMjliOWJmNTNhNTdm
LzEvNE9VN3N3MEhVZy1GZXVaVzk2MkJQeUx2MFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKUi90mo
8m4yh/9WKUC1HWpcyWlux99mJ5V1WH3qLMcy8/aK/r4OIZWPImrsuP+b+gH/UUt4
bq5hiM0E3PyualcH+4KVUb5PScgQunDMTx/w4gbcXl3xaSlBjObtt+IIgKOsHixQ
CV7f72MbHg9hoh2F1xnC7hOOmi1jK3sDQPhndRstaOYkSxU6dIhczq1SmDWJbxlf
w0PZoKwVAIRDSriY8TerHpmeDc8BXZM3GnT6uad/qAKtruAPvnDeUTdXxdBxDFZg
I1OC8oQ9/rnel2pFm9W6QLRTons2yKpeDtwzqXUP9uOdGcOB9xm1dA0hT718Omcv
4xQstNtsJFAfmQ==
-----END CERTIFICATE-----
Generated at Wed Nov 11 22:50:38 2026 by rpki-client