Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
File: 4OU7sw0HUg-FeuZW962BPyLv0VI.mft (raw, json)
Hash identifier: 5j99rtGKHhSZMhjw6jwLtR0feSnccg3K4GyBsvCjogI=
Subject key identifier: 12:2F:42:FB:02:91:22:F3:88:16:F7:DA:01:1D:1E:90:CC:59:28:27
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Certificate issuer: /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial: 01A0CBFDF63DAFD8C1A1CFB718A2B53D0135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
Manifest number: 02FD
Signing time: Wed 23 Sep 2026 02:00:13 +0000
Manifest this update: Wed 23 Sep 2026 02:00:13 +0000
Manifest next update: Thu 24 Sep 2026 02:00:13 +0000
Files and hashes: 1: 4OU7sw0HUg-FeuZW962BPyLv0VI.crl (hash: KE4RJfnT1ZHqTnKW5DSOWJNIYHhqtutIeNXS3NwtV3U=)
2: VdHoxGlnRqHLH1BFJzKzY5i5REw.roa (hash: dsaCJE0OYhxYSMRnj1r3I0s5ntGNaUFaI5WVluKFvG4=)
3: xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa (hash: LniWd40MUm27qbAUJ/AFuq8QyhRMHVdc7tCz6NRyg3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fd:f6:3d:af:d8:c1:a1:cf:b7:18:a2:b5:3d:01:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Validity
Not Before: Sep 23 02:00:13 2026 GMT
Not After : Sep 24 02:00:13 2026 GMT
Subject: CN=122f42fb029122f38816f7da011d1e90cc592827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:79:3f:5f:07:6e:25:24:85:06:76:f4:98:b7:
cf:41:44:81:3c:78:bb:ea:44:cd:f4:e9:15:f4:b7:
62:75:93:53:f2:e4:d6:78:c9:84:4e:23:91:7d:fe:
c0:6c:dd:18:06:46:cb:15:d1:3e:50:6a:b2:6c:60:
af:80:e8:af:b3:92:d4:98:28:98:9e:a0:07:ce:29:
d8:6f:9c:ab:11:79:75:b2:e5:e2:8e:e0:24:6a:8b:
a1:ba:51:82:9d:8a:d2:79:d3:02:b7:34:16:20:f0:
85:1a:3e:c3:ac:cf:a8:df:b1:ad:91:25:8b:e1:6a:
c3:9a:f4:64:b2:9f:57:e4:81:6c:1c:17:96:8d:98:
f8:77:6a:d8:29:de:86:2d:cf:93:f9:ff:0a:58:7b:
42:e2:88:a8:41:ac:83:65:17:f1:f7:fd:48:04:12:
54:3d:b1:38:d3:44:f9:cc:f6:cf:65:a1:c0:ae:08:
9b:2a:66:05:0d:9a:9c:55:21:2b:61:04:0c:15:1d:
e6:3c:5a:44:69:bc:04:42:d3:13:ef:1f:ab:0d:b1:
d3:5d:c4:b6:92:24:32:ef:55:b4:7f:a4:86:b6:ab:
e7:4d:0a:0c:09:93:91:ac:dd:b2:78:2f:77:0a:2b:
d5:00:68:19:95:26:f8:13:d5:49:47:4f:4d:d3:d6:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:42:FB:02:91:22:F3:88:16:F7:DA:01:1D:1E:90:CC:59:28:27
X509v3 Authority Key Identifier:
keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:e9:a5:08:f6:1b:af:3f:9b:3b:7c:9b:df:dd:31:23:51:0c:
85:af:a6:c8:04:39:12:79:96:4f:92:1a:bf:54:92:06:83:ea:
ca:11:ba:f6:8f:52:dd:b7:69:59:39:37:0c:bf:b0:f8:4d:7b:
e4:b2:fb:68:00:88:b3:10:1b:68:14:1d:1e:57:0c:e5:9f:a2:
85:78:99:ed:88:0c:9b:c4:39:70:f3:50:4b:b6:e6:f1:07:31:
53:5a:4e:fd:55:59:6a:cf:7e:0e:f3:67:2c:16:d4:af:66:62:
cf:98:12:c3:01:e8:cb:0f:cf:7b:23:5f:f0:94:ca:f3:bc:ee:
4a:db:1f:11:1c:98:59:99:1c:61:3c:3a:0b:02:47:e4:08:bb:
a0:c6:b8:ed:e2:27:f6:5c:66:1c:64:ad:e4:12:17:26:e2:17:
c1:63:6b:24:5d:b3:64:1d:51:f5:82:d9:e8:d1:f0:bf:32:5c:
d5:0f:99:c5:cb:00:b5:6e:15:14:9c:75:a5:19:1f:9e:d8:6d:
d1:e5:ef:b7:be:5d:32:a1:04:cd:c7:47:77:81:05:bd:08:ce:
d7:ab:ec:38:7f:27:8f:b9:b6:48:b9:e2:71:2a:42:55:6c:91:
25:4d:58:72:a8:29:ff:07:26:20:85:3b:12:e2:60:89:1b:f2:
26:ef:8f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:19:18 2026 by rpki-client