Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json)
Hash identifier: DFh6uUnABNIdbf2nNI0O1F9WQ8MvWuhTuAfPkBTPS8M=
Subject key identifier: 8B:35:31:70:76:E5:5F:A9:7C:F7:0D:8D:8F:B8:99:E6:24:3F:1F:11
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 01A1C51ED19D3806EF38FF03418DCE51A2A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
Manifest number: 10A0
Signing time: Tue 10 Nov 2026 11:01:33 +0000
Manifest this update: Tue 10 Nov 2026 11:01:33 +0000
Manifest next update: Wed 11 Nov 2026 11:01:33 +0000
Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: cTyOQQJV9cUtAnAldIzLQnJM3q3igIylGI24QfQSPMc=)
2: FeEckT4qIPnFBupFbhMx-hvffm4.roa (hash: dMuaS63v6Vf4ExEsJJZptpBNFEkp0v5Qz3wn0QyTq14=)
3: pDrIjzZmP19TaAzRkXVsR5PgXDM.roa (hash: EhOVo2mVh+0JylRQJforOe474zHiA+LVqDCnvMtMlzg=)
4: s_-LqLAwoVzNq7MMJZajpyC4Khk.roa (hash: ClKhGIdEbTXNOQjYUKo8kUllH20eM7IYqgOaHPxfrg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:1e:d1:9d:38:06:ef:38:ff:03:41:8d:ce:51:a2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Nov 10 11:01:33 2026 GMT
Not After : Nov 11 11:01:33 2026 GMT
Subject: CN=8b35317076e55fa97cf70d8d8fb899e6243f1f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:ec:1f:63:2a:0b:a7:86:0f:54:94:9d:af:
b2:3c:89:5a:d6:b5:91:41:02:6e:e0:8d:ab:93:ff:
56:f8:b9:ba:25:1b:b2:be:b5:91:05:9e:23:5c:18:
b9:61:7e:96:3f:38:95:84:c3:eb:1c:c5:e2:b6:c8:
c8:15:f3:e7:39:e2:6b:8f:04:cb:aa:94:46:6d:91:
48:46:2b:8d:2f:46:fe:33:be:64:1f:03:75:fd:a6:
d7:31:e5:81:90:0f:fd:f4:a3:8e:11:f8:af:e2:c1:
80:c9:be:b6:8d:cb:b7:21:2a:f4:c0:bb:1b:36:55:
f2:1e:68:6a:41:7c:bd:2e:90:24:28:d7:49:ba:36:
c9:ea:e5:69:ee:ae:99:33:2c:bc:aa:6e:e2:b0:a5:
e9:65:d3:4a:3b:94:1e:75:ae:ac:35:f9:ab:63:61:
19:0c:46:7b:08:c3:b6:6f:ee:8f:6b:8f:59:6e:f5:
1e:72:94:b6:df:40:18:67:04:5b:42:45:f3:0c:12:
45:b6:a8:18:92:d0:e5:c9:7e:ee:67:a9:97:99:6e:
77:b4:fb:2e:fe:76:49:25:b7:22:01:51:56:e2:e1:
56:78:c4:f6:94:5f:95:0a:15:e7:1b:12:f8:58:4b:
eb:e7:a9:86:70:05:be:44:e5:d8:cd:bd:cf:01:22:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:31:70:76:E5:5F:A9:7C:F7:0D:8D:8F:B8:99:E6:24:3F:1F:11
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3a:36:a3:0e:63:4c:66:99:ac:e5:b6:75:f0:fe:31:c5:9e:
23:e1:42:38:db:98:84:de:34:0a:a8:ab:89:54:e8:9c:2b:d2:
e2:b6:58:d1:91:da:d9:03:e2:e3:4b:cb:9e:e9:94:7a:d4:0b:
c4:7f:80:0d:08:66:dd:0f:a6:81:75:58:9e:07:37:6b:9e:78:
4c:88:df:27:3a:76:f5:77:5f:8a:1b:3a:43:37:3b:3d:91:a7:
2a:ac:b2:21:09:89:f9:7d:4e:9c:98:62:15:20:fb:60:29:d6:
b2:94:e8:df:f2:71:1b:46:37:ee:a0:e1:3e:d9:ce:c2:4f:d5:
c1:0a:94:5f:82:5a:7e:d0:fe:45:17:9a:79:29:57:49:8b:af:
c9:3b:67:8a:24:3c:70:9c:55:69:99:bd:67:d2:e2:aa:ed:58:
e9:4d:dd:18:f7:b8:9b:71:ee:d9:4a:7b:1c:82:da:99:49:65:
a4:6b:f7:5a:04:40:5f:ed:24:89:48:af:14:ea:56:f1:c1:f6:
f3:b8:01:19:b8:24:cf:5c:4e:96:10:7e:9e:7e:b1:3d:4b:37:
d6:68:a1:cb:80:8f:eb:93:e8:42:fb:b7:5c:8a:80:71:16:6f:
fe:90:9c:61:0a:18:1d:94:8b:8a:a4:d4:38:00:aa:0c:ab:0a:
cd:76:f6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 21:03:04 2026 by rpki-client