Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json)
Hash identifier: PRzmFPMUCBQ3KEpF8gUIo/XJhs26+DVMvtgnaoEp/e4=
Subject key identifier: E0:F3:64:C9:6C:CD:BB:EF:C7:B0:8A:D7:03:24:40:8C:2F:91:E7:32
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 019DA56703CBB613CDE96D4D3DDAECE434F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
Manifest number: 0E7C
Signing time: Sun 19 Apr 2026 11:01:24 +0000
Manifest this update: Sun 19 Apr 2026 11:01:24 +0000
Manifest next update: Mon 20 Apr 2026 11:01:24 +0000
Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: 0ZjjL4yTBmw4k84P44tkk1OSq4J+2rt9xIrPxprZnNQ=)
2: NStJJ9e183cFfxVciTY49OglbNU.roa (hash: yb2BwVREODItjweWlbnW4dYNiNyWxIQNgI0RjZN1nJI=)
3: s_-LqLAwoVzNq7MMJZajpyC4Khk.roa (hash: ClKhGIdEbTXNOQjYUKo8kUllH20eM7IYqgOaHPxfrg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:03:cb:b6:13:cd:e9:6d:4d:3d:da:ec:e4:34:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Apr 19 11:01:24 2026 GMT
Not After : Apr 20 11:01:24 2026 GMT
Subject: CN=e0f364c96ccdbbefc7b08ad70324408c2f91e732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:d1:b9:92:50:55:5a:a6:34:75:2f:b2:70:
35:e7:51:d3:f8:f2:a9:db:dd:cf:e4:bf:7e:bb:f6:
88:cb:d9:60:32:6f:9a:20:a5:a1:6e:fa:22:ed:b3:
4c:b6:54:ac:ee:42:d3:d8:ef:0d:0b:d2:68:f7:46:
56:29:71:38:b9:69:48:43:e9:ce:ea:e4:5d:4e:24:
f6:68:e5:aa:f9:3d:32:9d:96:bf:3f:9a:46:f3:e7:
20:12:d2:e0:c1:08:b8:98:74:fa:7c:b3:74:8f:88:
54:34:27:32:fc:a7:5a:7f:97:81:86:a5:04:00:f4:
a8:df:88:fe:73:cd:d5:4f:af:07:9c:36:60:62:b6:
30:de:b5:14:e4:46:51:6a:d2:18:d4:30:5c:29:6c:
d9:0c:f8:aa:01:a0:d5:f9:49:c0:57:5e:6e:f8:16:
1a:e1:0b:65:18:4c:9d:e3:0d:a5:cb:fa:12:c4:47:
18:98:63:b3:f0:e4:5d:ec:86:c7:b1:98:00:c5:1f:
34:e3:ed:4f:4f:1a:c6:42:8a:76:c6:9d:91:47:c9:
5c:93:d8:d0:40:17:24:34:6a:9d:8a:ca:25:36:e5:
f8:62:45:41:51:1b:49:e5:11:1f:29:c9:9f:07:d9:
b0:57:0a:42:1a:dd:bb:b6:aa:87:fe:bf:f0:12:dd:
6f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F3:64:C9:6C:CD:BB:EF:C7:B0:8A:D7:03:24:40:8C:2F:91:E7:32
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:11:77:22:88:ad:7a:e7:98:a0:62:66:a5:3e:10:4b:23:78:
9b:3e:d1:4e:da:6c:df:61:a2:04:e4:47:36:79:b5:66:8d:10:
ad:d1:46:20:73:b7:57:6f:36:68:05:ac:04:ce:b9:19:19:38:
e1:1a:bd:e6:ea:e3:34:8e:ad:0b:6b:6f:34:85:bb:3d:e9:e4:
40:f0:a6:b2:cd:ca:c5:31:d6:44:93:00:8a:50:58:6b:90:97:
d6:d3:9e:65:1e:70:ff:27:7d:aa:2f:2b:dc:f9:8c:99:37:49:
c0:29:fc:b5:11:e6:5a:ee:96:5e:67:42:3d:23:80:d6:9d:8b:
2b:a2:2d:c3:c6:cb:0b:20:2d:06:ca:f1:eb:23:18:dc:ca:87:
dc:fc:c6:77:9d:e1:df:6c:f2:29:6b:ab:20:08:86:03:a7:19:
82:c1:c4:6d:e9:18:ad:2f:53:f6:28:6a:74:58:00:ad:80:42:
fa:00:cf:a7:ce:4b:f0:15:59:2b:7a:57:83:d3:f5:88:87:12:
cd:4c:29:38:0a:50:85:2b:5a:7c:08:81:22:4c:91:ea:38:e5:
bd:95:c4:68:d1:32:13:e0:9d:10:d7:3a:2d:96:9a:2c:1c:d7:
83:8b:be:7a:cc:a3:66:d1:20:76:e6:f4:c4:3e:95:17:2b:0c:
6c:2b:72:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:49:07 2026 by rpki-client