Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json)
Hash identifier: gFOhtAfXn8Jtw+QoHQZTkYpkIp01VCsPF5SE7SYcraU=
Subject key identifier: AB:27:9C:F5:D2:AF:26:C8:41:B6:32:94:71:7A:B9:1E:D4:64:1F:3A
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 019FA906E020C4664E2C1C2148E3EC6B37E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
Manifest number: 0F87
Signing time: Tue 28 Jul 2026 14:00:27 +0000
Manifest this update: Tue 28 Jul 2026 14:00:27 +0000
Manifest next update: Wed 29 Jul 2026 14:00:27 +0000
Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: uSE3C5oMSepQcbI4RPpLuPPQ2A1hFE9C9oSUsbvw55Q=)
2: NStJJ9e183cFfxVciTY49OglbNU.roa (hash: yb2BwVREODItjweWlbnW4dYNiNyWxIQNgI0RjZN1nJI=)
3: s_-LqLAwoVzNq7MMJZajpyC4Khk.roa (hash: ClKhGIdEbTXNOQjYUKo8kUllH20eM7IYqgOaHPxfrg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:e0:20:c4:66:4e:2c:1c:21:48:e3:ec:6b:37:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Jul 28 14:00:27 2026 GMT
Not After : Jul 29 14:00:27 2026 GMT
Subject: CN=ab279cf5d2af26c841b63294717ab91ed4641f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:39:e2:77:fd:21:6a:6d:6b:3d:80:af:76:
e4:cb:37:90:7e:6d:d3:0d:a6:51:b8:05:93:50:89:
53:cd:3a:87:3e:83:4a:c1:14:00:93:9e:b2:85:96:
a9:1b:f0:7c:17:ed:c8:ce:fe:8d:46:07:a0:d0:10:
18:49:56:60:c4:21:47:bf:6e:51:73:41:50:9e:04:
69:85:d1:a5:ea:8b:b6:c9:2c:7e:a6:81:d1:81:b6:
c5:bf:74:93:d5:64:80:6a:6e:4d:73:f2:f9:07:5f:
05:a1:a4:cb:53:f6:8a:16:0c:5c:fe:60:b0:d0:62:
31:88:bf:8a:a0:09:01:d9:1f:5c:69:9f:0a:fa:c7:
fd:e3:3d:06:8e:89:83:66:21:81:b3:80:e2:4a:21:
1b:78:84:4d:17:e9:7b:8d:ad:85:ca:be:75:22:c6:
86:5b:34:63:5d:b5:85:bf:12:3f:5a:cd:85:1a:8a:
61:fd:92:1d:3e:5e:65:e5:fd:21:b3:24:3e:4d:43:
96:fb:c4:be:9c:2c:71:b1:87:7e:a6:b4:3e:22:73:
e1:cc:2f:1a:59:d8:87:81:37:f0:72:ac:97:11:ab:
3e:f2:08:85:ba:d5:27:91:d6:bc:55:22:59:80:8d:
86:0c:05:b0:a6:d1:3e:6e:67:dd:04:fd:f1:81:a8:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:27:9C:F5:D2:AF:26:C8:41:B6:32:94:71:7A:B9:1E:D4:64:1F:3A
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fd:e1:73:8d:9e:18:f5:61:1b:8f:8f:38:8d:cb:1b:3b:d2:
d1:d2:9a:56:b2:c6:b7:20:59:cb:6b:5c:16:e6:57:8c:d6:47:
0e:05:d0:55:25:57:d4:ae:b3:31:6f:c4:b8:f7:03:00:4a:3d:
ac:c3:5a:8e:63:2a:26:29:95:91:3f:8d:9f:8f:35:0d:f1:ae:
93:ac:eb:b3:15:8e:fb:e2:92:4b:d5:0b:f4:80:fe:df:84:3b:
41:f0:c1:25:a1:bf:47:bb:39:ab:ae:de:e9:b1:18:0e:12:0e:
a3:43:d5:c9:a2:b1:86:73:1d:c7:8a:94:d8:e6:99:e8:45:b2:
3f:f8:e5:7d:f8:6a:6f:19:c9:50:e2:a6:bf:00:3a:da:7a:1b:
f6:8b:a6:8c:71:3b:e0:e8:96:9b:26:12:fd:a4:2e:5c:1e:a4:
e4:ad:15:62:77:aa:41:a8:7c:9a:89:1b:0e:6f:58:5e:17:88:
aa:e6:bf:6a:6e:fb:58:2b:e7:32:e4:ce:a9:52:49:0f:24:6d:
e5:4a:18:a9:de:ac:eb:16:19:97:68:87:f2:43:73:28:a7:ca:
25:86:13:d6:be:de:db:8d:09:35:90:50:d9:b8:06:19:a8:d0:
1f:9d:ea:b9:35:41:c5:02:a9:28:f4:81:be:6c:08:3a:73:f3:
de:15:17:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:57 2026 by rpki-client