Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json)
Hash identifier: bHSDk82SEM86Hl4OtsEYNXS+Q9o9uwM6BjowoYnWTNI=
Subject key identifier: 78:BC:9D:90:31:0F:6B:73:6E:6E:86:77:E9:7E:CA:F7:3C:15:8A:BA
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 019CA9EB12C092124DC1CE7D82FEC5B29F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
Manifest number: 0DF9
Signing time: Sun 01 Mar 2026 15:01:21 +0000
Manifest this update: Sun 01 Mar 2026 15:01:21 +0000
Manifest next update: Mon 02 Mar 2026 15:01:21 +0000
Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: /N2lES1TnTQY/IqUEcruquNWY8ycNdV4m1+sFaxbdWM=)
2: K6bDf71UHtQxrhH1BLM2hnpBtqI.roa (hash: AsGB/9SfORjkXrYP9cBVkXw+EeQS48wH0rtdjTLtiZ8=)
3: NStJJ9e183cFfxVciTY49OglbNU.roa (hash: yb2BwVREODItjweWlbnW4dYNiNyWxIQNgI0RjZN1nJI=)
4: bVsBZq4WzkZxlhW7gqbUK7dG0kE.roa (hash: H/CexeKIrTnjFd2U3QPCHA+f9Gezq68mOPfLmBSg4YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:12:c0:92:12:4d:c1:ce:7d:82:fe:c5:b2:9f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Mar 1 15:01:21 2026 GMT
Not After : Mar 2 15:01:21 2026 GMT
Subject: CN=78bc9d90310f6b736e6e8677e97ecaf73c158aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:6d:d3:65:e0:69:ad:2d:44:07:af:4d:88:
47:72:b3:e2:4a:88:84:8c:da:3d:f3:d0:78:3d:45:
50:b5:c5:43:ea:98:87:c0:46:d0:ba:66:cd:71:9c:
c0:96:b6:7e:43:c9:7a:62:50:30:fe:4b:15:3d:aa:
64:16:ee:57:d4:c7:df:a3:4f:6b:8b:ae:52:e3:1f:
0d:55:a5:13:4f:a3:1f:1a:44:f6:37:01:48:ee:04:
68:6e:94:3c:a4:a2:d7:9c:59:2b:ca:f4:a1:45:5e:
f6:2a:36:f8:09:1d:72:50:e4:31:50:46:53:52:0b:
57:86:4c:88:39:f4:f5:6a:0b:c0:1c:c5:0b:3e:b8:
d3:25:11:e0:e2:fe:0e:52:4e:b5:08:df:3a:41:1b:
8b:d7:4c:f9:25:a5:dd:ce:4d:0c:b0:ee:d2:f2:50:
cf:82:f9:63:3e:61:a9:10:83:78:44:2d:c1:ab:fe:
57:b4:55:80:ae:77:44:ea:bf:67:c4:e3:d7:28:f7:
e7:2f:30:40:59:2f:40:20:c2:8c:89:7b:6e:cb:38:
3c:30:66:61:f5:87:fc:42:56:98:80:71:47:87:c3:
1f:62:42:32:5d:d4:c8:ea:05:1f:b2:d2:db:43:fb:
ad:40:64:65:68:7b:27:b3:d1:d2:b6:53:2c:ca:cb:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BC:9D:90:31:0F:6B:73:6E:6E:86:77:E9:7E:CA:F7:3C:15:8A:BA
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7e:d3:5e:b7:3d:2a:be:b4:2c:07:fb:28:59:7e:8a:46:f5:
89:e8:7c:5d:e8:1f:d4:fb:73:6c:34:20:35:b4:2a:6c:61:92:
01:66:6c:bb:f8:af:d0:1c:30:7d:8a:30:a3:5e:db:92:b8:5c:
23:b0:23:88:94:b5:34:3e:af:77:df:c3:2f:02:64:6f:2d:a3:
44:69:c1:7f:91:37:d1:f1:bf:8c:06:b7:6a:72:cb:22:a8:78:
a2:99:2a:44:cb:ff:72:ef:56:66:7f:1a:4a:fc:15:88:d5:ba:
c2:05:ed:ac:40:86:81:87:45:ef:5f:a8:b9:27:32:f8:66:9d:
71:1e:9a:56:fa:4a:9f:5b:cf:9f:57:c0:40:d9:de:1c:fa:32:
82:5d:b3:6f:69:dc:93:57:3f:d7:fe:9e:40:43:41:8e:28:c1:
cc:7b:6f:62:e3:55:40:95:40:31:dd:e1:4e:ff:d8:31:68:a7:
b1:ca:36:c4:99:2e:64:6a:48:44:0c:a8:3c:23:10:41:6a:50:
3e:0d:54:a1:5e:96:4d:90:78:cf:fa:58:64:e1:ab:35:48:14:
b3:ef:a0:6d:86:f0:c5:13:09:2f:13:17:48:bc:3f:96:26:47:
54:f6:cd:e8:63:56:56:55:e3:2e:08:ee:1e:9f:ef:cf:c4:ac:
dd:a4:dc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:20 2026 by rpki-client