Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json)
Hash identifier: LgjOnVeOcBnrqMgW+niErp+8aZxJul2uJveheishl3Y=
Subject key identifier: 85:6B:0E:3A:8C:AA:B1:7D:5F:97:F5:2D:87:2D:85:1C:5B:C6:BF:EE
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial: 019DA41CE3EE539DD02D1A8567385EAA902F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
Manifest number: 0498
Signing time: Sun 19 Apr 2026 05:00:49 +0000
Manifest this update: Sun 19 Apr 2026 05:00:49 +0000
Manifest next update: Mon 20 Apr 2026 05:00:49 +0000
Files and hashes: 1: OmjdAjVWAeN7nazvaN8tyky8gB4.roa (hash: oILOHbkx48Up7aMbK7MsGxijo68OXba8v88+kgI/k8w=)
2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: 5NEZjYTclPw92njfbLC2Bep0KELKv1oPndxp1vQB6j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:e3:ee:53:9d:d0:2d:1a:85:67:38:5e:aa:90:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Validity
Not Before: Apr 19 05:00:49 2026 GMT
Not After : Apr 20 05:00:49 2026 GMT
Subject: CN=856b0e3a8caab17d5f97f52d872d851c5bc6bfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:d7:17:d3:42:c1:48:92:c8:fe:fc:63:77:
48:33:73:5c:41:f6:17:3c:b5:99:63:80:37:46:c9:
aa:16:7a:4c:9f:ca:b9:08:be:11:46:b3:b7:aa:4e:
77:e2:2f:f4:e6:d0:35:d3:71:98:0c:e8:e1:26:a5:
29:bd:17:ba:47:04:57:b1:ae:77:4d:93:c6:08:08:
57:a0:e1:4f:33:20:f7:f9:2c:d9:8c:c8:dd:43:fe:
31:5d:8a:c7:6b:69:74:37:62:be:c9:95:4b:ef:5b:
87:47:fd:22:32:32:e6:c9:31:c0:6e:b1:c7:6a:8f:
b8:db:76:ae:b5:b4:6e:a7:97:e4:65:60:19:e7:7b:
68:de:69:c8:d1:dd:64:39:de:61:4a:15:ba:28:87:
b5:5f:2d:dd:71:9c:b0:61:c2:ed:83:d3:46:9d:f8:
bb:48:95:10:50:a8:e8:75:24:1c:45:41:64:03:e4:
0d:af:9e:7e:14:a9:88:5e:91:25:83:58:b1:09:94:
bd:d5:e2:3b:d4:d2:55:88:a9:4d:7d:2d:06:43:0d:
43:81:4f:ad:00:8b:23:2e:69:99:6d:07:a9:44:d4:
69:b5:c4:b3:1b:48:bd:96:c5:c9:09:c3:9f:35:7e:
96:43:7d:db:a1:1d:47:1a:e5:90:59:b0:ca:ff:cf:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6B:0E:3A:8C:AA:B1:7D:5F:97:F5:2D:87:2D:85:1C:5B:C6:BF:EE
X509v3 Authority Key Identifier:
keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:77:a7:99:ee:1b:1e:a4:23:7a:ea:85:17:9e:14:9a:69:37:
0c:53:96:37:40:83:3b:e0:4e:56:2d:5f:68:4a:7d:ef:c3:8d:
90:86:a1:0a:dc:a9:3e:fc:e7:3b:4f:04:92:c7:0f:05:e7:2a:
a6:4a:ad:71:c7:81:7c:f4:a2:7b:44:be:6e:d5:b6:cf:b4:3c:
b6:5e:b5:3a:f8:be:c4:7a:4f:5d:55:b8:0c:17:f6:a0:60:72:
e3:75:b3:b7:9b:8a:d4:1b:c7:b8:a8:bb:08:e8:a2:31:50:6c:
6c:2a:3d:c4:ae:12:07:c5:e1:03:bb:2d:f5:5b:b6:8e:a6:7e:
79:17:a1:0c:a4:26:cd:99:0c:88:10:b5:f5:40:29:69:c2:5b:
f2:f1:5b:dc:85:7e:c7:06:cd:40:26:36:2a:d3:80:e4:b9:c0:
ce:91:fe:6a:ad:83:d8:e8:39:fe:fb:d6:f5:d8:a0:28:df:c1:
40:de:53:ef:ca:98:4f:98:ff:91:2b:f6:e6:81:b0:8f:ee:e1:
60:94:b5:f0:92:96:a5:28:8e:21:e4:08:06:14:9c:db:f6:1d:
eb:e1:21:c2:64:d4:3f:2b:3b:36:70:03:8e:94:08:0b:b8:6c:
c1:d8:e1:ef:9d:80:cd:f7:dc:7d:70:d4:e1:39:31:03:19:8d:
97:62:4f:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHOPuU53QLRqFZzheqpAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZWUzZjM4MjA3M2YyYzNlNGZjY2ZmY2EzODRjNWIwY2Q4
MjZjMjYwHhcNMjYwNDE5MDUwMDQ5WhcNMjYwNDIwMDUwMDQ5WjAzMTEwLwYDVQQD
Eyg4NTZiMGUzYThjYWFiMTdkNWY5N2Y1MmQ4NzJkODUxYzViYzZiZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtDXF9NCwUiSyP78Y3dIM3NcQfYX
PLWZY4A3RsmqFnpMn8q5CL4RRrO3qk534i/05tA103GYDOjhJqUpvRe6RwRXsa53
TZPGCAhXoOFPMyD3+SzZjMjdQ/4xXYrHa2l0N2K+yZVL71uHR/0iMjLmyTHAbrHH
ao+423autbRup5fkZWAZ53to3mnI0d1kOd5hShW6KIe1Xy3dcZywYcLtg9NGnfi7
SJUQUKjodSQcRUFkA+QNr55+FKmIXpElg1ixCZS91eI71NJViKlNfS0GQw1DgU+t
AIsjLmmZbQepRNRptcSzG0i9lsXJCcOfNX6WQ33boR1HGuWQWbDK/897FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVrDjqMqrF9X5f1LYcthRxbxr/uMB8GA1UdIwQY
MBaAFH/uPzggc/LD5PzP/KOExbDNgmwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgt
Y2NiZmE3MzQyNGE3LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgtY2NiZmE3MzQyNGE3
LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnenme4b
HqQjeuqFF54Ummk3DFOWN0CDO+BOVi1faEp978ONkIahCtypPvznO08EkscPBecq
pkqtcceBfPSie0S+btW2z7Q8tl61Ovi+xHpPXVW4DBf2oGBy43Wzt5uK1BvHuKi7
COiiMVBsbCo9xK4SB8XhA7st9Vu2jqZ+eRehDKQmzZkMiBC19UApacJb8vFb3IV+
xwbNQCY2KtOA5LnAzpH+aq2D2Og5/vvW9digKN/BQN5T78qYT5j/kSv25oGwj+7h
YJS18JKWpSiOIeQIBhSc2/Yd6+EhwmTUPys7NnADjpQIC7hswdjh752AzffcfXDU
4TkxAxmNl2JPFQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:04 2026 by rpki-client