Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json)
Hash identifier: tcbbqvNFSnpBb53sMRZqVqUu/YMzXTCu8mehhGYQRtM=
Subject key identifier: AE:30:1E:1E:1E:46:12:02:48:C2:09:A8:43:7E:C9:48:AA:45:0C:DC
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial: 019CAEDA3C512CBF2985788546978B870EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
Manifest number: 0419
Signing time: Mon 02 Mar 2026 14:01:03 +0000
Manifest this update: Mon 02 Mar 2026 14:01:03 +0000
Manifest next update: Tue 03 Mar 2026 14:01:03 +0000
Files and hashes: 1: OmjdAjVWAeN7nazvaN8tyky8gB4.roa (hash: oILOHbkx48Up7aMbK7MsGxijo68OXba8v88+kgI/k8w=)
2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: dZPsGBfQ/Ojo7uqku73VuOlrmUqVnNfDQyIq+F1CvcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:3c:51:2c:bf:29:85:78:85:46:97:8b:87:0e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Validity
Not Before: Mar 2 14:01:03 2026 GMT
Not After : Mar 3 14:01:03 2026 GMT
Subject: CN=ae301e1e1e46120248c209a8437ec948aa450cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:d7:6c:08:56:ac:cc:8c:26:89:7d:97:ab:
df:af:10:e1:43:b0:01:cf:40:5b:1a:a7:b4:b8:e5:
a0:cb:51:a6:32:a4:ae:5e:6c:d8:20:f8:52:0c:88:
97:cd:68:9c:40:ea:a0:4d:c6:67:be:e2:77:49:2b:
aa:a5:54:17:56:b1:01:5d:05:ae:2c:80:fa:12:ea:
2e:af:4f:a5:53:83:72:5b:a7:be:fe:6e:88:8a:08:
6a:da:e0:0e:99:b5:66:54:20:09:60:57:4c:9e:d4:
10:7a:a9:e3:8d:df:30:50:e7:d8:42:6d:74:4d:25:
2d:d2:6c:06:16:82:c6:1d:c6:a3:08:a7:9b:4e:53:
83:2f:d0:c6:0b:db:99:bd:54:c3:84:dc:23:11:40:
11:0a:c3:fe:10:ee:53:e1:60:54:5c:11:32:0d:2e:
56:db:75:5f:7e:77:50:4d:c0:c5:72:9e:59:70:a8:
5d:4d:bb:c6:f9:7b:76:70:03:67:66:8b:f8:32:e8:
5b:21:1f:45:a6:ab:90:68:5b:d1:cf:a9:63:0f:77:
e9:42:b0:6a:37:ec:0b:c2:80:43:22:f7:9b:75:40:
80:3c:4d:85:e7:68:4a:bd:9c:5c:ac:6d:30:2d:1a:
9c:8f:ec:47:87:2f:c9:a1:ba:6c:23:71:7c:e8:f3:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:30:1E:1E:1E:46:12:02:48:C2:09:A8:43:7E:C9:48:AA:45:0C:DC
X509v3 Authority Key Identifier:
keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fb:b4:65:14:88:23:27:1f:13:c6:21:6d:04:e4:54:fd:c2:
6a:c6:ce:ce:fd:a0:3d:22:06:97:a8:ec:d8:e4:e4:e8:b3:c7:
38:1d:4d:f6:3e:35:5c:8b:29:f4:23:fb:0c:14:89:6b:3d:c2:
9d:c3:97:b8:0f:eb:36:11:da:6b:83:fa:dd:1f:e4:ad:3f:a3:
58:cd:20:d3:86:9f:24:98:bc:5c:6e:4a:fb:b7:e2:ae:26:00:
bb:86:42:90:a3:bb:7f:b0:47:11:8d:aa:40:23:8f:bc:33:ca:
be:be:fb:5f:10:9b:dc:67:5d:95:c0:88:95:56:20:08:73:84:
26:7c:eb:e9:eb:20:fe:8b:5e:7b:cf:46:70:29:f8:59:3a:eb:
b9:c7:1f:fb:d7:1d:e2:3f:78:3a:5e:b7:e6:19:2c:08:08:41:
aa:f6:78:9e:ba:77:0b:a8:d0:02:e4:2a:63:3f:a4:6b:97:35:
35:2e:bd:cb:b0:e3:cd:a9:fa:d1:2c:48:10:a1:b7:24:83:d3:
67:0a:21:80:a4:14:33:1b:b1:07:47:3c:38:4e:b0:f5:c9:df:
17:77:0d:37:80:3d:25:06:17:b8:77:70:ec:0b:fa:30:6a:4a:
47:76:d3:2b:c9:50:1f:86:a9:99:21:3d:b9:2a:8f:d3:f1:07:
e3:87:6f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:06 2026 by rpki-client