Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json)
Hash identifier: AcZxA+3VDIcBGcaTVftT16VioET92ZJlrCehZfvgA/g=
Subject key identifier: 64:2B:37:F5:E6:B1:D3:56:67:5C:F8:44:82:EE:74:C7:0A:91:A7:77
Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Certificate serial: 019EC1498A4D3E852C63F192046348B3E2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
Manifest number: 039D
Signing time: Sat 13 Jun 2026 14:01:22 +0000
Manifest this update: Sat 13 Jun 2026 14:01:22 +0000
Manifest next update: Sun 14 Jun 2026 14:01:22 +0000
Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: 9XQQXmGBwOvwwpjvxVhGXdUp/obd10ck44rlnx7QeD4=)
2: Qu5Uc6FGCB6Uw3VbbjAKqmFxNlI.roa (hash: bpE3q+0F77eucA0rQszJF+sVUPQwfiSRj3/qDaiDMq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:8a:4d:3e:85:2c:63:f1:92:04:63:48:b3:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Validity
Not Before: Jun 13 14:01:22 2026 GMT
Not After : Jun 14 14:01:22 2026 GMT
Subject: CN=642b37f5e6b1d356675cf84482ee74c70a91a777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:70:86:98:fe:be:60:d7:13:87:9c:c1:49:3b:
a2:39:37:d1:b2:3b:e4:12:48:96:71:cd:6d:0f:ee:
cd:bc:8e:a0:6b:e2:2a:ae:65:3a:27:64:00:6a:36:
44:d7:a7:fd:48:0e:af:b4:2d:f7:ff:fb:23:d1:f6:
41:01:4d:ae:26:35:f9:61:c8:1b:37:5a:22:cd:5e:
33:d3:0f:b1:62:a5:f1:8b:fa:2f:ac:78:b2:81:98:
cf:d1:c6:f9:c4:a2:4d:70:30:1a:ce:3f:30:9c:63:
66:bc:5a:cf:5c:18:cf:56:d2:24:6c:3b:dc:c7:e2:
00:a6:96:6e:13:df:77:c2:74:86:a0:88:06:21:dc:
e4:42:18:5c:5d:3b:fb:cf:64:68:00:82:aa:dc:1a:
94:2e:8d:a5:18:6a:07:ad:ce:ba:c7:91:d7:c1:aa:
4f:10:44:91:f9:52:25:2c:8d:61:85:20:56:58:93:
a5:cf:6d:02:eb:38:04:b5:35:6d:a2:27:ca:8e:02:
4a:92:2a:72:0f:9b:1b:e4:b1:58:1a:9e:a7:f3:5c:
eb:bd:e9:ee:b4:2f:51:cc:53:6f:80:c9:8d:82:ab:
7e:70:d0:db:10:04:37:bd:8a:5a:cc:af:8d:2e:90:
1d:76:8b:7a:7f:b8:cf:28:56:a2:3b:a9:ea:27:18:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2B:37:F5:E6:B1:D3:56:67:5C:F8:44:82:EE:74:C7:0A:91:A7:77
X509v3 Authority Key Identifier:
keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:37:ff:61:83:8a:36:72:1d:71:8b:75:82:84:bc:96:d7:ba:
66:f6:8a:4e:8b:66:3a:04:80:f6:0c:ee:ec:df:61:9a:d2:fa:
3f:22:47:9b:a0:7d:fb:8b:52:0c:de:fb:c5:4b:3e:bc:61:9c:
a0:83:8a:10:25:72:19:a6:b7:a6:de:12:22:75:4c:0c:2b:35:
27:16:41:85:55:2a:cd:08:25:3d:f5:e6:14:c8:c5:e4:97:cc:
c1:cd:4e:6c:22:01:65:24:67:77:cf:cc:e4:83:02:fa:bb:c4:
f2:2d:da:23:bb:a2:9b:08:d3:03:7c:1b:be:f2:0f:89:0d:f5:
24:f4:23:82:49:c2:31:33:73:21:ce:2f:93:0f:52:a8:61:2b:
a5:81:8c:ae:20:45:87:6c:2e:f1:c9:16:e7:5c:9b:e0:6d:87:
55:32:8e:71:c4:b3:4c:86:0e:2b:c2:1f:bf:76:59:40:59:c6:
02:d6:01:62:a6:e0:f0:37:d3:68:6e:60:14:20:65:22:98:2e:
43:7c:97:da:bd:30:97:82:42:92:99:62:ae:60:dd:0c:8c:d9:
8b:41:c1:f8:aa:28:76:e8:4b:45:14:49:7a:9a:56:1b:00:e4:
8e:d9:15:e7:8c:9b:3d:1b:46:58:89:34:d4:fc:f2:28:af:b7:
5c:f7:9e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:08 2026 by rpki-client