Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json)
Hash identifier: fTOd/+i+HkQ5D3N6ImykF9V6ZxLB2YEhbRqs/1xKotM=
Subject key identifier: AE:BE:98:F7:39:88:14:12:92:E3:E7:7D:41:BA:29:28:75:8F:BB:09
Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Certificate serial: 019D9DACF77C9BE69A77722F278AD0ADDA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
Manifest number: 0306
Signing time: Fri 17 Apr 2026 23:00:51 +0000
Manifest this update: Fri 17 Apr 2026 23:00:51 +0000
Manifest next update: Sat 18 Apr 2026 23:00:51 +0000
Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: yhYRoIbV+9wnSdhtASEjdc7YHe7mfTYdvnOVUcedYJo=)
2: Qu5Uc6FGCB6Uw3VbbjAKqmFxNlI.roa (hash: bpE3q+0F77eucA0rQszJF+sVUPQwfiSRj3/qDaiDMq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:f7:7c:9b:e6:9a:77:72:2f:27:8a:d0:ad:da:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Validity
Not Before: Apr 17 23:00:51 2026 GMT
Not After : Apr 18 23:00:51 2026 GMT
Subject: CN=aebe98f73988141292e3e77d41ba2928758fbb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:8e:3e:f4:75:2d:65:e8:4e:9b:53:f9:5b:
bf:fc:e7:71:b6:50:12:fd:26:63:a2:b0:d5:c0:d8:
b5:1a:27:3a:36:5f:3d:87:83:01:37:71:85:98:0b:
87:0d:c1:8a:94:b2:6c:54:5f:4b:9d:81:10:dc:04:
e9:83:1b:88:62:7c:aa:1a:e6:d1:3c:e5:0e:af:b2:
a1:39:2d:02:3c:f8:c9:2a:84:e5:de:d1:ab:f5:b3:
75:5c:3b:33:35:53:31:f0:a4:6a:cb:63:e4:04:c0:
c3:e0:6e:68:0c:fe:3f:76:ff:6e:c2:2a:e8:d2:c8:
0e:d0:52:5f:0c:a3:5d:52:4d:29:19:4e:b8:db:c6:
0a:07:e2:2c:17:f2:ed:1a:36:d4:14:c9:a7:65:e1:
cd:b7:00:fc:50:26:79:89:4d:e4:c9:be:d4:a4:06:
1b:84:b5:5f:de:7f:36:74:a0:02:d8:dc:20:b7:00:
fd:c8:7f:88:6e:c1:9d:27:b7:94:cc:02:db:68:db:
6d:c0:a6:4d:22:2a:c5:83:05:82:b5:35:27:3c:90:
98:b7:09:26:56:96:1b:22:27:d5:12:8b:d5:47:7e:
9e:25:3d:c5:1d:82:5c:20:ba:7a:c3:0c:c4:fd:25:
14:75:12:7f:89:04:3f:64:9d:bb:e0:06:1e:a3:11:
1a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BE:98:F7:39:88:14:12:92:E3:E7:7D:41:BA:29:28:75:8F:BB:09
X509v3 Authority Key Identifier:
keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d5:ae:2d:17:83:73:56:2b:a2:79:59:17:6e:21:05:09:b4:
57:f1:f1:91:bc:bf:07:dc:36:6a:e0:21:5e:a6:fd:1d:e4:64:
b8:c1:db:f6:91:7c:ad:4b:72:bf:74:b0:45:e2:b5:cd:cb:62:
7c:3f:88:31:49:1f:3d:fc:e5:2c:d4:e3:7b:e2:87:da:e5:cb:
4d:5b:df:81:33:fd:b0:02:92:de:2d:04:9c:f5:e7:76:72:49:
63:33:0d:3c:d5:4b:18:e9:12:97:fa:e8:26:45:cb:67:1d:89:
73:2d:0d:db:1c:82:af:fb:87:4b:bb:45:6b:a0:c2:f8:a6:19:
10:a7:aa:60:20:8c:71:85:b7:c4:e3:9e:fd:b8:24:36:d3:7b:
70:4e:7b:f7:c2:ba:88:c3:9e:05:89:63:72:24:52:c0:03:1a:
86:07:80:98:43:18:ab:8e:ca:aa:0d:47:07:43:c4:95:27:c7:
b7:0d:af:6d:22:e4:d1:4c:84:1f:2c:66:47:2a:a5:84:15:90:
82:66:1f:bf:be:37:db:23:73:af:26:e4:cb:f5:df:81:84:c9:
f6:b3:b0:88:3c:dc:ad:d6:d5:e3:e9:de:22:5e:d9:8c:dd:2c:
78:12:02:d4:68:c1:e5:f6:f9:9d:21:d0:57:1a:ce:a0:09:3f:
14:17:75:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:07:48 2026 by rpki-client