Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json)
Hash identifier: sWYYlXRhRcE6GJsB65ddQ8AdIO2enexY+RM/xesVgP8=
Subject key identifier: 36:50:D9:DC:52:72:ED:61:CD:55:4F:95:95:B2:BE:BF:4D:9B:6F:65
Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Certificate serial: 019CAC46BC52AEDFB862FBC977DAC1663C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
Manifest number: 0289
Signing time: Mon 02 Mar 2026 02:00:42 +0000
Manifest this update: Mon 02 Mar 2026 02:00:42 +0000
Manifest next update: Tue 03 Mar 2026 02:00:42 +0000
Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: B5Oj+K9O6iLu2YllmCbWLgajqiEpXAhpdsW4Z9gEffY=)
2: Qu5Uc6FGCB6Uw3VbbjAKqmFxNlI.roa (hash: bpE3q+0F77eucA0rQszJF+sVUPQwfiSRj3/qDaiDMq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:bc:52:ae:df:b8:62:fb:c9:77:da:c1:66:3c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Validity
Not Before: Mar 2 02:00:42 2026 GMT
Not After : Mar 3 02:00:42 2026 GMT
Subject: CN=3650d9dc5272ed61cd554f9595b2bebf4d9b6f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d3:ab:71:66:4f:d6:3f:60:b3:9a:c9:e6:4c:
5e:27:a8:55:a9:6e:64:ce:1c:79:d5:d5:bc:7d:8d:
b9:80:63:56:3d:45:61:e5:3b:f1:96:61:6c:be:35:
52:3d:80:da:3a:47:7c:21:85:e5:34:bf:7d:29:dc:
da:21:d5:18:e6:09:e9:5a:2a:c3:e6:f7:a8:6b:2f:
80:35:76:18:a5:de:e4:e8:97:68:49:d6:84:b1:bc:
2a:1f:be:c8:0e:8e:e9:02:3e:b0:49:1f:2a:2c:b3:
57:73:81:cd:cf:e0:3c:32:39:ca:59:48:f9:39:64:
eb:24:df:2a:0b:cc:cb:23:84:6a:6b:1f:47:0f:19:
2e:e0:3a:f9:32:d8:5b:a9:31:45:38:06:b2:e4:ed:
e3:34:2f:f4:38:c8:52:cb:9a:07:02:f7:f9:e5:ee:
f1:e9:9a:19:02:99:07:5d:5c:6c:d4:d8:f4:4f:9e:
c4:fc:33:09:91:e7:15:fc:cc:5a:de:9e:dd:de:8e:
7b:ba:53:fb:42:c6:47:ae:9a:90:8a:25:45:e1:20:
4e:2a:03:eb:24:18:3a:33:ac:4b:48:27:26:44:ba:
2e:f7:64:89:0e:90:5c:05:2d:be:0b:db:15:72:7e:
12:3f:74:92:63:04:e6:90:85:34:e1:cd:b0:00:70:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:50:D9:DC:52:72:ED:61:CD:55:4F:95:95:B2:BE:BF:4D:9B:6F:65
X509v3 Authority Key Identifier:
keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7b:0f:a8:e0:29:da:42:32:9b:af:d8:07:85:18:3c:8c:cf:
93:c9:ff:29:db:20:89:b9:1a:49:cc:36:96:b6:39:c4:7d:15:
c8:e0:93:de:6a:14:08:a9:21:85:de:ec:2d:db:84:c4:90:c4:
be:bd:0f:fa:df:15:8c:77:08:35:e2:1e:89:3b:a6:3e:1a:7e:
7d:44:60:5b:e9:36:46:ee:66:1b:9a:48:f8:ba:ac:fc:a8:15:
0f:8c:a1:2d:00:ce:d7:0e:5f:70:66:51:8b:b9:73:82:7b:fc:
a1:6e:e4:a0:bd:94:ce:bf:f8:65:cd:87:26:fa:55:18:01:d3:
48:d2:84:68:34:44:18:e6:20:15:69:ab:79:5f:4c:5b:cf:b7:
bf:65:ed:cf:ee:78:0d:3e:60:82:67:a4:2a:49:17:f7:20:b1:
67:20:56:29:c0:02:6c:fb:4f:78:19:ad:91:e9:4b:b4:c7:1a:
88:ca:bf:f6:1a:14:3d:97:f2:78:98:06:9c:ae:50:ab:cf:d0:
07:2d:ab:86:60:2e:56:b8:da:e9:11:d2:36:2a:07:30:b7:1c:
95:55:a7:25:de:69:24:c7:a8:d4:28:e3:3f:b1:01:f9:0c:c0:
21:21:9f:b9:26:3f:3a:bd:5f:81:d5:9d:92:cd:2b:a9:6f:19:
fb:d9:8e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:51 2026 by rpki-client