Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
File: 4OU7sw0HUg-FeuZW962BPyLv0VI.mft (raw, json)
Hash identifier: 4hIuaAtmpiAeI3SjwOw1+fH8f1gox608vU41zWA90ks=
Subject key identifier: 8A:F2:4A:61:2F:8F:79:79:E9:EC:73:11:BC:2B:CB:76:05:6D:CA:2A
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Certificate issuer: /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial: 019CAF7EA1B491D6F8866E874A6EB4FC535E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
Manifest number: DC
Signing time: Mon 02 Mar 2026 17:00:37 +0000
Manifest this update: Mon 02 Mar 2026 17:00:37 +0000
Manifest next update: Tue 03 Mar 2026 17:00:37 +0000
Files and hashes: 1: 4OU7sw0HUg-FeuZW962BPyLv0VI.crl (hash: ysWuHL2lJqhprcQk8NvwPj1FQowIbX8RbhpyYSVJFiI=)
2: VdHoxGlnRqHLH1BFJzKzY5i5REw.roa (hash: dsaCJE0OYhxYSMRnj1r3I0s5ntGNaUFaI5WVluKFvG4=)
3: xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa (hash: LniWd40MUm27qbAUJ/AFuq8QyhRMHVdc7tCz6NRyg3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:a1:b4:91:d6:f8:86:6e:87:4a:6e:b4:fc:53:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Validity
Not Before: Mar 2 17:00:37 2026 GMT
Not After : Mar 3 17:00:37 2026 GMT
Subject: CN=8af24a612f8f7979e9ec7311bc2bcb76056dca2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:ee:4e:e5:72:8d:ba:37:d4:4d:fe:5f:65:
ff:fd:ee:f5:fc:3f:45:ea:13:2f:05:df:57:9c:d6:
a5:09:14:2e:36:8a:48:c0:bf:d9:79:b5:02:f9:f4:
dd:38:51:48:48:16:9e:61:dc:56:67:5d:6e:44:ed:
c0:d0:46:f6:6a:bc:77:94:b5:e3:9f:6e:6e:0c:9f:
9f:15:15:1b:b2:10:66:7e:fc:91:6b:dc:2d:41:68:
44:71:47:81:52:50:2a:32:af:89:4d:e4:fd:99:1e:
67:64:6a:f2:9b:46:f2:f2:b2:46:13:5f:46:4c:6b:
18:81:ea:92:f1:22:ba:69:cc:00:e6:49:70:ff:bc:
cb:fd:51:4e:05:42:a2:06:c1:fd:89:6b:b4:2e:0f:
d3:c6:a6:58:c6:70:b2:46:ea:5d:5e:6e:af:42:1d:
17:ae:92:d2:f5:6c:d3:21:8f:fa:47:55:03:44:cb:
3e:7e:2f:a0:4e:59:93:90:47:fc:15:c1:62:c1:7b:
13:bc:10:2b:9f:9a:48:94:72:2f:94:c8:c3:90:30:
ee:88:25:03:59:e7:27:e4:97:17:b1:e7:6d:2f:d2:
4b:6a:5f:32:ba:14:d5:45:1d:ff:cb:02:87:c2:a0:
b2:42:e7:99:c7:97:1d:a2:20:80:7f:51:c6:fd:eb:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F2:4A:61:2F:8F:79:79:E9:EC:73:11:BC:2B:CB:76:05:6D:CA:2A
X509v3 Authority Key Identifier:
keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7b:83:d4:d3:b5:49:9c:a5:99:90:64:e6:27:44:87:b9:5a:
75:0e:38:c8:08:81:1d:0e:1e:83:60:1b:86:89:bc:37:6d:6f:
28:e0:1e:19:e3:4e:e8:b7:d6:4c:69:45:93:a4:68:89:a4:06:
f0:79:4a:74:25:cf:f3:f8:04:00:02:a6:33:e0:49:45:e3:57:
dc:b0:50:8d:26:85:8e:1a:92:8d:4e:f3:55:59:76:62:24:ff:
00:dd:2e:25:a9:84:45:93:3e:9d:b8:48:c5:a1:d7:93:51:69:
3c:8c:36:59:e7:0c:28:02:b2:cd:5a:11:c6:74:34:22:84:56:
45:c7:6a:c9:6b:11:1b:6e:6d:0c:8b:04:4a:d0:28:f0:32:c4:
27:9a:fc:0c:25:0e:19:05:94:0c:00:87:04:fd:f9:0f:a4:07:
f7:d8:52:c3:d0:22:fd:2f:2d:0d:0d:a7:09:3a:f1:c3:ce:94:
58:04:85:c7:c2:e1:9c:9d:df:57:85:51:d7:c6:d3:91:32:3c:
79:0c:93:bf:3b:a6:be:1e:6f:e3:7e:c7:6b:40:a8:2e:2c:b6:
bd:55:4c:7b:3c:1b:99:02:63:29:be:da:47:bb:0a:da:dc:4d:
57:6a:ac:33:ff:76:2b:59:7f:61:80:49:7c:25:0e:70:78:ff:
77:7c:ac:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:39 2026 by rpki-client