
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
File: 4OU7sw0HUg-FeuZW962BPyLv0VI.mft (raw, json)
Hash identifier: cobeRuXELYCYewCPKtuzCLIdsD5CpfpindpsbsbcfCU=
Subject key identifier: 58:C1:E4:53:4C:09:AF:D5:BF:B3:07:53:10:26:CD:47:DC:B1:34:48
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Certificate issuer: /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial: 019FAC3ED6F0983DF16C900A003A134E0A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
Manifest number: 0268
Signing time: Wed 29 Jul 2026 05:00:27 +0000
Manifest this update: Wed 29 Jul 2026 05:00:27 +0000
Manifest next update: Thu 30 Jul 2026 05:00:27 +0000
Files and hashes: 1: 4OU7sw0HUg-FeuZW962BPyLv0VI.crl (hash: saacp4qhGQlVKe2lHZR06jJqwE/P7HMBej6guMBJg/E=)
2: VdHoxGlnRqHLH1BFJzKzY5i5REw.roa (hash: dsaCJE0OYhxYSMRnj1r3I0s5ntGNaUFaI5WVluKFvG4=)
3: xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa (hash: LniWd40MUm27qbAUJ/AFuq8QyhRMHVdc7tCz6NRyg3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:d6:f0:98:3d:f1:6c:90:0a:00:3a:13:4e:0a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Validity
Not Before: Jul 29 05:00:27 2026 GMT
Not After : Jul 30 05:00:27 2026 GMT
Subject: CN=58c1e4534c09afd5bfb307531026cd47dcb13448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:6b:19:15:08:0d:c0:02:59:c6:cc:5f:0a:
5a:a4:83:e2:b8:16:36:20:4d:36:07:47:00:d8:55:
85:cf:d1:d9:94:4c:cd:fa:54:17:bf:b5:86:2c:a9:
7c:b8:59:c1:b1:2d:b1:13:80:57:0b:17:d9:06:85:
50:83:dd:70:92:d3:e9:50:12:bb:07:be:d0:83:1c:
3f:df:ad:8b:82:d0:1e:c2:02:e2:a9:fb:50:29:83:
fd:d7:29:bc:85:bf:fb:04:35:1c:78:7f:4a:e4:3d:
ae:2a:5b:1e:c6:1a:f5:1e:b0:f2:6b:c4:ab:9a:19:
d9:68:25:84:7e:0f:01:e3:9f:61:df:1e:86:43:df:
84:24:97:93:96:74:6f:dd:56:44:c6:6d:f3:53:e3:
c9:1e:06:a3:10:02:74:ee:98:8c:d2:27:84:9f:ae:
ec:de:b3:97:4f:03:de:ce:85:e4:f5:42:d0:1d:52:
48:dd:6e:04:3a:e7:2d:5b:58:12:01:0b:32:31:93:
a5:2f:13:22:b3:88:ef:c8:0e:b0:22:57:3e:4b:ca:
78:d6:6d:84:43:ec:2c:cc:38:8d:c3:14:7f:5c:a0:
b4:2a:59:7d:83:e6:5c:a1:f7:0e:d5:e9:cb:64:b2:
de:78:27:e9:2f:0c:6c:5a:c1:6e:83:60:4f:70:f9:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C1:E4:53:4C:09:AF:D5:BF:B3:07:53:10:26:CD:47:DC:B1:34:48
X509v3 Authority Key Identifier:
keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:bc:8b:4e:52:03:5b:72:d2:45:d8:05:41:88:50:6d:54:f0:
83:0f:72:ff:c5:57:a2:5c:bd:58:cc:6c:cd:c7:c7:65:ae:f2:
a9:d4:b0:4e:53:5c:8d:f5:ed:21:d0:63:68:78:a1:e8:ec:8f:
62:fa:76:dd:60:47:13:68:b3:36:14:63:74:5a:20:f5:52:dc:
5f:c7:3e:b9:3e:96:cc:6e:a2:2a:f3:4c:94:d8:57:ab:9e:aa:
2b:7d:a7:ae:8a:de:73:7d:88:ee:56:56:11:29:1a:65:6f:8c:
3e:ad:b4:b7:e3:81:02:32:ba:e0:51:fe:01:c5:64:e2:25:01:
09:e8:14:bd:78:35:f1:84:19:29:44:a4:d9:fa:50:94:3b:b1:
c6:1d:cd:11:b4:61:38:bd:2e:a3:05:be:ad:6f:11:ce:c2:1c:
82:d0:3d:e3:30:4d:d1:33:1d:ce:d3:d7:cb:95:54:cf:3c:fb:
88:0b:02:87:24:3a:de:07:b8:f2:7a:e6:ef:93:0d:1c:48:d6:
a1:c5:d0:ad:97:43:f7:fb:35:05:66:5e:c0:ce:52:4e:56:31:
a4:c8:d7:71:36:1b:af:ee:99:7b:5c:74:0d:94:2a:47:dc:cc:
65:00:5f:b2:26:18:b1:01:82:bb:30:08:54:dc:6b:ef:21:b7:
b3:5f:93:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPtbwmD3xbJAKADoTTgplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZTUzYmIzMGQwNzUyMGY4NTdhZTY1NmY3YWQ4MTNmMjJl
ZmQxNTIwHhcNMjYwNzI5MDUwMDI3WhcNMjYwNzMwMDUwMDI3WjAzMTEwLwYDVQQD
Eyg1OGMxZTQ1MzRjMDlhZmQ1YmZiMzA3NTMxMDI2Y2Q0N2RjYjEzNDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7FrGRUIDcACWcbMXwpapIPiuBY2
IE02B0cA2FWFz9HZlEzN+lQXv7WGLKl8uFnBsS2xE4BXCxfZBoVQg91wktPpUBK7
B77Qgxw/362LgtAewgLiqftQKYP91ym8hb/7BDUceH9K5D2uKlsexhr1HrDya8Sr
mhnZaCWEfg8B459h3x6GQ9+EJJeTlnRv3VZExm3zU+PJHgajEAJ07piM0ieEn67s
3rOXTwPezoXk9ULQHVJI3W4EOuctW1gSAQsyMZOlLxMis4jvyA6wIlc+S8p41m2E
Q+wszDiNwxR/XKC0Kll9g+ZcofcO1enLZLLeeCfpLwxsWsFug2BPcPlq6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjB5FNMCa/Vv7MHUxAmzUfcsTRIMB8GA1UdIwQY
MBaAFODlO7MNB1IPhXrmVvetgT8i79FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE9VN3N3MEhVZy1GZXVaVzk2MkJQeUx2MFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iYzJmNTMtOGU3NS00ZTBlLWJmZDQt
MjliOWJmNTNhNTdmLzEvNE9VN3N3MEhVZy1GZXVaVzk2MkJQeUx2MFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iYzJmNTMtOGU3NS00ZTBlLWJmZDQtMjliOWJmNTNhNTdm
LzEvNE9VN3N3MEhVZy1GZXVaVzk2MkJQeUx2MFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2byLTlID
W3LSRdgFQYhQbVTwgw9y/8VXoly9WMxszcfHZa7yqdSwTlNcjfXtIdBjaHih6OyP
Yvp23WBHE2izNhRjdFog9VLcX8c+uT6WzG6iKvNMlNhXq56qK32nrorec32I7lZW
ESkaZW+MPq20t+OBAjK64FH+AcVk4iUBCegUvXg18YQZKUSk2fpQlDuxxh3NEbRh
OL0uowW+rW8RzsIcgtA94zBN0TMdztPXy5VUzzz7iAsChyQ63ge48nrm75MNHEjW
ocXQrZdD9/s1BWZewM5STlYxpMjXcTYbr+6Ze1x0DZQqR9zMZQBfsiYYsQGCuzAI
VNxr7yG3s1+TYg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:18:32 2026 by rpki-client