Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
File: 4koD-A9i2oZjUuGZCZfx1GzrL7A.mft (raw, json)
Hash identifier: PFklgw95BFI21frouyiU//NPj67F8a73B5PCQUJV/m0=
Subject key identifier: 54:5F:3D:FB:C9:83:04:84:67:D5:E2:B2:09:D5:15:F1:2D:79:35:A1
Authority key identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
Certificate issuer: /CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Certificate serial: 019E30722504515B483CCB5E4488D1063C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
Manifest number: 15CD
Signing time: Sat 16 May 2026 11:00:47 +0000
Manifest this update: Sat 16 May 2026 11:00:47 +0000
Manifest next update: Sun 17 May 2026 11:00:47 +0000
Files and hashes: 1: 4koD-A9i2oZjUuGZCZfx1GzrL7A.crl (hash: 2TxPqnPlF4ufH/Su2z0uoubF/G9gyOnZykyNblfYZcg=)
2: WlHlPJ2Yx-QYEFNJTd1fZunOqeI.roa (hash: V3F5Ix6QWwGrgFg4N8xfN4dbqz/bAEkV9NWs0dFeZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:25:04:51:5b:48:3c:cb:5e:44:88:d1:06:3c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Validity
Not Before: May 16 11:00:47 2026 GMT
Not After : May 17 11:00:47 2026 GMT
Subject: CN=545f3dfbc983048467d5e2b209d515f12d7935a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:a9:cc:5d:62:40:b8:e2:35:83:ac:64:d3:
0b:4b:5f:11:c3:a7:85:a9:8a:f8:e1:50:71:da:7f:
d1:de:91:8b:fc:dd:65:02:a9:20:c4:c5:68:75:78:
e2:53:02:6a:3b:7e:c3:b2:6d:5e:a1:86:86:f3:59:
71:70:97:f5:14:82:0c:71:ea:6c:c6:da:62:83:08:
48:ba:1e:33:16:f2:f1:c9:6a:d7:1d:6e:a3:33:1a:
a1:dc:5f:67:0f:6c:74:3c:5a:02:fd:d8:fa:c2:5e:
b3:09:58:7d:95:0c:2e:79:2f:9e:1a:b7:d2:bb:92:
9c:31:9b:d7:6a:70:8d:0c:06:b1:c8:3e:2e:bc:53:
b3:31:68:41:26:2e:2c:c4:fb:4f:da:0e:40:cd:e1:
10:a6:2b:65:57:0f:ce:a5:0e:33:51:81:a7:23:15:
b9:0b:e9:c2:f4:a8:a3:21:fb:57:95:93:8e:c5:95:
5a:bb:e7:08:5a:5a:d7:22:9f:95:26:60:ad:71:ef:
6c:b3:a3:84:86:0c:98:cb:43:05:6b:5d:1d:0e:c6:
8d:ec:02:64:6e:dd:d0:c9:c2:04:c1:e3:b2:ea:c9:
fc:74:e6:1b:f6:d8:dd:75:29:52:12:a1:8a:d9:7a:
29:e6:56:e3:b5:a3:23:f0:66:7b:38:6a:d3:61:f5:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:3D:FB:C9:83:04:84:67:D5:E2:B2:09:D5:15:F1:2D:79:35:A1
X509v3 Authority Key Identifier:
keyid:E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:03:8d:fb:6c:22:17:da:63:ab:ca:76:72:ef:f2:d0:f8:f8:
74:0f:c9:a7:12:1b:d6:d9:8f:d4:84:4d:27:71:87:dd:ba:60:
40:83:0f:37:56:e4:81:22:5d:d1:b7:2d:52:4c:bb:9b:60:36:
f6:0a:33:18:c5:ae:d9:9f:90:11:23:33:26:74:38:31:bf:c2:
5b:d2:c6:ba:b0:ad:ee:39:f8:3f:23:3d:bf:45:6d:0b:be:06:
14:a0:a4:0e:d2:65:6c:e7:62:f5:f3:39:9d:44:44:a5:0d:71:
10:e8:44:53:99:db:ac:07:42:6f:ce:64:3b:61:e0:12:a6:7e:
fb:40:92:fb:e1:b8:bb:4e:fe:95:f4:cd:ee:be:f2:14:94:a0:
b7:39:cc:2d:89:d2:5d:67:f7:5b:a1:07:96:b2:dc:21:8e:33:
1f:de:38:38:7c:81:6a:b4:48:30:74:e6:06:13:52:53:2d:a9:
25:dd:c0:a0:12:fb:96:aa:e4:72:4a:a9:19:9b:ba:cc:03:ca:
8d:d4:0d:b1:af:3b:c5:54:8c:e7:0b:73:29:98:14:6c:90:24:
87:21:73:a3:e3:e5:45:cb:ac:a4:ac:cd:1a:0c:4f:ca:73:23:
14:76:72:67:4f:96:ad:1c:cd:4d:95:95:58:67:c8:54:d5:a0:
59:11:fb:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wciUEUVtIPMteRIjRBjxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGEwM2Y4MGY2MmRhODY2MzUyZTE5OTA5OTdmMWQ0NmNl
YjJmYjAwHhcNMjYwNTE2MTEwMDQ3WhcNMjYwNTE3MTEwMDQ3WjAzMTEwLwYDVQQD
Eyg1NDVmM2RmYmM5ODMwNDg0NjdkNWUyYjIwOWQ1MTVmMTJkNzkzNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFOpzF1iQLjiNYOsZNMLS18Rw6eF
qYr44VBx2n/R3pGL/N1lAqkgxMVodXjiUwJqO37Dsm1eoYaG81lxcJf1FIIMceps
xtpigwhIuh4zFvLxyWrXHW6jMxqh3F9nD2x0PFoC/dj6wl6zCVh9lQwueS+eGrfS
u5KcMZvXanCNDAaxyD4uvFOzMWhBJi4sxPtP2g5AzeEQpitlVw/OpQ4zUYGnIxW5
C+nC9KijIftXlZOOxZVau+cIWlrXIp+VJmCtce9ss6OEhgyYy0MFa10dDsaN7AJk
bt3QycIEweOy6sn8dOYb9tjddSlSEqGK2Xop5lbjtaMj8GZ7OGrTYfWRMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRfPfvJgwSEZ9XisgnVFfEteTWhMB8GA1UdIwQY
MBaAFOJKA/gPYtqGY1LhmQmX8dRs6y+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtvRC1BOWkyb1pqVXVHWkNaZngxR3pyTDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81NDBjNWYtYTJhMi00NGU0LTkyODct
NDFiNTQ1MDBmZGNmLzEvNGtvRC1BOWkyb1pqVXVHWkNaZngxR3pyTDdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81NDBjNWYtYTJhMi00NGU0LTkyODctNDFiNTQ1MDBmZGNm
LzEvNGtvRC1BOWkyb1pqVXVHWkNaZngxR3pyTDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQON+2wi
F9pjq8p2cu/y0Pj4dA/JpxIb1tmP1IRNJ3GH3bpgQIMPN1bkgSJd0bctUky7m2A2
9gozGMWu2Z+QESMzJnQ4Mb/CW9LGurCt7jn4PyM9v0VtC74GFKCkDtJlbOdi9fM5
nUREpQ1xEOhEU5nbrAdCb85kO2HgEqZ++0CS++G4u07+lfTN7r7yFJSgtznMLYnS
XWf3W6EHlrLcIY4zH944OHyBarRIMHTmBhNSUy2pJd3AoBL7lqrkckqpGZu6zAPK
jdQNsa87xVSM5wtzKZgUbJAkhyFzo+PlRcuspKzNGgxPynMjFHZyZ0+WrRzNTZWV
WGfIVNWgWRH76A==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:46 2026 by rpki-client