Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
File: 4koD-A9i2oZjUuGZCZfx1GzrL7A.mft (raw, json)
Hash identifier: LoUEoYR+kguJJVyv32ulRM25+/QERd7wYyzkY+E3AUA=
Subject key identifier: A5:13:10:05:6C:B9:1C:B9:68:D7:9E:AC:5F:C8:96:F5:F0:EF:C5:19
Authority key identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
Certificate issuer: /CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Certificate serial: 01A001DD5CFD3261C636D487B24AF89F5DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
Manifest number: 16BE
Signing time: Fri 14 Aug 2026 20:01:19 +0000
Manifest this update: Fri 14 Aug 2026 20:01:19 +0000
Manifest next update: Sat 15 Aug 2026 20:01:19 +0000
Files and hashes: 1: 4koD-A9i2oZjUuGZCZfx1GzrL7A.crl (hash: F8qUO805dYu7ZPEXvkkfZk7kA1rBAhYB8os7z7seHk8=)
2: WlHlPJ2Yx-QYEFNJTd1fZunOqeI.roa (hash: V3F5Ix6QWwGrgFg4N8xfN4dbqz/bAEkV9NWs0dFeZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:5c:fd:32:61:c6:36:d4:87:b2:4a:f8:9f:5d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Validity
Not Before: Aug 14 20:01:19 2026 GMT
Not After : Aug 15 20:01:19 2026 GMT
Subject: CN=a51310056cb91cb968d79eac5fc896f5f0efc519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:21:68:11:73:74:66:c8:6d:7b:6f:c9:bf:e1:
5b:f8:78:3c:26:a5:04:88:46:2e:97:0d:ff:d0:f8:
4c:d0:ce:5e:82:e8:c8:60:28:cc:91:62:44:9a:85:
36:5f:9a:88:4a:43:12:d3:82:3f:41:9d:9c:60:0d:
55:19:1f:33:72:51:79:f8:ee:69:0e:9b:0a:ff:e6:
03:c5:05:0d:70:34:57:13:cf:94:43:b4:6c:9b:cc:
fd:ba:a5:10:d2:04:b6:ba:2f:4c:d5:b8:ba:59:ef:
ff:ce:e6:0a:73:53:a9:67:5a:88:74:9a:80:3d:f3:
b3:56:67:6e:4d:c8:5f:53:56:53:47:06:5f:1c:8d:
0d:32:ba:24:db:4c:f0:1f:ad:49:00:28:8b:a8:ae:
f8:7b:14:97:8a:1a:bf:4f:79:61:c7:b3:29:2a:0b:
3f:47:56:e0:bb:22:48:75:65:b9:cc:1d:15:5d:66:
6f:c5:22:fd:5d:50:b0:5a:ef:03:95:ec:3e:04:03:
cf:4c:a8:3f:79:84:1c:d8:ec:ce:cc:cb:b4:e4:d8:
89:12:de:8a:af:2d:df:78:78:56:e2:3e:7f:da:13:
ba:8f:e1:bb:9c:05:c4:da:c8:cb:f2:2e:dc:c6:f5:
a6:d6:f4:92:c9:53:45:65:36:0d:e0:3f:d1:c3:f0:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:10:05:6C:B9:1C:B9:68:D7:9E:AC:5F:C8:96:F5:F0:EF:C5:19
X509v3 Authority Key Identifier:
keyid:E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:23:85:65:c6:3e:82:76:61:92:64:73:e0:51:cb:8d:7b:07:
91:b0:92:fd:82:b0:94:74:ae:be:53:fb:f3:8f:03:e9:0e:62:
eb:2c:34:eb:15:e8:31:10:2a:0c:36:1b:d9:a8:c7:f0:1f:cd:
89:4f:08:86:a9:16:d6:d2:98:26:ef:d5:a0:8e:e5:8b:a7:9e:
22:97:58:1c:90:7e:32:c0:f3:cb:90:9b:2d:14:75:08:4c:5b:
fd:e0:38:23:44:94:8c:9c:f3:63:73:a4:0e:85:9f:c7:21:f3:
9f:b0:4e:ed:3d:86:e3:d1:29:ea:34:5c:65:ae:90:6a:92:b0:
63:e4:5d:d8:96:22:1e:3b:9d:8a:1f:7c:eb:64:71:3c:f5:ad:
d7:ed:1b:c3:9d:d7:e5:6b:8b:60:9b:38:f9:28:fb:8b:70:f0:
39:a7:cd:1d:95:9b:f7:ea:fd:4e:ff:d4:71:a9:d6:96:02:e9:
1c:a3:77:c7:a6:51:ee:a7:e8:71:45:7c:67:10:06:c8:77:1a:
01:ee:6a:52:f8:22:a1:27:76:18:69:87:d5:70:dd:05:25:71:
09:8a:fe:b5:bb:28:89:1f:53:25:19:2a:1b:39:f8:f9:40:db:
23:0f:ce:d0:32:95:9c:30:88:f2:41:58:76:16:19:e6:c9:24:
05:37:5f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:34 2026 by rpki-client