Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
File: 4koD-A9i2oZjUuGZCZfx1GzrL7A.mft (raw, json)
Hash identifier: +0rGwa2uIVPePvkaI1O434+/f2WGEtSlkGNz5Mf06CE=
Subject key identifier: BC:D2:51:F1:55:91:22:EA:B2:DB:C0:3E:D8:86:0E:EF:F9:D9:CA:68
Authority key identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
Certificate issuer: /CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Certificate serial: 01A13E94A285517BF365637A4817895AF3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
Manifest number: 1762
Signing time: Thu 15 Oct 2026 08:01:30 +0000
Manifest this update: Thu 15 Oct 2026 08:01:30 +0000
Manifest next update: Fri 16 Oct 2026 08:01:30 +0000
Files and hashes: 1: 4koD-A9i2oZjUuGZCZfx1GzrL7A.crl (hash: XUW27sK1JKFLVDTj9QjnGgzNiDrVqSxFvJCUMVsecUw=)
2: WlHlPJ2Yx-QYEFNJTd1fZunOqeI.roa (hash: V3F5Ix6QWwGrgFg4N8xfN4dbqz/bAEkV9NWs0dFeZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:a2:85:51:7b:f3:65:63:7a:48:17:89:5a:f3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Validity
Not Before: Oct 15 08:01:30 2026 GMT
Not After : Oct 16 08:01:30 2026 GMT
Subject: CN=bcd251f1559122eab2dbc03ed8860eeff9d9ca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:1f:81:d9:4d:72:c7:12:27:fe:31:f0:d1:
0a:0b:72:a7:67:dc:69:f4:77:ca:84:60:87:a2:1e:
92:bd:ba:a9:9b:05:f8:af:eb:2d:ec:6f:fa:4e:a3:
ec:b4:54:f3:4a:eb:18:d4:b8:ff:06:e8:2d:28:25:
f6:7d:1e:c6:ef:4d:2d:a0:38:e7:49:bf:c9:f4:4e:
44:cd:99:a1:d6:ec:5f:46:a1:89:2e:da:03:83:86:
20:1c:fa:da:a3:a4:b5:5e:30:a7:c6:f7:36:42:18:
dd:a5:4e:9c:29:54:79:65:c8:42:77:49:89:27:f6:
77:3d:29:50:fd:b6:d7:29:35:44:91:40:47:40:b1:
48:fa:70:14:e3:4f:93:72:a9:a0:9c:a1:1f:a6:ae:
b7:e7:37:f9:b1:f9:87:17:3b:f4:1f:27:5f:e1:73:
10:3b:87:0a:f1:f6:1b:e8:bd:18:a7:a5:dd:71:a6:
e3:5e:da:50:59:0c:84:6e:ae:06:2a:6a:f2:b8:ab:
d5:cc:0b:f8:7e:30:7f:cb:0d:8c:ff:74:b4:fa:78:
66:13:bb:3f:96:70:83:46:0f:ed:df:48:b0:3c:5a:
f6:bf:c7:3c:af:39:de:de:04:d5:94:e7:d8:47:f8:
69:56:0e:f5:a4:26:d4:f3:18:ca:d9:4a:30:a6:a0:
b3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D2:51:F1:55:91:22:EA:B2:DB:C0:3E:D8:86:0E:EF:F9:D9:CA:68
X509v3 Authority Key Identifier:
keyid:E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:aa:f0:4a:63:30:d0:15:b1:9e:b5:34:85:bc:90:71:0d:2d:
e2:85:55:34:dc:b5:a9:c2:9d:aa:7b:83:54:44:a8:2e:d1:dd:
6e:3c:b8:6b:a3:63:05:16:2e:38:18:ba:56:fc:d7:e6:dc:c3:
b9:26:56:59:fb:8a:d7:b5:58:3e:16:35:2a:89:bd:6f:d6:60:
d9:10:82:d0:8e:e9:40:34:ff:ba:db:d6:6b:fd:be:54:d3:12:
98:92:4d:cd:f2:80:9b:29:36:6e:16:e5:0c:ef:b8:02:9a:17:
bb:15:f4:19:f3:45:8d:af:1d:cf:9e:15:ab:45:e4:5d:ad:20:
43:2c:99:e5:7b:b7:d3:1b:09:ca:dd:05:54:40:37:ed:0e:7e:
29:16:95:65:4c:b4:73:27:62:07:72:d4:11:6b:0b:00:19:b6:
e4:06:54:c8:71:09:65:a1:02:b8:78:75:c1:72:18:fb:5b:18:
e0:5c:7b:fa:4b:71:a8:50:70:6a:76:30:dc:67:1c:0d:66:0a:
87:28:a8:0f:e4:24:8e:83:c7:56:75:00:44:5a:1b:d4:34:6f:
8e:45:31:8d:af:5f:b3:08:a5:eb:4a:6b:d1:1a:28:37:76:d7:
e4:3c:b3:55:72:44:db:e0:14:fe:a0:5c:c4:d6:25:10:41:95:
fc:ab:28:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:07 2026 by rpki-client