Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: caq+8qbJmcuiAUTX83dfzK5iXDcuEZ5NPHfz6bNzCBk=
Subject key identifier: 53:7A:CB:B3:25:3F:28:95:38:A3:A8:69:BD:E8:16:89:F7:7E:AF:D5
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 019D39E5ECE80D0E987B4C75661961401E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 0F79
Signing time: Sun 29 Mar 2026 14:01:02 +0000
Manifest this update: Sun 29 Mar 2026 14:01:02 +0000
Manifest next update: Mon 30 Mar 2026 14:01:02 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: PmfvBF16EV67f21KT30auVW03J3kPAD7iHVROz9xG78=)
2: tMtN8-QriDVpgeW2wDDvJvfjR9M.roa (hash: xSHPKvxZeM3dEwuvm0xnQCeYW9E45CjCYOCoqNZiqPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:ec:e8:0d:0e:98:7b:4c:75:66:19:61:40:1e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Mar 29 14:01:02 2026 GMT
Not After : Mar 30 14:01:02 2026 GMT
Subject: CN=537acbb3253f289538a3a869bde81689f77eafd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:79:af:26:28:58:c4:a7:aa:01:22:d2:b3:
7d:7c:1f:a7:3b:b3:c6:73:eb:89:3a:4d:8e:45:54:
c9:b6:5b:b8:10:0c:82:bd:cc:00:cd:37:ee:7a:18:
fa:50:b8:ee:d3:a4:8a:76:c6:66:90:e4:4a:fc:8c:
ef:5d:af:a6:f8:bf:bf:6b:85:8f:f8:ea:dc:7d:bc:
95:b1:ea:2b:4b:b2:30:c9:cd:e5:37:b5:81:99:e9:
0e:e0:09:b2:14:43:03:88:75:fb:8b:41:75:07:be:
d9:36:13:a4:97:f5:88:6c:d2:79:2b:3b:cd:6e:58:
e6:06:d3:1a:dc:ca:f3:38:4c:47:a3:0b:cf:b1:a7:
db:3f:dd:59:c1:8e:ae:d6:b4:5a:0f:1d:62:cc:99:
ae:eb:bf:27:0c:6f:69:f6:c1:fc:a9:29:bf:e7:3a:
80:70:79:ea:82:af:8e:31:16:d1:6d:3b:11:61:46:
8d:1d:61:7b:47:a9:9b:64:cd:a8:96:26:a8:99:af:
13:30:01:53:b5:cb:9c:92:2c:b8:36:ef:5d:c1:d6:
05:cc:06:83:23:be:90:3b:c3:4c:8f:50:88:91:d5:
e9:cd:61:ca:c5:d2:8c:47:88:29:a9:bb:04:4e:b0:
d7:d6:3a:3e:c8:06:6f:72:8a:03:da:58:22:48:d6:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7A:CB:B3:25:3F:28:95:38:A3:A8:69:BD:E8:16:89:F7:7E:AF:D5
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:45:b4:fe:26:6c:a0:33:e0:96:4a:cb:7b:49:97:f4:e0:f3:
47:8b:53:d7:e4:76:e5:fc:64:9a:9c:da:c8:ef:49:3f:6c:59:
7a:d8:3b:19:fe:81:4e:d8:b4:33:6d:ea:0c:03:1a:e6:96:01:
89:4a:ca:78:db:e2:fd:59:df:3e:12:6b:6e:9a:bf:1c:d1:61:
a0:26:fb:55:4d:3c:5a:5c:e6:2b:83:23:e9:e8:4e:00:5c:21:
2f:70:f4:16:af:cc:bf:95:74:c3:5b:77:28:b2:63:a4:dd:6c:
56:26:a6:ad:2a:7e:ef:22:57:e8:d5:b8:a0:0f:ac:99:60:cf:
0a:43:7c:c8:ad:2a:69:4b:1c:88:47:4b:2f:ec:c2:a4:b7:bb:
6f:71:16:41:ca:69:ce:6b:0f:5e:84:a5:f6:4a:5a:2e:8d:d1:
54:c0:89:43:93:e5:9b:04:e5:79:f5:cb:5e:ac:2b:9e:b4:b5:
d7:5d:da:18:84:80:ad:1b:c7:f4:01:c1:c1:d2:ea:ea:99:14:
9e:ea:6a:bc:57:1b:5e:98:d7:36:df:26:82:85:a5:31:41:59:
15:e6:64:f8:56:3e:9d:cb:3c:76:35:75:1d:b7:05:86:ba:f3:
dd:23:e6:df:6e:b6:b4:12:2b:ea:29:f0:fd:b2:35:4e:c5:89:
b3:50:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:25 2026 by rpki-client