Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: YapiZ4z1Gr3fn+7xO8k+WLxTTdp+3qlTueiGTJ+8F24=
Subject key identifier: 26:09:75:90:9A:07:AD:03:20:A5:60:7A:C8:74:FE:57:BE:FC:87:CA
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 01A13D4A8F432BF065AABA95A260C9F0B9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 118D
Signing time: Thu 15 Oct 2026 02:00:58 +0000
Manifest this update: Thu 15 Oct 2026 02:00:58 +0000
Manifest next update: Fri 16 Oct 2026 02:00:58 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: J8BelSnH+i+pkiqgSeZVpIuUoNTfq4lHRrQUPUnW+/U=)
2: tMtN8-QriDVpgeW2wDDvJvfjR9M.roa (hash: xSHPKvxZeM3dEwuvm0xnQCeYW9E45CjCYOCoqNZiqPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:8f:43:2b:f0:65:aa:ba:95:a2:60:c9:f0:b9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Oct 15 02:00:58 2026 GMT
Not After : Oct 16 02:00:58 2026 GMT
Subject: CN=260975909a07ad0320a5607ac874fe57befc87ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:7b:52:81:ad:ea:35:ac:58:0f:7a:f6:78:
11:1d:e8:f5:29:1c:d8:ee:f8:eb:a1:6f:5e:5c:07:
a2:8e:a9:fb:61:ae:19:ae:cc:5f:11:b1:c7:4f:25:
0a:af:1a:1e:8f:6a:da:54:70:b2:34:c8:46:a4:46:
2d:cb:f5:27:19:28:fa:e2:53:4d:7c:62:a2:dd:a7:
58:a1:f5:24:15:80:10:f8:41:e5:82:ae:dd:92:b1:
7d:91:97:1a:3d:96:d5:c8:94:33:96:52:57:5d:03:
33:28:3b:66:43:8a:8e:dd:6a:b9:43:c7:fa:de:2a:
e7:a3:10:80:61:b0:6f:7c:68:12:52:8e:ec:a1:f3:
98:6e:a0:fc:d1:08:50:e2:4b:44:30:b1:7a:a9:01:
8f:4f:1c:a8:59:3d:b5:25:90:fe:32:98:b4:a5:40:
a2:83:c1:e6:71:50:8a:40:e2:5e:d9:40:09:0b:8f:
18:3c:1d:ac:0f:1c:ce:8e:3d:a4:cf:5c:33:ca:a6:
5d:11:cc:77:7a:b1:a5:f4:91:e0:9e:bb:d1:81:36:
27:b8:ee:69:28:1d:1d:6d:cd:8a:6e:23:27:fd:3e:
6f:58:4d:59:27:75:fa:bd:c7:fa:36:e6:49:9d:d1:
07:08:69:c0:d4:f5:f4:12:43:ab:30:0b:cc:b5:f9:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:09:75:90:9A:07:AD:03:20:A5:60:7A:C8:74:FE:57:BE:FC:87:CA
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:15:99:04:4a:f5:3b:2b:fa:52:b2:e6:88:a1:2a:01:5d:81:
80:8b:94:1c:ad:e0:03:a5:3c:57:e5:5e:13:1a:71:6b:c6:c4:
01:94:65:b5:b7:14:74:9a:ac:ef:21:cf:02:df:2e:77:5a:de:
34:18:f3:12:40:c8:f6:42:5e:54:2d:48:6c:c1:88:99:c2:ed:
4b:b8:5e:af:89:48:c4:55:69:5c:ce:35:8f:19:d6:b7:32:b8:
f8:20:7d:27:80:70:1c:ef:93:82:f3:81:ad:21:dc:5c:45:c2:
f7:13:b1:a8:67:cc:e7:be:79:25:1a:36:ba:54:1e:9b:81:28:
38:e4:93:a5:c2:9a:d1:c8:82:4b:58:fc:e4:a4:fa:9d:0c:59:
f6:a8:be:57:f3:36:f9:14:dd:fc:86:4e:a7:8c:09:dd:1e:d9:
aa:e4:3a:04:5f:37:32:76:67:c1:c7:a3:65:b9:65:f1:2d:94:
a0:c8:7c:7f:3b:98:38:38:9d:97:55:a6:8c:d5:18:44:28:da:
4e:cf:80:54:55:cc:c4:14:38:61:dd:ef:b7:66:63:84:19:04:
e1:c3:82:32:e7:31:00:ff:dd:68:e0:fa:33:c4:05:8a:23:b6:
f8:b4:b1:52:14:e2:d8:ae:47:fb:bd:f5:53:08:2e:89:bd:80:
c5:64:d5:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9So9DK/BlqrqVomDJ8Ln1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGM5YzUwY2Y0ZTJkYWMwNWUxZjA0MzI4MjI0ZTIwYTQ2
MDVkNzcwHhcNMjYxMDE1MDIwMDU4WhcNMjYxMDE2MDIwMDU4WjAzMTEwLwYDVQQD
EygyNjA5NzU5MDlhMDdhZDAzMjBhNTYwN2FjODc0ZmU1N2JlZmM4N2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF97UoGt6jWsWA969ngRHej1KRzY
7vjroW9eXAeijqn7Ya4ZrsxfEbHHTyUKrxoej2raVHCyNMhGpEYty/UnGSj64lNN
fGKi3adYofUkFYAQ+EHlgq7dkrF9kZcaPZbVyJQzllJXXQMzKDtmQ4qO3Wq5Q8f6
3irnoxCAYbBvfGgSUo7sofOYbqD80QhQ4ktEMLF6qQGPTxyoWT21JZD+Mpi0pUCi
g8HmcVCKQOJe2UAJC48YPB2sDxzOjj2kz1wzyqZdEcx3erGl9JHgnrvRgTYnuO5p
KB0dbc2KbiMn/T5vWE1ZJ3X6vcf6NuZJndEHCGnA1PX0EkOrMAvMtfnrXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYJdZCaB60DIKVgesh0/le+/IfKMB8GA1UdIwQY
MBaAFOJMnFDPTi2sBeHwQygiTiCkYF13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGIt
MGJmYjg2ODg0NDA0LzEvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGItMGJmYjg2ODg0NDA0
LzEvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhWZBEr1
Oyv6UrLmiKEqAV2BgIuUHK3gA6U8V+VeExpxa8bEAZRltbcUdJqs7yHPAt8ud1re
NBjzEkDI9kJeVC1IbMGImcLtS7her4lIxFVpXM41jxnWtzK4+CB9J4BwHO+TgvOB
rSHcXEXC9xOxqGfM5755JRo2ulQem4EoOOSTpcKa0ciCS1j85KT6nQxZ9qi+V/M2
+RTd/IZOp4wJ3R7ZquQ6BF83MnZnwcejZbll8S2UoMh8fzuYODidl1WmjNUYRCja
Ts+AVFXMxBQ4Yd3vt2ZjhBkE4cOCMucxAP/daOD6M8QFiiO2+LSxUhTi2K5H+731
Uwguib2AxWTVVg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:48 2026 by rpki-client