Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: vXUAVMnoMmNQmWZ+9jRdsxdTOji3c5YXZw3dKE9mznE=
Subject key identifier: 55:CD:FB:23:D9:5A:C5:5D:F0:33:AB:37:B1:6D:92:EC:A2:7C:E4:9D
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 01A00093946197F4B037019CD27440B8AC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 10E9
Signing time: Fri 14 Aug 2026 14:01:06 +0000
Manifest this update: Fri 14 Aug 2026 14:01:06 +0000
Manifest next update: Sat 15 Aug 2026 14:01:06 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: 5oQeCsDlJKRpAOZ2tuRFsapgIPLSb88eGyDZDIRbCdQ=)
2: tMtN8-QriDVpgeW2wDDvJvfjR9M.roa (hash: xSHPKvxZeM3dEwuvm0xnQCeYW9E45CjCYOCoqNZiqPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:94:61:97:f4:b0:37:01:9c:d2:74:40:b8:ac:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Aug 14 14:01:06 2026 GMT
Not After : Aug 15 14:01:06 2026 GMT
Subject: CN=55cdfb23d95ac55df033ab37b16d92eca27ce49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:1a:7f:55:20:34:66:70:64:a0:62:51:ba:
8d:b9:f9:88:1d:96:d9:d4:b2:1c:91:53:34:a5:82:
ad:7a:7d:78:40:43:de:4b:5a:7b:ad:b3:da:94:44:
05:e9:08:32:ea:15:16:55:16:da:e2:a3:5d:f1:16:
63:64:fe:6c:0b:04:e4:b4:ee:42:a4:a3:b7:98:67:
e0:a7:e9:f7:06:cc:3d:13:25:65:a9:50:da:d7:a9:
a5:9b:f9:40:6c:10:4b:c8:6e:fc:28:3b:89:73:ef:
3b:d1:06:5e:65:9e:d9:f7:47:c1:25:61:ec:e8:03:
86:7d:b1:c2:52:ff:9d:5f:b7:9e:4b:52:90:b0:32:
53:24:b4:2a:41:fb:75:39:37:bd:29:5f:22:9e:b4:
a4:1a:43:3d:a7:55:7f:50:69:77:56:06:16:ef:f7:
bc:37:3d:9d:87:2d:a8:da:2a:04:6f:29:54:a2:47:
d4:1d:46:3b:1b:60:1b:ba:26:67:3c:db:04:fe:fa:
fa:09:41:ae:76:f3:4a:d0:3f:11:7d:7c:95:a8:fc:
a5:19:14:46:29:e1:75:d8:55:2f:a2:bc:18:ce:dd:
95:91:73:3a:2a:d6:d1:d2:83:5d:37:2a:15:28:75:
2f:ab:e0:1d:50:2d:63:50:46:7f:b2:7b:63:ba:2b:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CD:FB:23:D9:5A:C5:5D:F0:33:AB:37:B1:6D:92:EC:A2:7C:E4:9D
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5c:02:b9:a2:af:26:58:05:05:d7:70:c9:29:83:f5:e9:15:
5e:76:e5:34:57:a5:ba:6f:53:1a:73:33:ca:9b:a9:6f:6f:92:
74:b9:a5:90:92:d0:42:61:7d:7c:c3:7f:84:b2:9e:0d:4f:a0:
02:bf:22:e6:4d:85:29:83:2e:4d:8a:ff:ba:8c:5a:88:85:54:
67:fd:d9:2d:e8:28:aa:0b:2a:6b:d2:f4:d7:79:94:0a:e0:2b:
dc:69:0d:6f:29:4c:36:95:d4:1d:5c:60:9f:24:33:e0:6d:fd:
7c:d2:82:25:70:c5:3f:9d:a1:02:8f:29:f0:a4:61:29:be:96:
23:b2:07:4c:7f:d3:39:be:72:27:a6:07:78:a3:f2:ac:4e:1b:
55:25:df:59:94:4c:7d:77:c4:3d:5d:6a:b0:67:fb:59:42:ba:
23:d5:15:9d:75:58:07:95:ed:75:49:b6:b7:8d:e2:18:26:bc:
84:c3:43:de:d9:1b:34:7b:a3:76:c0:99:6b:8a:93:d4:c9:db:
19:48:50:58:00:ef:a4:e9:d7:8e:49:46:c2:75:b4:b2:c1:40:
8a:83:a5:19:63:c3:bd:04:9c:05:5a:69:ee:11:32:5f:46:5a:
1b:e1:9e:c4:a3:db:e6:56:e4:df:0e:e6:aa:79:c5:8d:62:b2:
61:b9:d4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:31 2026 by rpki-client