Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: ehJOyp0XhpNYlBvulB2gxXHpZbAhiXigIBi8YLMOpNE=
Subject key identifier: F3:18:D2:84:AB:9C:3C:5F:B7:44:9D:79:96:7D:91:60:52:A5:DA:F6
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 019E3117A8FD004516D9EFB34579AB8EDDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 0FF9
Signing time: Sat 16 May 2026 14:01:34 +0000
Manifest this update: Sat 16 May 2026 14:01:34 +0000
Manifest next update: Sun 17 May 2026 14:01:34 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: CQUu3HuIwPU7BHBykbVjWDr6fPiQznGjrmzzW3m/SEg=)
2: tMtN8-QriDVpgeW2wDDvJvfjR9M.roa (hash: xSHPKvxZeM3dEwuvm0xnQCeYW9E45CjCYOCoqNZiqPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:a8:fd:00:45:16:d9:ef:b3:45:79:ab:8e:dd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: May 16 14:01:34 2026 GMT
Not After : May 17 14:01:34 2026 GMT
Subject: CN=f318d284ab9c3c5fb7449d79967d916052a5daf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:98:f3:27:f3:a2:cc:37:75:56:d0:c7:9a:
d0:99:22:8c:57:be:7e:91:e2:ae:b6:36:38:20:75:
4c:7a:61:dc:64:14:66:09:17:0d:3d:e3:b6:95:10:
11:2f:13:4c:c4:34:46:c0:f1:e8:9d:83:15:51:df:
3c:63:4a:22:46:f9:12:ce:b4:fb:aa:55:c5:76:c5:
20:13:a2:3b:cc:4e:82:a5:9f:ec:a7:1e:d2:69:5a:
76:58:32:1a:c3:6d:5e:54:16:06:63:b7:68:e3:bf:
8a:57:cd:8a:7f:bf:f7:7f:f8:da:e0:e0:d2:1a:aa:
34:a6:47:a5:96:d0:cd:b7:30:24:dc:f9:60:4d:b4:
84:c3:b0:51:04:7f:db:0f:70:d4:77:80:e4:23:5f:
a6:6c:92:60:49:05:29:a4:c9:5a:82:cb:63:c2:6e:
d1:55:24:ae:20:5c:e5:23:40:d1:f2:a3:32:04:54:
b9:d2:99:5d:a7:fc:28:ea:b2:37:1c:63:c6:7d:cb:
2c:83:b1:86:66:85:b2:c7:6f:f4:27:58:8e:96:5f:
31:a7:78:34:f1:96:c4:fe:8d:d9:35:0c:50:72:1f:
6d:00:3e:ad:b8:fb:41:4b:d7:3c:44:ad:8e:5e:d1:
29:ff:b2:96:18:71:1a:62:30:72:1c:1f:a2:0e:0f:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:18:D2:84:AB:9C:3C:5F:B7:44:9D:79:96:7D:91:60:52:A5:DA:F6
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5d:83:fb:18:cf:94:cb:e3:3f:51:a4:d8:cc:ce:62:9a:c9:
bb:85:b9:3f:ae:8e:ff:87:e9:fe:eb:9c:eb:59:2b:60:6c:f4:
f0:fc:2b:7b:a4:cf:cd:39:c4:f2:50:5e:2a:7a:67:72:50:0a:
ec:f3:b3:1f:01:b5:ae:e9:c6:ec:33:e4:05:1e:0a:fb:d4:c9:
27:6b:ac:2b:0b:2a:48:2c:1b:e7:f6:a7:65:83:a0:2a:41:7f:
1f:4a:ef:bb:f3:7b:97:73:71:d1:88:fe:df:85:98:b2:97:cf:
5b:c7:d5:0a:97:ac:1c:9c:3c:be:62:72:05:02:ce:a3:04:f9:
e1:ef:39:92:e6:f0:e2:bc:5f:55:f9:3e:6d:0b:4f:a3:83:92:
a9:92:b1:5e:5a:85:77:11:6c:ee:ad:4e:1e:17:09:f5:cb:c4:
c1:40:1f:e8:85:18:6c:b9:24:18:5f:f7:b6:aa:ed:b4:30:80:
d8:e3:3b:60:fd:50:66:af:6d:eb:ec:0f:c4:c2:14:2c:44:d0:
f8:ca:c2:04:32:f4:31:96:b5:fa:00:49:90:85:be:c5:a6:08:
8b:b0:b8:59:d6:b2:a6:00:ba:25:c3:98:c0:d0:b4:ce:8f:30:
7c:bc:fd:b5:bb:8d:16:22:bf:d0:59:ef:d0:c0:28:9c:9b:64:
d2:91:d3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:35 2026 by rpki-client