Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: ATcq8K4UJ6XzPY71BwWdAuNceJQxxQ5hCewuMh2A75Y=
Subject key identifier: A9:F1:3F:2D:4C:5A:BB:82:1F:63:2B:BE:B6:B0:35:91:44:B5:ED:8F
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 019F18D6ABFBEA43BC62635EDF0FF0EAF01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 1071
Signing time: Tue 30 Jun 2026 14:02:29 +0000
Manifest this update: Tue 30 Jun 2026 14:02:29 +0000
Manifest next update: Wed 01 Jul 2026 14:02:29 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: kIko+NXk7EhwmzTeAGQJBu+m+0BHVuQrLaAqCnMYCAo=)
2: tMtN8-QriDVpgeW2wDDvJvfjR9M.roa (hash: xSHPKvxZeM3dEwuvm0xnQCeYW9E45CjCYOCoqNZiqPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:ab:fb:ea:43:bc:62:63:5e:df:0f:f0:ea:f0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Jun 30 14:02:29 2026 GMT
Not After : Jul 1 14:02:29 2026 GMT
Subject: CN=a9f13f2d4c5abb821f632bbeb6b0359144b5ed8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:3b:fc:c5:d3:b3:19:2b:bc:8f:c5:4a:03:
c3:ba:2a:83:b1:e3:7c:35:7a:a7:d1:da:31:71:a5:
98:92:42:43:0a:ee:c2:5b:68:7b:a9:9c:04:d4:15:
db:e3:b2:2f:06:31:57:17:74:c3:b1:d2:8d:c1:35:
2b:cc:5b:ee:90:8d:84:1f:78:da:de:c4:fe:4c:f5:
7d:ec:d1:39:d8:8f:e0:84:79:82:30:94:68:27:bb:
ed:40:d8:8f:72:78:3c:62:b6:b4:e3:1a:55:91:31:
11:4d:3e:c8:c0:6f:18:22:93:0e:6e:65:66:fa:1c:
03:0a:d7:2c:08:a4:40:71:5d:e1:7f:e6:f5:46:2b:
a8:04:20:44:0e:5e:3b:3d:fc:99:c3:10:9c:4f:7b:
b3:7e:4b:d4:9f:40:6b:44:fa:a1:53:14:d2:1a:6c:
87:36:fa:df:49:45:0a:71:0d:6e:38:0b:a4:92:9c:
33:9b:d4:d4:8e:7f:1a:a5:f7:03:61:5f:a5:c2:8c:
c4:8f:eb:bd:dc:9b:cc:4e:39:7e:1e:4f:38:0a:97:
dc:2d:b5:4f:cb:7b:14:c8:ad:56:5f:8e:cc:54:c7:
6d:1d:e6:af:dd:bc:fb:4e:74:bb:71:b8:90:d5:d2:
a5:e9:c5:ff:8e:72:a9:4a:fe:7b:1c:ff:ab:16:e2:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F1:3F:2D:4C:5A:BB:82:1F:63:2B:BE:B6:B0:35:91:44:B5:ED:8F
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c9:89:d0:e7:29:dd:6e:5b:38:f0:a7:1d:80:db:27:1b:5c:
84:6e:d8:5f:5f:ca:f5:21:36:0f:7c:33:aa:2f:78:9f:49:34:
10:91:57:60:11:6e:ec:cf:18:60:7c:6f:dc:2b:0c:5a:07:fe:
65:60:89:b4:98:02:98:0f:78:c1:d9:9e:78:0c:07:34:02:e4:
37:e7:74:6c:c8:d8:f0:09:a9:12:d7:53:1b:0b:fa:c9:ab:52:
67:9f:df:61:9b:71:97:85:d5:b8:58:61:58:12:e2:a9:e3:44:
94:82:3d:a8:f2:bd:20:31:1d:c1:54:29:ac:41:fd:47:dd:7b:
c5:cf:3d:d5:e5:af:9b:13:87:c4:ba:98:de:cf:71:e6:96:8d:
31:dd:3d:32:21:0d:2b:65:27:ba:dd:09:a2:62:02:06:3c:1b:
a9:46:f1:52:34:33:d9:7a:d3:42:9f:59:7f:93:94:5d:11:aa:
22:74:85:23:ac:a1:24:a0:93:9b:9b:c1:22:50:ba:2c:45:e9:
6b:c0:d5:90:03:a6:26:0b:29:a8:04:b4:c7:19:5f:c7:00:c1:
e7:73:f2:f5:0b:d6:85:da:33:23:78:72:03:3d:b6:d6:cd:49:
ff:f2:4d:1e:ec:73:cd:a6:3a:46:fe:5a:07:7a:b0:b3:8c:37:
bd:65:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:48 2026 by rpki-client