Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
File: 4koD-A9i2oZjUuGZCZfx1GzrL7A.mft (raw, json)
Hash identifier: TTq3TEorj6NNK6BsV6ufxM+3JIjFe9e5kKYWBiy5r5M=
Subject key identifier: 8E:6D:99:47:97:47:7E:B2:51:41:B2:87:33:86:0A:B0:7A:A0:52:BA
Authority key identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
Certificate issuer: /CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Certificate serial: 01A0D080159E8B62483D3208546EA4F1C6C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
Manifest number: 1729
Signing time: Wed 23 Sep 2026 23:00:50 +0000
Manifest this update: Wed 23 Sep 2026 23:00:50 +0000
Manifest next update: Thu 24 Sep 2026 23:00:50 +0000
Files and hashes: 1: 4koD-A9i2oZjUuGZCZfx1GzrL7A.crl (hash: z87jGnP3/ydImY8KpJXhFa2K/bACwKMsbfYBj//kCFI=)
2: WlHlPJ2Yx-QYEFNJTd1fZunOqeI.roa (hash: V3F5Ix6QWwGrgFg4N8xfN4dbqz/bAEkV9NWs0dFeZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:15:9e:8b:62:48:3d:32:08:54:6e:a4:f1:c6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Validity
Not Before: Sep 23 23:00:50 2026 GMT
Not After : Sep 24 23:00:50 2026 GMT
Subject: CN=8e6d994797477eb25141b28733860ab07aa052ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:ec:55:2d:fb:13:e9:69:19:69:ef:c2:1f:
0c:4a:2c:88:f2:35:10:8d:25:2d:86:67:96:af:c7:
73:17:f7:f2:e4:53:44:0e:73:aa:4b:26:4c:4f:c8:
44:d9:f1:35:bd:d8:fa:4b:e2:9b:2b:8b:1d:ca:28:
c6:25:94:99:3d:9b:be:ef:2e:dc:9c:86:21:40:39:
a2:b8:b6:3a:c7:37:bc:5c:1d:6d:75:2f:c7:86:ac:
e2:d6:68:cc:27:24:8d:86:a3:ef:1d:ff:1c:6f:b7:
07:02:87:49:e9:fd:81:f5:7a:d9:64:7a:34:4d:1f:
6b:9d:9e:c3:c0:38:4b:bd:11:25:9f:97:f5:f1:50:
e7:dc:d1:ba:37:62:55:8a:67:40:29:40:98:df:8f:
65:54:bc:16:56:2d:71:31:3c:aa:4c:4d:e7:67:46:
45:63:b4:9b:26:1f:9a:89:8e:95:85:23:65:dc:86:
a6:94:b2:23:b4:a1:e3:92:13:52:9c:2e:90:5c:92:
74:73:2f:f2:2b:be:81:45:6a:c1:52:7f:73:92:49:
52:35:c8:5a:f5:6d:6f:9c:a8:2b:d6:15:c6:8d:11:
7d:57:b4:f5:f3:79:d9:f9:2e:2c:a3:3b:d5:a6:02:
34:92:99:26:92:54:26:4d:b3:9f:80:c3:e6:d5:55:
bb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6D:99:47:97:47:7E:B2:51:41:B2:87:33:86:0A:B0:7A:A0:52:BA
X509v3 Authority Key Identifier:
keyid:E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:88:5e:21:49:d0:af:e9:c7:a2:59:80:4a:f2:a6:4b:ca:86:
d6:fd:5e:b9:dc:fd:51:d2:d8:3a:e5:ca:a5:0d:a8:f1:a5:a0:
a1:9c:f3:a7:79:69:68:03:9f:e9:81:da:09:6f:11:a4:cf:5b:
55:ff:0c:2e:85:5d:fa:a5:f6:76:f6:c3:2b:42:1c:89:20:f4:
9d:39:21:8b:f9:64:4e:6e:ca:b9:8f:58:d1:1d:7c:17:33:31:
bc:77:8f:2c:20:29:04:68:ec:c0:3a:cc:41:aa:05:6d:0a:47:
8a:e4:08:90:73:86:75:bf:6a:b3:40:bc:2c:b2:db:d4:93:3f:
74:a1:69:83:8d:ae:2f:69:fb:fe:e9:11:29:33:fa:83:7c:c2:
28:54:b1:0b:38:9a:02:30:18:bf:ee:c1:a7:7c:ba:02:c9:3c:
b1:81:07:63:98:53:c9:3c:2f:6e:31:96:6c:bf:53:7e:01:fe:
eb:cf:d8:19:aa:31:09:8f:f2:be:a7:09:fa:1f:4a:d6:e9:90:
60:0c:31:86:95:ee:1b:a8:4a:c1:ff:8a:63:6d:66:84:4c:3a:
92:70:4c:63:db:21:ab:04:a9:7c:ac:b8:8e:8c:e9:2d:39:a4:
e3:52:9c:4a:8e:44:68:69:79:d6:9d:4e:32:eb:29:0f:d9:05:
51:13:60:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:43:13 2026 by rpki-client