Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
File: 4koD-A9i2oZjUuGZCZfx1GzrL7A.mft (raw, json)
Hash identifier: 2sG3vVB5806EEq3SgWJrnq9ws0wbImI/+tXf1LirJLs=
Subject key identifier: A8:1D:EA:B5:F2:48:FD:13:26:40:95:77:EC:FB:B2:DE:27:7D:57:D0
Authority key identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
Certificate issuer: /CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Certificate serial: 019F8FEC29EA3C126CBDCDCC2E431FA7A868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
Manifest number: 1683
Signing time: Thu 23 Jul 2026 17:00:46 +0000
Manifest this update: Thu 23 Jul 2026 17:00:46 +0000
Manifest next update: Fri 24 Jul 2026 17:00:46 +0000
Files and hashes: 1: 4koD-A9i2oZjUuGZCZfx1GzrL7A.crl (hash: /+ulOLRHgJtkVzwuee0ZR4XvC1YMjPZo2s0H0/tFTa8=)
2: WlHlPJ2Yx-QYEFNJTd1fZunOqeI.roa (hash: V3F5Ix6QWwGrgFg4N8xfN4dbqz/bAEkV9NWs0dFeZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:29:ea:3c:12:6c:bd:cd:cc:2e:43:1f:a7:a8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Validity
Not Before: Jul 23 17:00:46 2026 GMT
Not After : Jul 24 17:00:46 2026 GMT
Subject: CN=a81deab5f248fd1326409577ecfbb2de277d57d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:41:8c:80:2c:d7:88:0d:7e:47:6d:f4:ac:
c4:c3:f5:39:39:d0:8f:ff:29:82:9b:8d:31:8d:88:
ac:e2:35:9e:9d:64:17:6a:a6:ce:5d:37:8c:eb:3d:
ee:bd:33:d8:17:06:45:9b:39:79:b6:08:1a:b2:77:
f1:f3:49:41:1c:5a:ec:bd:26:ab:da:ad:2c:4a:32:
dd:c8:6d:29:2e:e3:e3:69:f5:8f:34:49:6d:98:38:
cc:31:6a:b0:d9:bf:a4:aa:55:90:b8:6f:13:33:26:
7b:76:0f:88:26:70:0f:05:f2:fb:ae:ad:15:c0:a5:
cb:cc:e2:44:5d:4e:6c:08:2d:06:24:98:93:93:1c:
85:59:fc:14:18:3d:dc:52:89:06:84:f8:e8:df:0b:
65:79:ed:47:7c:a0:01:f0:08:5c:44:e4:59:db:36:
b1:65:65:ab:84:6c:d3:a7:7a:06:3b:a9:9c:da:eb:
fd:aa:96:0a:69:50:a6:4e:33:a4:43:66:c3:bd:f3:
48:82:b9:81:0a:fe:ef:23:c0:17:96:bf:bd:26:25:
b0:f0:75:16:e7:f6:c2:54:30:64:6d:8d:a3:25:6c:
cd:1b:9e:d5:df:68:97:e6:5a:7b:0c:a5:7d:f2:4a:
d3:d0:c1:fd:a3:f8:15:02:70:f6:d5:0a:91:f9:90:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1D:EA:B5:F2:48:FD:13:26:40:95:77:EC:FB:B2:DE:27:7D:57:D0
X509v3 Authority Key Identifier:
keyid:E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6c:c7:6a:bb:9c:35:f8:a7:60:22:4e:87:1f:f7:4c:53:99:
46:1d:99:d3:46:ba:0c:63:72:7d:e1:07:30:3b:d2:30:c9:ac:
66:90:26:ad:f4:b5:98:8a:c7:b6:1c:b3:28:93:a8:49:65:22:
fb:44:c7:2b:eb:cc:d2:97:84:44:2a:89:29:bf:e6:3d:fd:ab:
d8:c9:10:3c:7a:14:b9:45:36:9c:bb:7f:55:f9:e9:e2:57:22:
4f:12:b9:a1:26:47:11:27:3d:db:9c:c2:17:a9:3f:e6:b3:e4:
fd:dc:31:39:a6:01:2d:6c:98:3e:28:92:88:c4:f7:c3:4c:bc:
c3:7c:47:87:24:69:1f:5d:8b:82:3c:ae:ef:0f:2c:ef:0f:b2:
36:0a:75:87:27:91:a9:ed:a8:0d:ed:d5:2c:06:fb:fd:8e:5b:
05:9a:64:36:52:66:b5:66:ec:1c:7c:5d:d1:ce:3b:b9:55:b3:
37:82:10:d7:4a:b6:ac:05:9b:0b:58:f6:3c:e5:bf:eb:84:50:
1c:6b:55:3d:17:cd:fe:f7:01:42:1a:a9:3e:cf:44:e8:d4:88:
b2:93:9d:c3:b1:03:5d:35:9d:62:e4:bb:3a:b2:c6:38:59:2a:
f7:76:13:4b:f7:51:6b:88:c6:8c:5c:74:42:30:84:f4:cb:d6:
88:b5:cf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:59 2026 by rpki-client