Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
File: 4koD-A9i2oZjUuGZCZfx1GzrL7A.mft (raw, json)
Hash identifier: r0GHqQAdPVvo2s6fxuIjIzgD7V5Wb4aH9qS1U5z49F4=
Subject key identifier: A2:06:A0:D6:B3:47:89:F3:8F:27:27:E5:28:5E:CB:7B:CB:3B:9D:F0
Authority key identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
Certificate issuer: /CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Certificate serial: 019E1D224174ED7DD8D6B6C1D8AE4024627C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
Manifest number: 15C3
Signing time: Tue 12 May 2026 17:00:44 +0000
Manifest this update: Tue 12 May 2026 17:00:44 +0000
Manifest next update: Wed 13 May 2026 17:00:44 +0000
Files and hashes: 1: 4koD-A9i2oZjUuGZCZfx1GzrL7A.crl (hash: dbsTMS+/yaUQ6+VnxaDWx7ErFVIscHHc9XtdtxHzk5c=)
2: WlHlPJ2Yx-QYEFNJTd1fZunOqeI.roa (hash: V3F5Ix6QWwGrgFg4N8xfN4dbqz/bAEkV9NWs0dFeZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:41:74:ed:7d:d8:d6:b6:c1:d8:ae:40:24:62:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Validity
Not Before: May 12 17:00:44 2026 GMT
Not After : May 13 17:00:44 2026 GMT
Subject: CN=a206a0d6b34789f38f2727e5285ecb7bcb3b9df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:c9:1b:6f:35:09:ec:e7:72:50:13:15:34:
db:3c:25:40:5f:3b:87:eb:8c:42:10:56:ba:8e:1b:
3b:38:ed:d8:53:cf:25:dc:0a:4f:e7:df:2c:0f:bf:
ce:9a:ba:38:3c:ca:ed:39:d5:38:a7:69:54:9e:9f:
99:00:cd:62:0e:59:36:77:1b:14:1d:86:fa:7b:9d:
25:f2:d2:c8:9e:4b:67:77:26:30:11:72:26:d4:e3:
87:e6:66:ac:9f:f5:b3:00:0e:11:9d:fd:ea:95:80:
7a:23:d6:10:12:7b:85:a1:e8:a4:fa:cd:11:06:cd:
e7:1a:fd:bf:e5:95:4b:fd:6a:ee:9e:d4:16:62:ea:
47:c4:ad:0b:bd:d1:93:8d:a5:a9:71:ad:b5:7e:b0:
f0:c8:b9:8f:9f:09:bc:13:f0:c4:f3:7c:3d:81:23:
2b:a0:01:7b:f2:79:61:3d:b4:56:3d:39:d6:79:f7:
0f:61:7d:5d:b7:07:70:64:97:a3:88:02:62:ea:45:
c2:4b:02:c2:6e:35:6a:2b:21:3b:b3:a6:3e:a4:6d:
f3:5f:d1:d4:65:b4:29:89:08:89:bc:a3:0f:6e:33:
22:30:de:ce:ad:14:63:e6:7f:c9:6a:cf:0a:e1:92:
89:1d:a9:f9:c6:0e:17:56:68:96:04:bb:f0:2f:ac:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:06:A0:D6:B3:47:89:F3:8F:27:27:E5:28:5E:CB:7B:CB:3B:9D:F0
X509v3 Authority Key Identifier:
keyid:E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0d:02:5a:99:f4:48:3b:29:d5:a8:ea:fb:8f:6d:47:95:d0:
55:4e:35:ee:41:0f:01:a2:88:82:7f:20:24:5f:b1:dc:ea:b3:
a5:88:73:7a:c3:9a:f4:12:b0:70:18:1c:37:2f:5d:a7:63:ed:
5e:bd:96:25:19:2d:95:2d:eb:45:9f:a1:d1:e2:c8:ba:80:9d:
91:0f:58:cd:1b:3c:ba:5e:ec:21:db:aa:fa:e1:30:8a:f7:d9:
99:ba:b8:e1:fa:48:b5:f6:22:b5:a8:09:d2:a6:1f:7f:dd:5d:
da:de:ae:4d:bc:34:d1:33:c6:20:5a:fe:72:0f:01:47:58:f3:
6a:f8:7f:f6:6c:a6:8d:02:54:3d:ef:a0:9f:93:45:25:86:1b:
65:f3:4b:83:34:e6:4b:07:34:a9:dd:c6:1e:e0:56:3b:d2:98:
c7:76:fe:ab:af:2d:35:4b:57:43:ab:a2:0b:35:d8:67:d4:47:
59:ce:73:2f:e3:b5:91:69:6e:30:63:61:89:d3:42:b6:95:bc:
c4:61:90:62:b9:47:6d:4f:8a:4c:2e:7e:b7:34:08:ac:05:03:
b4:52:c8:c6:6e:ba:a6:0d:db:49:b9:d7:0b:c5:7b:52:cd:bb:
24:db:52:56:e7:e7:1d:c8:f1:17:93:45:ea:60:13:f9:d2:f6:
fc:44:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:19 2026 by rpki-client