Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
File: 4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json)
Hash identifier: B5Hdsl9inWV9YrttT8NJg9dsYI4ApVwJ4HPW+iEdH3U=
Subject key identifier: 24:1D:C6:63:50:2B:A9:6A:C1:1F:88:BA:BA:5F:D9:3B:29:1A:FE:A4
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Certificate issuer: /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial: 01A0CA100F5E78607749A7A5D75C4952E1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
Manifest number: 1201
Signing time: Tue 22 Sep 2026 17:00:45 +0000
Manifest this update: Tue 22 Sep 2026 17:00:45 +0000
Manifest next update: Wed 23 Sep 2026 17:00:45 +0000
Files and hashes: 1: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: QEHQPnwr0IrxE9iiPp63FHLjli3yDzZWAawDYQ5d4Ig=)
2: QZoElNh2G2nwMP88BsRDda3tDUQ.roa (hash: Z+CRbrBSzZz6HmMemjR2fLmNJfImRQn2RnMbj7m1gdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:0f:5e:78:60:77:49:a7:a5:d7:5c:49:52:e1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Validity
Not Before: Sep 22 17:00:45 2026 GMT
Not After : Sep 23 17:00:45 2026 GMT
Subject: CN=241dc663502ba96ac11f88baba5fd93b291afea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:cf:46:00:90:06:f0:b8:ba:8b:a3:49:4b:
f8:c5:74:74:af:a1:80:8f:62:39:81:6c:24:23:4e:
65:0f:3b:f1:0c:f2:e1:3d:6d:5a:76:79:de:3c:58:
ad:79:59:1c:87:39:20:a7:97:bd:ba:71:a9:e4:fe:
7f:78:80:b6:21:44:d9:7f:11:99:49:9a:4b:09:0c:
0a:89:26:70:ff:f0:bf:63:21:c1:40:42:ee:dc:87:
01:09:b7:e7:20:26:7c:0e:bf:e0:55:06:b7:bb:e1:
8f:c3:52:95:24:12:3f:ae:a9:88:c6:ad:e1:3b:03:
cb:e5:18:e4:db:91:1a:60:fe:86:10:08:13:44:c8:
2d:d3:e4:92:7b:0e:b7:86:8f:e1:c7:05:d2:64:31:
e6:5f:fd:2b:b9:a7:7b:c7:df:56:ea:a6:6d:40:2b:
6d:51:58:21:12:4b:66:57:10:4d:72:e5:61:ac:ea:
56:52:43:8d:86:09:f9:80:9b:49:76:be:07:c8:f7:
ec:dd:5a:a5:f4:9e:44:2b:41:b0:9a:23:d4:5d:64:
5e:29:2d:58:40:1f:17:4d:f1:08:aa:9f:c3:7a:8b:
5a:c5:f5:ca:cd:34:a8:7f:31:0a:a2:ba:7c:05:0e:
12:a9:8e:a9:11:49:b9:95:a1:e1:b3:d7:ed:11:f9:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1D:C6:63:50:2B:A9:6A:C1:1F:88:BA:BA:5F:D9:3B:29:1A:FE:A4
X509v3 Authority Key Identifier:
keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:eb:29:54:23:72:d9:95:45:17:79:74:cf:99:4b:f4:96:ee:
8a:ce:0e:f3:95:e9:4c:80:86:ed:8a:5f:f1:6a:68:59:67:fb:
df:5c:8d:a9:13:62:b9:01:af:d0:15:76:01:43:d4:73:88:3a:
8e:b7:ae:65:e0:7e:89:fb:46:53:76:aa:30:2c:c1:9c:6d:04:
09:70:b7:9b:43:82:5d:f4:6e:5d:45:08:f0:fc:90:66:12:80:
ea:f2:27:a6:f6:0c:6b:84:ef:35:00:7c:b7:96:57:23:ea:52:
cf:c6:59:1a:11:d4:0a:30:53:c6:43:1c:a0:9c:ed:f7:42:3a:
ba:1f:72:0c:6d:33:06:19:b0:34:27:c8:2d:ac:aa:10:a3:02:
76:c0:fa:45:bd:0c:92:c8:a8:47:34:13:e8:97:c5:8b:f0:5a:
ba:f1:45:94:46:bf:e0:19:8f:ab:39:62:7e:f7:50:83:e7:78:
b9:59:1e:c8:7e:58:ea:08:6b:93:38:aa:65:d7:fc:78:e6:5f:
94:04:c9:1e:4c:77:0d:ad:4f:c7:f1:72:17:3d:2b:f1:12:64:
68:6a:34:6d:cb:23:d2:31:f2:44:36:eb:3e:8a:b2:c4:a6:ab:
3f:94:62:bc:d6:f6:bf:6d:26:6d:c0:24:90:b1:f0:36:94:91:
1e:44:f9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:11:19 2026 by rpki-client