Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: rxEdd6v6cGsWBuVjpHrf9xkUYwOhu+smdWW+R9kkiMU=
Subject key identifier: AA:50:09:FF:03:61:BE:FC:56:7C:1B:A1:ED:E7:FC:5C:57:3C:A6:54
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 01A0CB595D97CA6C0237AD94952C1B6AF1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 1152
Signing time: Tue 22 Sep 2026 23:00:26 +0000
Manifest this update: Tue 22 Sep 2026 23:00:26 +0000
Manifest next update: Wed 23 Sep 2026 23:00:26 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: K/c03txbkV0/6ULVsSZLhE3JeNFgPoi4oj04BrJE27Q=)
2: tMtN8-QriDVpgeW2wDDvJvfjR9M.roa (hash: xSHPKvxZeM3dEwuvm0xnQCeYW9E45CjCYOCoqNZiqPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:5d:97:ca:6c:02:37:ad:94:95:2c:1b:6a:f1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Sep 22 23:00:26 2026 GMT
Not After : Sep 23 23:00:26 2026 GMT
Subject: CN=aa5009ff0361befc567c1ba1ede7fc5c573ca654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:08:ef:7c:0a:26:be:af:48:26:58:72:05:
36:f9:8a:10:32:e6:03:98:06:85:b6:83:00:d1:53:
f2:ff:a5:ed:60:6b:b4:9a:90:e0:e3:5e:37:f5:15:
96:d1:7d:97:41:33:c7:6f:db:90:c2:d1:c3:76:61:
74:13:0a:2b:a2:47:55:5f:53:ce:f8:0d:75:7f:58:
fc:ec:88:f1:d3:13:7d:6e:88:10:c1:46:0e:93:29:
8d:87:09:1f:49:f5:44:c3:98:3b:57:65:26:0c:e9:
42:26:cf:95:6c:bc:8e:b6:d5:b2:d9:00:13:f0:58:
b0:22:f4:0c:86:ec:c6:b9:a9:70:fe:84:1e:b4:4f:
74:a8:86:be:2d:2d:94:2a:11:9c:94:a2:c2:7d:7c:
5b:85:3c:5c:4a:16:f7:4e:b6:99:4b:9b:23:4a:2c:
3e:17:0e:99:36:d0:0f:3f:f9:aa:fc:03:ae:32:55:
41:9d:b8:4e:d0:6a:1b:e8:dc:ee:30:b8:ed:bd:0a:
9e:eb:89:3a:73:96:3b:8d:32:db:da:dd:e4:94:41:
77:27:d6:cb:42:27:6b:7a:e5:43:0a:a3:cd:01:32:
e9:54:39:2c:44:31:1c:f9:90:0a:6e:88:f9:a1:4f:
2f:c4:f8:b1:64:9d:f3:7d:d9:2a:35:69:95:b9:55:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:50:09:FF:03:61:BE:FC:56:7C:1B:A1:ED:E7:FC:5C:57:3C:A6:54
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6e:ea:3a:55:09:2c:c4:19:8e:68:8c:78:2e:89:f3:79:1d:
87:18:d9:01:4f:17:24:5a:80:ec:c3:5a:5d:37:00:e5:38:65:
88:58:d1:e4:30:7f:56:75:e4:2e:9a:31:cd:22:cd:8e:72:51:
a4:e9:90:52:9c:0e:5e:79:60:73:70:69:b4:83:d9:5e:47:80:
27:2c:8e:45:f9:ce:79:37:c2:8b:72:89:35:99:e0:8e:22:50:
d6:ef:9f:86:80:37:88:e0:db:e5:cb:a2:58:6a:c6:3a:db:11:
6a:13:74:e8:d7:0e:e5:ff:f2:e1:8a:b7:50:39:3c:f9:14:88:
da:33:07:5f:a5:ee:52:65:f8:89:17:b1:97:de:6e:86:60:00:
7d:97:91:89:89:31:da:c1:6d:3d:d7:f6:9d:51:fe:87:ee:ab:
69:38:65:a8:d8:75:de:e7:ba:b1:cb:8e:f7:bd:6b:9f:a3:f1:
3e:5a:1b:5e:97:53:c9:83:4e:8c:8c:d4:05:64:fa:26:85:b6:
a0:9d:11:af:78:e6:b4:fa:77:7b:b0:61:8d:08:98:2a:ff:73:
2b:42:4c:e9:c4:ce:62:65:28:12:c4:d7:93:7b:f3:0f:96:8d:
d5:ab:04:1e:04:bc:cf:2f:50:67:40:d4:04:ca:1b:a7:e4:fa:
c5:d6:74:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWV2XymwCN62UlSwbavHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGM5YzUwY2Y0ZTJkYWMwNWUxZjA0MzI4MjI0ZTIwYTQ2
MDVkNzcwHhcNMjYwOTIyMjMwMDI2WhcNMjYwOTIzMjMwMDI2WjAzMTEwLwYDVQQD
EyhhYTUwMDlmZjAzNjFiZWZjNTY3YzFiYTFlZGU3ZmM1YzU3M2NhNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28QI73wKJr6vSCZYcgU2+YoQMuYD
mAaFtoMA0VPy/6XtYGu0mpDg41439RWW0X2XQTPHb9uQwtHDdmF0EworokdVX1PO
+A11f1j87Ijx0xN9bogQwUYOkymNhwkfSfVEw5g7V2UmDOlCJs+VbLyOttWy2QAT
8FiwIvQMhuzGualw/oQetE90qIa+LS2UKhGclKLCfXxbhTxcShb3TraZS5sjSiw+
Fw6ZNtAPP/mq/AOuMlVBnbhO0Gob6NzuMLjtvQqe64k6c5Y7jTLb2t3klEF3J9bL
QidreuVDCqPNATLpVDksRDEc+ZAKboj5oU8vxPixZJ3zfdkqNWmVuVW/HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpQCf8DYb78Vnwboe3n/FxXPKZUMB8GA1UdIwQY
MBaAFOJMnFDPTi2sBeHwQygiTiCkYF13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGIt
MGJmYjg2ODg0NDA0LzEvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGItMGJmYjg2ODg0NDA0
LzEvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaG7qOlUJ
LMQZjmiMeC6J83kdhxjZAU8XJFqA7MNaXTcA5ThliFjR5DB/VnXkLpoxzSLNjnJR
pOmQUpwOXnlgc3BptIPZXkeAJyyORfnOeTfCi3KJNZngjiJQ1u+fhoA3iODb5cui
WGrGOtsRahN06NcO5f/y4Yq3UDk8+RSI2jMHX6XuUmX4iRexl95uhmAAfZeRiYkx
2sFtPdf2nVH+h+6raThlqNh13ue6scuO971rn6PxPlobXpdTyYNOjIzUBWT6JoW2
oJ0Rr3jmtPp3e7BhjQiYKv9zK0JM6cTOYmUoEsTXk3vzD5aN1asEHgS8zy9QZ0DU
BMobp+T6xdZ0AA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:37:34 2026 by rpki-client