Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: z8dbDLQeCyDXKwc6Pq4RAE/t//ynS1c7rWGww/G4lzI=
Subject key identifier: F7:50:00:4D:5F:E9:C1:01:43:B5:C0:51:F4:91:CF:FF:53:BF:91:87
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 019F927F26438AB44C2AA250F1528C61174D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 10B0
Signing time: Fri 24 Jul 2026 05:00:34 +0000
Manifest this update: Fri 24 Jul 2026 05:00:34 +0000
Manifest next update: Sat 25 Jul 2026 05:00:34 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: RU+UfBXtp9Nw1V4GLpTJiMJENSt5Yw8eMlwV4RVtizY=)
2: tMtN8-QriDVpgeW2wDDvJvfjR9M.roa (hash: xSHPKvxZeM3dEwuvm0xnQCeYW9E45CjCYOCoqNZiqPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:26:43:8a:b4:4c:2a:a2:50:f1:52:8c:61:17:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Jul 24 05:00:34 2026 GMT
Not After : Jul 25 05:00:34 2026 GMT
Subject: CN=f750004d5fe9c10143b5c051f491cfff53bf9187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:24:71:c8:86:40:3f:00:23:7e:9d:9a:70:
e5:65:fb:8b:7b:07:0b:65:c7:b4:5c:4a:4f:36:5a:
ed:89:69:29:20:83:0d:1d:7b:da:85:e9:9b:1f:a4:
f0:84:ca:f9:1e:5e:89:bf:55:65:3b:85:24:13:74:
10:ea:4d:8f:f6:77:4d:78:eb:ca:12:27:3d:05:7a:
d8:91:ef:79:d5:dd:0f:07:22:a1:88:b0:bd:08:50:
bd:7a:92:82:24:73:80:1c:ad:cc:26:dc:df:48:33:
cb:87:91:3c:eb:e8:61:b3:28:99:f3:c1:45:61:13:
49:43:a5:80:9c:d6:23:58:d7:ae:5e:79:b6:41:57:
50:34:15:2d:dc:78:d6:82:69:26:d6:b0:96:9a:6f:
1c:26:7e:49:f6:44:08:99:14:76:68:53:f6:36:4e:
93:0e:06:30:2e:81:40:a5:96:37:4c:99:82:2c:44:
fa:df:0a:a1:81:af:aa:f8:4c:cc:57:00:93:f6:11:
3f:e1:01:cc:fb:60:6d:c3:65:4b:ac:55:10:6d:b7:
33:f4:9a:94:3f:4f:0b:e2:14:3e:0f:a2:9f:cd:b4:
97:cf:eb:69:db:d4:ed:81:9a:44:74:5f:e5:e2:0f:
70:6e:63:40:0f:70:4d:a6:cb:dc:fe:0a:9a:c9:d4:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:50:00:4D:5F:E9:C1:01:43:B5:C0:51:F4:91:CF:FF:53:BF:91:87
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:81:d5:7c:09:54:f9:d3:52:28:76:48:a9:f4:e7:d6:93:52:
15:35:b3:83:20:a3:e0:fd:6a:69:ec:58:f7:71:d0:97:a2:b0:
fe:75:b2:57:ad:22:5d:8a:dc:57:4a:47:d1:94:13:fd:25:77:
14:c8:d2:f9:a7:6e:83:30:d3:a2:b0:d5:6a:95:69:e3:04:9c:
26:a9:e0:50:4c:74:2e:c1:26:23:fa:53:b9:28:69:e6:c7:f5:
a7:ca:37:8d:6f:b6:82:5d:d2:5d:53:d7:61:8a:63:7f:cc:d5:
c6:22:13:52:e3:fb:6a:0c:d8:d4:41:a9:09:3f:fd:a3:9b:8a:
e8:ad:f4:90:04:d1:12:21:f1:37:53:84:36:68:03:65:1d:7f:
b6:ec:96:18:7c:85:68:c4:71:34:3d:bd:8f:53:77:50:1f:18:
4c:20:9c:8a:8e:a4:95:c4:dd:00:ae:44:dc:53:d0:a3:0b:15:
24:cf:cd:66:83:c4:d9:8c:67:77:c4:dc:39:8e:54:de:1c:1c:
08:96:f2:97:94:5f:42:f7:bf:78:75:e8:96:1b:a8:a9:c6:b8:
8e:37:2b:ee:54:5c:12:8f:75:7f:a4:f6:32:3b:26:48:67:65:
d8:96:6b:47:27:40:47:c0:2c:0d:f1:6d:68:21:e0:55:75:64:
72:4b:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:37 2026 by rpki-client