Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
File: 4koD-A9i2oZjUuGZCZfx1GzrL7A.mft (raw, json)
Hash identifier: yjNMkaaIw3qJTL37dTe2mkUEgZhtaJrRmsZ3i9OWhkM=
Subject key identifier: DE:87:33:CF:C7:40:48:50:5F:57:D2:7D:55:A6:3A:C5:5C:DE:1C:BB
Authority key identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
Certificate issuer: /CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Certificate serial: 019FAAF6224DBE2DD839BF8E8268F52AF212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
Manifest number: 1691
Signing time: Tue 28 Jul 2026 23:01:25 +0000
Manifest this update: Tue 28 Jul 2026 23:01:25 +0000
Manifest next update: Wed 29 Jul 2026 23:01:25 +0000
Files and hashes: 1: 4koD-A9i2oZjUuGZCZfx1GzrL7A.crl (hash: 2FXRkDN3k6pztSsBkgEABd7pmjOxVrIyRKUSqcr+61Q=)
2: WlHlPJ2Yx-QYEFNJTd1fZunOqeI.roa (hash: V3F5Ix6QWwGrgFg4N8xfN4dbqz/bAEkV9NWs0dFeZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:22:4d:be:2d:d8:39:bf:8e:82:68:f5:2a:f2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Validity
Not Before: Jul 28 23:01:25 2026 GMT
Not After : Jul 29 23:01:25 2026 GMT
Subject: CN=de8733cfc74048505f57d27d55a63ac55cde1cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:f1:c3:a6:38:21:08:ec:77:ba:f7:06:be:
99:7d:9d:98:69:f3:f6:ad:b3:18:08:b7:d2:83:03:
41:0b:5a:d7:92:4a:bf:2f:f8:ab:6d:09:ad:11:69:
86:5c:9a:52:a4:95:8f:0a:4e:aa:18:99:aa:85:f6:
c3:cb:78:48:29:82:a5:4f:6d:c1:0c:9f:a6:dc:5f:
e3:04:68:51:b4:c1:6a:6f:f4:37:ee:b9:58:6f:02:
f6:8c:40:0e:cc:3e:93:54:70:55:b8:04:ff:06:0a:
f8:a8:cd:69:c9:bc:97:99:6e:a8:98:8d:bb:1a:6c:
75:e7:94:a4:7f:2b:c8:e6:99:79:aa:22:ff:29:30:
8c:bf:b7:43:d3:1a:1d:8d:54:a4:df:15:65:68:c8:
7c:b2:72:ac:ac:61:56:86:53:3b:fa:1f:21:75:5c:
18:f2:da:c7:d2:10:12:6e:31:75:12:39:cd:d7:43:
03:8b:ad:2f:f5:ab:32:b1:08:a6:ae:cb:5b:87:68:
94:6a:f1:ea:3f:a3:87:e6:10:ba:ce:85:55:dd:11:
3e:68:55:e7:72:f2:26:46:72:df:95:c2:dd:e7:4d:
ed:fa:41:f2:1f:ea:5f:70:3b:a8:63:e8:6d:86:da:
f9:ba:a6:58:7d:f4:27:3d:09:93:70:3a:68:55:13:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:33:CF:C7:40:48:50:5F:57:D2:7D:55:A6:3A:C5:5C:DE:1C:BB
X509v3 Authority Key Identifier:
keyid:E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:29:8e:f1:36:5e:ec:05:d9:ed:9e:41:e8:e7:b5:6d:88:95:
e1:28:0f:32:07:98:1b:25:2d:d7:eb:b6:55:12:9b:60:a9:2f:
e9:85:63:5a:42:13:25:8b:ee:8f:4c:2b:6c:a8:5c:11:7c:ed:
38:ad:83:bb:ca:d9:ad:ea:13:9f:4e:31:c1:15:7e:32:d0:3c:
b0:4e:bb:19:53:67:ca:df:c8:e1:e9:a2:41:41:05:1a:a8:fa:
bb:ce:05:98:b8:1f:60:01:fe:04:6e:87:c1:3e:b5:2e:35:a3:
87:56:0a:55:e1:ec:ec:90:0f:ce:35:76:63:70:4e:4c:f7:5e:
66:ef:6e:ca:e7:60:ea:6c:f2:16:38:dd:fc:10:ef:5b:4b:62:
3b:f3:a1:0b:67:5b:ea:63:d9:2a:01:89:a0:9e:63:91:26:36:
ee:e3:8a:86:5b:ca:71:93:24:97:66:ab:37:75:fb:12:3b:bd:
d1:55:e5:ce:8e:c6:11:a2:19:43:63:05:a1:31:27:14:d6:84:
9c:9b:8b:97:1a:34:40:de:07:4e:ee:3e:21:06:2d:43:4c:0b:
c9:1c:8f:51:b4:79:24:0c:a0:54:03:10:73:50:eb:38:eb:16:
d9:ac:bc:9e:7f:18:a3:6e:d2:35:96:bc:25:bf:4c:05:6d:9e:
68:f5:33:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9iJNvi3YOb+Ogmj1KvISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGEwM2Y4MGY2MmRhODY2MzUyZTE5OTA5OTdmMWQ0NmNl
YjJmYjAwHhcNMjYwNzI4MjMwMTI1WhcNMjYwNzI5MjMwMTI1WjAzMTEwLwYDVQQD
EyhkZTg3MzNjZmM3NDA0ODUwNWY1N2QyN2Q1NWE2M2FjNTVjZGUxY2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslbxw6Y4IQjsd7r3Br6ZfZ2YafP2
rbMYCLfSgwNBC1rXkkq/L/irbQmtEWmGXJpSpJWPCk6qGJmqhfbDy3hIKYKlT23B
DJ+m3F/jBGhRtMFqb/Q37rlYbwL2jEAOzD6TVHBVuAT/Bgr4qM1pybyXmW6omI27
Gmx155SkfyvI5pl5qiL/KTCMv7dD0xodjVSk3xVlaMh8snKsrGFWhlM7+h8hdVwY
8trH0hASbjF1EjnN10MDi60v9asysQimrstbh2iUavHqP6OH5hC6zoVV3RE+aFXn
cvImRnLflcLd503t+kHyH+pfcDuoY+hthtr5uqZYffQnPQmTcDpoVRPzUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6HM8/HQEhQX1fSfVWmOsVc3hy7MB8GA1UdIwQY
MBaAFOJKA/gPYtqGY1LhmQmX8dRs6y+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtvRC1BOWkyb1pqVXVHWkNaZngxR3pyTDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81NDBjNWYtYTJhMi00NGU0LTkyODct
NDFiNTQ1MDBmZGNmLzEvNGtvRC1BOWkyb1pqVXVHWkNaZngxR3pyTDdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81NDBjNWYtYTJhMi00NGU0LTkyODctNDFiNTQ1MDBmZGNm
LzEvNGtvRC1BOWkyb1pqVXVHWkNaZngxR3pyTDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFymO8TZe
7AXZ7Z5B6Oe1bYiV4SgPMgeYGyUt1+u2VRKbYKkv6YVjWkITJYvuj0wrbKhcEXzt
OK2Du8rZreoTn04xwRV+MtA8sE67GVNnyt/I4emiQUEFGqj6u84FmLgfYAH+BG6H
wT61LjWjh1YKVeHs7JAPzjV2Y3BOTPdeZu9uyudg6mzyFjjd/BDvW0tiO/OhC2db
6mPZKgGJoJ5jkSY27uOKhlvKcZMkl2arN3X7Eju90VXlzo7GEaIZQ2MFoTEnFNaE
nJuLlxo0QN4HTu4+IQYtQ0wLyRyPUbR5JAygVAMQc1DrOOsW2ay8nn8Yo27SNZa8
Jb9MBW2eaPUzIQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:55:28 2026 by rpki-client