Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: hQqzwNcMqDW3Lw7XvNx3KxHVJGUjFk0fSPJptjH7cLM=
Subject key identifier: 13:1C:9A:63:36:CC:2C:2A:D0:C2:71:3F:BE:D5:D6:56:3B:AC:14:B6
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 019CAAFD2B04F58277B58894E9FF7074CDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 0F2F
Signing time: Sun 01 Mar 2026 20:00:44 +0000
Manifest this update: Sun 01 Mar 2026 20:00:44 +0000
Manifest next update: Mon 02 Mar 2026 20:00:44 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: ZH15dvp5t/Bj6KFZea1ykbOQXH13NLwqBO9qoi47Ass=)
2: tMtN8-QriDVpgeW2wDDvJvfjR9M.roa (hash: xSHPKvxZeM3dEwuvm0xnQCeYW9E45CjCYOCoqNZiqPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:2b:04:f5:82:77:b5:88:94:e9:ff:70:74:cd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Mar 1 20:00:44 2026 GMT
Not After : Mar 2 20:00:44 2026 GMT
Subject: CN=131c9a6336cc2c2ad0c2713fbed5d6563bac14b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:a6:c2:53:b7:94:7f:76:07:b8:c1:59:d5:
7e:95:db:e2:9d:00:e4:26:f6:ce:fe:da:89:57:b0:
58:d6:f0:af:3d:48:e2:34:19:1b:12:e1:2a:86:73:
ae:e4:f9:43:f9:82:16:79:14:73:02:5d:36:94:08:
38:f7:1a:af:8f:79:a1:05:4d:de:1b:e8:d0:79:c4:
9e:8d:ab:7e:f5:75:73:81:fb:a1:28:73:a9:c0:77:
24:b6:b3:ce:0c:fc:23:b6:ef:1c:8b:b7:a0:19:40:
8a:d3:93:a3:ee:63:35:0b:33:26:bc:d2:99:00:10:
8a:a0:53:5b:f9:88:d9:ef:dd:2b:41:36:9c:87:d5:
75:90:04:97:fd:ae:5e:54:1e:74:29:02:cf:49:a9:
24:3d:45:1f:54:12:63:9b:b6:ab:91:c8:2a:e8:b9:
a1:29:d7:f7:71:8d:2c:7c:61:eb:1d:25:c4:6c:2c:
98:25:c9:25:52:bf:d3:85:10:17:9a:43:7c:1a:18:
75:b4:da:eb:d4:16:4c:ca:9c:98:85:2e:8f:95:ef:
66:bc:b8:d1:90:b4:85:18:28:6a:9b:b7:97:d4:4d:
36:60:1f:99:a0:bf:71:b6:2a:d1:73:67:17:b8:bf:
8d:26:21:5b:04:44:60:6f:47:06:42:19:1b:9f:3d:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1C:9A:63:36:CC:2C:2A:D0:C2:71:3F:BE:D5:D6:56:3B:AC:14:B6
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5f:4d:2f:87:2d:b5:90:a5:53:ac:94:57:b9:bc:3b:fb:b7:
ce:23:cd:f5:cb:9b:95:a6:ef:0f:cf:68:39:c2:36:9e:d5:a5:
44:bd:7c:86:80:3c:b9:c6:04:2b:c4:e0:a6:86:98:27:69:d7:
83:da:1f:cf:f0:b8:8e:60:1b:25:97:ec:72:75:81:51:9a:63:
96:07:19:2c:9d:80:0e:08:3d:ed:a2:a7:03:f1:7c:b4:da:0f:
ef:0a:d1:cc:e1:35:2d:54:d0:51:09:51:22:8c:53:72:3d:a5:
d2:8c:84:ee:f6:fe:df:2a:6c:c4:f5:de:7a:07:73:16:0f:3c:
a7:1e:9f:5e:f1:e6:f7:39:9b:2f:a2:26:f8:86:1f:f9:8b:c4:
07:a8:61:06:e5:ab:1e:e7:b7:c0:12:f6:fe:74:77:07:ed:1a:
24:7c:e9:67:37:67:77:58:38:a9:ff:5f:71:77:72:07:91:7c:
55:fd:a9:5b:b8:68:6e:5e:a3:96:38:f8:8d:73:81:a8:9c:40:
51:06:b2:f0:da:d2:ed:46:07:38:a2:d6:6e:87:66:c2:d0:c8:
c5:4b:4b:56:13:13:3b:11:ea:fa:a5:b5:7d:44:1e:9b:a9:71:
2c:64:12:f6:09:c9:23:77:12:1a:4a:e8:46:02:d8:d4:52:42:
cd:b3:c5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:55 2026 by rpki-client