Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: Y7f5SFtdNg17MfLiD1VMc8d2bdnfJtWRpIrLJteXxEo=
Subject key identifier: FA:BC:D7:ED:49:00:F2:D5:04:5A:4F:31:E2:D8:FB:0D:07:22:03:26
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 019FA9AB7AE69023160DF03AFD6A91E0BB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 10BC
Signing time: Tue 28 Jul 2026 17:00:15 +0000
Manifest this update: Tue 28 Jul 2026 17:00:15 +0000
Manifest next update: Wed 29 Jul 2026 17:00:15 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: nWjhmS0LEeF5lycYwP2NzMdZZ+aGUmUCTeYK9J9yHBI=)
2: tMtN8-QriDVpgeW2wDDvJvfjR9M.roa (hash: xSHPKvxZeM3dEwuvm0xnQCeYW9E45CjCYOCoqNZiqPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:7a:e6:90:23:16:0d:f0:3a:fd:6a:91:e0:bb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Jul 28 17:00:15 2026 GMT
Not After : Jul 29 17:00:15 2026 GMT
Subject: CN=fabcd7ed4900f2d5045a4f31e2d8fb0d07220326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:b7:7d:cc:63:ea:26:10:a4:2c:69:f9:87:
d1:15:06:10:1e:5d:e4:8d:a4:ef:bb:a0:36:a9:e3:
bf:43:e0:46:50:61:a2:2f:76:a0:ae:25:38:e8:eb:
3b:5e:9b:a1:b8:3d:78:e6:ac:f3:0b:99:f9:fe:79:
37:a7:82:a2:38:d9:56:38:a0:bf:8e:98:41:b6:af:
9b:dc:3e:18:6f:aa:06:b7:ac:3b:9d:3d:3f:de:e0:
34:8d:cc:c9:81:cb:ae:70:25:67:f2:5a:12:a5:15:
13:ce:fd:4a:39:4e:55:86:62:2f:da:1d:2b:54:3a:
5a:81:00:ed:5e:4b:1f:c4:13:76:25:81:79:87:ca:
49:35:ed:87:11:79:ae:28:a0:48:b8:78:26:21:0d:
ab:14:dc:52:e6:ba:55:d9:94:c0:df:50:79:f8:45:
62:b6:82:ad:5a:4e:75:89:d8:ff:32:f0:73:be:ca:
44:3e:f5:92:8f:98:2b:02:2b:04:0e:c9:f2:af:41:
fb:33:3b:4a:ce:0d:29:8b:11:11:91:df:f9:1f:a6:
05:35:95:b9:37:59:a4:02:be:7a:66:0a:14:93:e7:
88:3f:86:da:51:04:62:ca:d2:f3:66:f9:3f:e4:35:
c4:83:4d:e5:97:0b:19:b7:92:13:03:50:bd:3a:64:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BC:D7:ED:49:00:F2:D5:04:5A:4F:31:E2:D8:FB:0D:07:22:03:26
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:9e:ca:85:2d:dc:15:f8:97:3d:7c:f5:aa:a1:8e:89:01:e7:
fa:42:02:0d:f3:5b:8e:18:77:ea:79:b4:6a:09:c9:5a:f6:1d:
25:16:69:47:72:44:be:95:8d:90:1d:a8:19:1c:ba:2d:59:6b:
3d:39:62:6e:2f:03:30:20:65:8a:7b:c3:24:9d:fa:98:bd:5b:
d5:38:fb:d1:e5:b5:a9:18:6c:91:43:92:43:96:30:d9:72:a8:
94:93:05:1f:5c:f0:d1:9b:e7:c8:fc:4f:74:ad:52:76:0e:b5:
4e:00:63:cc:b5:8e:44:a4:19:bc:64:e9:9e:0e:12:42:06:12:
68:8a:c6:bd:04:af:97:fe:c7:db:38:7c:13:a4:22:05:96:69:
3b:46:9b:3d:96:7e:52:d7:34:91:6c:c7:d7:ba:45:8e:b5:d5:
a5:a6:bf:92:71:f0:f4:21:63:04:db:8e:37:0d:ff:4b:73:30:
e3:3a:2a:9c:dd:ca:97:9b:d3:0c:d9:54:2d:bb:e2:aa:05:2d:
f0:ea:dc:24:c2:d2:5b:f4:be:e2:93:28:e1:11:49:3c:a4:3a:
bc:1f:f8:2f:a9:2c:1b:12:c1:2c:d7:fe:c3:d0:7e:f0:bd:4a:
ce:2e:23:9c:34:7a:d1:45:fc:49:76:bb:80:96:77:ee:50:c5:
b5:c2:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:02:00 2026 by rpki-client