Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: LRUIpqcn1wxfOZeZowErui9lR1qUvEs3PyUQDanHN3k=
Subject key identifier: A4:7A:1E:08:D9:05:4A:61:88:47:BB:AE:F9:C3:41:0E:C1:27:A5:49
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 019DA41D060F3F504D1350A83883B5D26ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 0FB0
Signing time: Sun 19 Apr 2026 05:00:58 +0000
Manifest this update: Sun 19 Apr 2026 05:00:58 +0000
Manifest next update: Mon 20 Apr 2026 05:00:58 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: BhxKW8FVFPCCFDldXdg5zppSARta4zQ+52PAqNUjB3k=)
2: tMtN8-QriDVpgeW2wDDvJvfjR9M.roa (hash: xSHPKvxZeM3dEwuvm0xnQCeYW9E45CjCYOCoqNZiqPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:06:0f:3f:50:4d:13:50:a8:38:83:b5:d2:6a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Apr 19 05:00:58 2026 GMT
Not After : Apr 20 05:00:58 2026 GMT
Subject: CN=a47a1e08d9054a618847bbaef9c3410ec127a549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:e5:f1:fd:a6:10:7d:36:bc:8f:1c:72:05:
6b:b0:0a:a0:0f:6c:7f:46:34:10:e6:f4:2e:11:ca:
eb:96:76:a8:d0:75:2f:a4:9f:c5:f6:02:6d:66:e8:
c9:28:44:e6:65:f5:fa:43:b0:10:cc:cd:4f:de:66:
49:af:36:26:d3:69:38:29:8e:7f:17:42:76:c7:01:
80:f2:59:6d:e7:56:51:db:77:8d:3c:ae:db:f3:4f:
90:fb:7f:73:18:3d:a9:7b:b2:ca:7a:05:0e:3f:1b:
2f:f3:fe:c4:7b:a6:76:54:a2:bc:2e:59:95:88:83:
1f:69:15:db:41:0b:0d:e9:a5:a9:72:eb:74:49:7b:
4b:ad:bc:12:78:df:7b:2d:bd:ab:a4:29:e3:ed:e1:
fa:d0:96:1b:9a:db:d1:ec:fd:e3:1d:cb:02:c1:6a:
ad:38:6d:73:d8:05:ce:20:40:d4:e3:6f:3f:95:33:
46:72:8b:17:80:3e:bf:19:4d:17:56:31:82:8f:35:
db:5c:c4:04:bc:04:44:72:c3:fa:fd:61:c2:63:11:
12:27:73:8b:c6:44:e8:e1:ad:69:c7:9e:3a:a8:ea:
2b:b1:d3:98:24:eb:e1:16:91:95:90:7f:54:6d:22:
d1:ff:df:b9:aa:ba:21:2a:b0:b7:2b:a4:a2:40:db:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7A:1E:08:D9:05:4A:61:88:47:BB:AE:F9:C3:41:0E:C1:27:A5:49
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:f8:e6:02:28:7d:d8:f8:e6:ab:d0:b6:a5:f2:1b:6f:d7:95:
4a:41:1a:f1:f8:e0:73:30:3b:ee:17:8b:31:5b:41:74:12:b0:
11:24:b3:b6:50:75:45:32:56:0a:23:00:f7:d1:a9:2e:44:0e:
67:a3:c4:3f:b9:b7:30:a6:ee:5a:8b:f5:ca:8c:97:f1:82:5a:
06:b7:66:cf:5c:24:33:0f:1a:2b:46:7e:31:da:2d:10:f8:9c:
83:a0:ea:8d:c9:14:38:20:7e:24:d6:bb:53:dd:3a:e4:bf:dc:
cc:d3:d0:ec:1a:82:0e:18:8c:22:df:50:f4:82:0c:fc:bd:51:
18:7e:e8:05:33:71:2d:e8:e8:66:2c:8f:a7:d5:da:11:f0:74:
db:b2:50:4a:3a:8d:26:6f:d3:6d:11:d6:40:57:f6:32:41:47:
4a:1c:ef:1f:bd:21:7d:c6:96:37:23:a0:1b:17:7a:6a:83:67:
16:5a:5b:17:3a:92:c3:aa:7c:16:8f:42:fc:51:04:fa:bc:4e:
5b:dd:5c:b3:fe:61:7a:aa:00:45:6f:01:ae:88:2a:f7:f5:5a:
aa:13:b6:ba:bf:42:36:12:91:29:7d:7a:3d:81:c3:26:3e:51:
40:7e:0a:65:52:ac:ad:e1:93:6f:30:fe:e5:22:43:9f:a7:9d:
21:a9:92:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHQYPP1BNE1CoOIO10mrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGM5YzUwY2Y0ZTJkYWMwNWUxZjA0MzI4MjI0ZTIwYTQ2
MDVkNzcwHhcNMjYwNDE5MDUwMDU4WhcNMjYwNDIwMDUwMDU4WjAzMTEwLwYDVQQD
EyhhNDdhMWUwOGQ5MDU0YTYxODg0N2JiYWVmOWMzNDEwZWMxMjdhNTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZXl8f2mEH02vI8ccgVrsAqgD2x/
RjQQ5vQuEcrrlnao0HUvpJ/F9gJtZujJKETmZfX6Q7AQzM1P3mZJrzYm02k4KY5/
F0J2xwGA8llt51ZR23eNPK7b80+Q+39zGD2pe7LKegUOPxsv8/7Ee6Z2VKK8LlmV
iIMfaRXbQQsN6aWpcut0SXtLrbwSeN97Lb2rpCnj7eH60JYbmtvR7P3jHcsCwWqt
OG1z2AXOIEDU428/lTNGcosXgD6/GU0XVjGCjzXbXMQEvAREcsP6/WHCYxESJ3OL
xkTo4a1px546qOorsdOYJOvhFpGVkH9UbSLR/9+5qrohKrC3K6SiQNseiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKR6HgjZBUphiEe7rvnDQQ7BJ6VJMB8GA1UdIwQY
MBaAFOJMnFDPTi2sBeHwQygiTiCkYF13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGIt
MGJmYjg2ODg0NDA0LzEvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGItMGJmYjg2ODg0NDA0
LzEvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzvjmAih9
2Pjmq9C2pfIbb9eVSkEa8fjgczA77heLMVtBdBKwESSztlB1RTJWCiMA99GpLkQO
Z6PEP7m3MKbuWov1yoyX8YJaBrdmz1wkMw8aK0Z+MdotEPicg6DqjckUOCB+JNa7
U9065L/czNPQ7BqCDhiMIt9Q9IIM/L1RGH7oBTNxLejoZiyPp9XaEfB027JQSjqN
Jm/TbRHWQFf2MkFHShzvH70hfcaWNyOgGxd6aoNnFlpbFzqSw6p8Fo9C/FEE+rxO
W91cs/5heqoARW8Brogq9/VaqhO2ur9CNhKRKX16PYHDJj5RQH4KZVKsreGTbzD+
5SJDn6edIamS/A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:29 2026 by rpki-client