Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: 0wstrfdDNMGyMBzShCDWYhfVYAC1hb0TqLJle8unH2A=
Subject key identifier: 50:51:2C:D2:7E:74:0C:87:F2:C9:E6:77:39:FB:59:97:6D:DD:0C:4C
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 01A0C77D2A006045E3BB9AD4EDBCDAE6A548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 1150
Signing time: Tue 22 Sep 2026 05:01:03 +0000
Manifest this update: Tue 22 Sep 2026 05:01:03 +0000
Manifest next update: Wed 23 Sep 2026 05:01:03 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: /+RrkaPPcwFlugONPbkfoSDsftA1GaYXI38V8/+xKgU=)
2: tMtN8-QriDVpgeW2wDDvJvfjR9M.roa (hash: xSHPKvxZeM3dEwuvm0xnQCeYW9E45CjCYOCoqNZiqPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7d:2a:00:60:45:e3:bb:9a:d4:ed:bc:da:e6:a5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Sep 22 05:01:03 2026 GMT
Not After : Sep 23 05:01:03 2026 GMT
Subject: CN=50512cd27e740c87f2c9e67739fb59976ddd0c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:c6:91:64:96:f3:93:55:2b:92:10:b2:9e:
de:29:34:70:a0:a3:39:4d:3c:9d:7e:6c:f8:cd:5d:
05:f5:51:8f:5a:38:4b:36:50:4f:db:74:f4:07:b6:
5c:26:1c:eb:40:4f:ac:eb:11:9e:5b:bb:4c:41:70:
d3:ee:52:77:3b:92:20:d1:bf:4c:20:4d:ea:36:fa:
2d:ad:e9:b6:f7:cb:e8:f9:a9:23:de:07:0c:38:83:
fb:be:10:79:7b:4f:e8:84:5f:2b:fc:9f:e3:b6:c1:
9d:61:1d:f7:ea:f0:a3:8c:d7:1c:5e:b8:3c:16:c7:
98:3b:86:f8:33:ce:1e:a9:5a:c9:44:a7:f3:77:8f:
5e:5e:25:4d:d4:2a:2f:96:a2:19:23:8a:c0:22:f1:
b6:c7:71:43:46:e1:4a:a7:77:2a:16:1a:7c:83:6b:
55:42:28:34:81:ee:af:9f:83:3f:e7:45:32:d8:f8:
5d:83:53:4a:9c:84:a2:0e:1a:57:d1:16:67:f8:13:
19:e0:9e:22:3e:b0:ab:38:35:37:62:ca:ca:74:a1:
b6:59:54:b7:88:89:5f:73:bf:c4:d4:f8:8a:2e:b1:
c8:90:3e:e1:ff:a5:c1:cb:43:e2:5e:45:fe:3d:f8:
b1:88:5d:05:96:06:87:6a:52:42:26:a1:7e:14:2c:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:51:2C:D2:7E:74:0C:87:F2:C9:E6:77:39:FB:59:97:6D:DD:0C:4C
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ac:de:fd:ae:41:d6:74:96:12:4a:99:83:47:3b:2a:7e:a0:
1c:ff:26:de:18:cf:3b:58:94:56:87:1c:c7:ae:5a:b5:2c:b2:
70:d7:9e:c0:1d:55:f6:46:63:d3:a2:b6:7d:03:41:d4:c9:6f:
5a:cf:1c:61:4b:1c:4e:37:e1:74:3e:e8:5a:f5:ef:d5:c8:69:
8d:f2:5c:a7:eb:a5:f9:49:10:7e:9c:21:6e:5a:63:83:cd:d1:
8b:e2:98:e9:40:b9:6a:bc:82:91:5d:5a:d6:d3:a2:e5:2b:bb:
e6:39:b2:e6:af:5e:3a:3d:d9:51:44:c8:f1:83:9f:f5:c6:b5:
5d:ff:67:4c:de:6d:e2:10:40:5c:eb:4a:f3:60:39:83:b2:28:
4b:8d:f1:9f:f7:ce:11:72:3e:39:47:94:13:61:16:fc:72:7c:
a5:1b:0e:dc:04:4f:d6:73:04:eb:3a:7f:62:cd:46:79:60:b0:
fd:6f:ab:95:03:a7:ea:f1:48:96:7c:a6:73:b8:7a:1b:0b:db:
4c:ca:ea:79:b7:87:8c:41:d2:e9:e0:e1:a1:d7:60:8c:15:a6:
f0:1f:d2:5e:6d:9d:ee:a4:04:3a:cc:1f:23:cb:e7:63:1b:0d:
ec:ae:8b:f2:d9:5a:15:4b:be:da:c1:10:c1:75:dd:ca:ed:6b:
19:27:a0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:31:47 2026 by rpki-client