Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: 8KxzNNzQIXiV8cuQJemoPYCVLlEJhJVkQ/k0vn0nBnI=
Subject key identifier: E6:25:DB:32:6B:04:71:8F:91:4C:E3:98:5F:21:F6:1A:37:73:76:B7
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 01A0CB596CB5919ABCECDD9421CB1CE5E604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 1A71
Signing time: Tue 22 Sep 2026 23:00:30 +0000
Manifest this update: Tue 22 Sep 2026 23:00:30 +0000
Manifest next update: Wed 23 Sep 2026 23:00:30 +0000
Files and hashes: 1: 1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa (hash: M4FAHY2ohA57DjcYF38C6Ouqb+gh+WIb6rDrETiW3k8=)
2: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: 76aSGTgeHQAqA5okQt5wshgF1uflJJgMEB3qIud2Zgs=)
3: A1TiuU0M75jp0mWYlWQ0dXCZftM.roa (hash: EhrXpdBCcTrMdsFgZCr+ZQCKKCBrE/k1CPAoaKHDuRg=)
4: CiXzPWmke5n548-SbTCFdFEYvdY.roa (hash: neMp5JrpOzLPa+wb8gpytOuldw6oEOTtfnGZtatHKXc=)
5: VbudqHUU3wej-Ky_SGgd-IL1oU8.roa (hash: PP3CaUPvJ8zLIQWtRlM90SR43ub+3rRJI44xSidlZHg=)
6: ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa (hash: VKiXvfaRIo/zqFVww9h0Ep/s8yiELNrrU4q9QIip7L0=)
7: e99HCBjQgcssRPkCDiUE7eAcY_w.roa (hash: IYb3xBr9j8PdXiJfn/hO3V8a/I7VRwJ3UbeucKB0LsU=)
8: t20IKoUV8idtpCE6ygNMZGStJOA.roa (hash: eQjGSUu221l3J4NCuaCZ9GFUuzoFvNOoLBpODCNQ5eI=)
9: tA0K8bGZYQr51ts9fgVMQNNETk0.roa (hash: tyQ/+T3yjAq3vDmdw3JjnFixVEUOuWwoh0sIsij3a8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:6c:b5:91:9a:bc:ec:dd:94:21:cb:1c:e5:e6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Sep 22 23:00:30 2026 GMT
Not After : Sep 23 23:00:30 2026 GMT
Subject: CN=e625db326b04718f914ce3985f21f61a377376b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:32:66:3f:4f:84:f8:3b:8b:a2:ea:c0:e8:
99:d5:9d:8e:50:cb:7a:f2:42:0c:d3:7c:39:88:c0:
91:65:a0:c8:f7:52:68:00:36:f6:f2:4f:fc:e5:24:
06:c6:de:9f:ba:e2:73:9e:9e:05:79:e2:0d:5a:40:
f7:3f:a4:d9:b4:24:8a:ab:f0:72:c4:b3:cb:f1:b6:
d8:85:6a:cf:a3:b0:00:20:57:cf:b7:fd:5b:88:3e:
54:6a:ed:5a:4f:e6:ae:17:3d:2f:09:83:a9:aa:05:
1c:dc:7a:e4:71:23:3d:bb:d0:03:62:5d:66:9a:97:
df:19:83:b3:ac:d4:1b:52:f2:2b:b2:95:ca:1c:8d:
26:ea:89:21:87:2a:e2:82:9f:64:d2:17:a5:06:fe:
1f:14:ea:db:a4:37:8f:ff:60:97:f6:84:8a:20:d5:
ea:61:fb:69:fc:ac:cd:0f:09:53:86:14:85:bf:01:
51:9d:45:47:ff:f9:df:8d:d9:ac:8f:0a:22:c3:00:
25:39:dd:a7:83:63:08:a0:ea:f1:29:22:bc:fc:38:
62:a4:63:0e:57:b3:d5:88:66:e3:0d:e2:d7:06:f4:
9e:bb:ca:ef:02:67:c5:a5:8c:f3:73:4b:d5:f3:bd:
4a:db:7f:30:f1:a4:53:d6:e3:1b:a3:84:09:35:24:
eb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:25:DB:32:6B:04:71:8F:91:4C:E3:98:5F:21:F6:1A:37:73:76:B7
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:95:04:61:89:6a:9b:53:4d:e0:3a:5a:32:44:fe:93:c0:a0:
3b:37:5c:ec:17:f9:cb:dd:12:36:e0:f5:a7:3a:86:76:c8:23:
46:bc:73:3d:9e:f6:6d:a7:db:a4:89:2f:73:e7:95:cd:fe:c3:
75:58:ce:b2:b5:9f:8a:a4:80:59:96:4b:66:ab:e1:3c:93:12:
e0:d4:98:92:8b:77:9a:e5:91:ed:9b:39:54:66:1d:19:d0:f6:
27:05:f4:b2:80:18:fa:8d:a4:e5:f4:40:0b:2d:f5:ab:03:47:
d9:f5:31:25:8b:1e:34:e2:30:1d:27:ec:a7:89:3e:94:ed:1f:
58:a8:04:68:0d:2b:42:0e:ed:7e:53:33:58:1f:fa:96:f5:99:
64:44:e7:07:64:35:a1:a8:4c:b7:6d:09:59:ea:31:90:ee:17:
a9:27:a4:0d:47:4a:f1:77:fe:9d:0a:62:4c:52:76:7d:cd:a7:
2f:3b:49:00:d9:ab:67:2e:be:69:1c:40:e5:2d:83:12:53:3c:
b2:e8:e0:ec:9a:20:0f:18:18:ac:ad:92:5a:cd:3c:21:3b:0b:
7c:66:d6:09:fa:46:a8:f2:6e:bb:ed:ce:c7:d9:ab:d3:33:42:
81:45:7b:5b:5f:0a:a8:41:7d:49:e1:f8:22:a1:13:fa:f9:39:
9e:0c:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:56:05 2026 by rpki-client