Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: 7TCjLVwskIXPCLM39dKUcCvJN5353HhfVQlGTz27w7k=
Subject key identifier: E1:D4:71:14:BC:3D:5F:1A:A9:93:16:88:E3:A0:5D:2F:B7:5D:7C:DD
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019D2884DF752BDE47AF400585273D142F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 05:01:29 +0000
Manifest this update: Thu 26 Mar 2026 05:01:29 +0000
Manifest next update: Fri 27 Mar 2026 05:01:29 +0000
Files and hashes: 1: 1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa (hash: M4FAHY2ohA57DjcYF38C6Ouqb+gh+WIb6rDrETiW3k8=)
2: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: Q0CrhFWlrURynA7zICNiENFdeDB/mR0P37Qngylt0Ok=)
3: A1TiuU0M75jp0mWYlWQ0dXCZftM.roa (hash: EhrXpdBCcTrMdsFgZCr+ZQCKKCBrE/k1CPAoaKHDuRg=)
4: CiXzPWmke5n548-SbTCFdFEYvdY.roa (hash: neMp5JrpOzLPa+wb8gpytOuldw6oEOTtfnGZtatHKXc=)
5: VbudqHUU3wej-Ky_SGgd-IL1oU8.roa (hash: PP3CaUPvJ8zLIQWtRlM90SR43ub+3rRJI44xSidlZHg=)
6: ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa (hash: VKiXvfaRIo/zqFVww9h0Ep/s8yiELNrrU4q9QIip7L0=)
7: e99HCBjQgcssRPkCDiUE7eAcY_w.roa (hash: IYb3xBr9j8PdXiJfn/hO3V8a/I7VRwJ3UbeucKB0LsU=)
8: t20IKoUV8idtpCE6ygNMZGStJOA.roa (hash: eQjGSUu221l3J4NCuaCZ9GFUuzoFvNOoLBpODCNQ5eI=)
9: tA0K8bGZYQr51ts9fgVMQNNETk0.roa (hash: tyQ/+T3yjAq3vDmdw3JjnFixVEUOuWwoh0sIsij3a8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:df:75:2b:de:47:af:40:05:85:27:3d:14:2f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Mar 26 05:01:29 2026 GMT
Not After : Mar 27 05:01:29 2026 GMT
Subject: CN=e1d47114bc3d5f1aa9931688e3a05d2fb75d7cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:90:02:b9:0b:7d:9f:3a:7c:54:b9:23:5a:03:
d2:03:7a:b6:2f:a1:2a:77:c7:4c:32:28:b6:81:85:
c2:cd:ab:c6:08:91:7b:00:3c:88:fc:f4:bc:67:76:
54:f7:7d:13:57:fe:dd:2b:7a:be:ec:5b:63:09:0b:
41:36:6f:59:ef:40:ce:72:f4:76:9b:05:ed:b4:f6:
7f:3f:69:f2:47:43:55:de:fb:cf:d4:e7:fa:7c:58:
94:9d:ac:c5:69:3d:d5:77:82:6a:e2:53:c7:77:26:
d2:c7:5f:9b:1c:46:24:cc:73:dc:0e:70:ba:ba:88:
a8:42:86:d4:00:3e:2b:29:e8:ba:77:19:e6:82:77:
4e:81:36:b9:cc:d3:30:3d:c3:85:5b:c3:83:c0:be:
7c:12:18:08:dd:a0:4d:60:c9:02:a0:e6:44:13:1a:
a0:c6:24:8f:2f:5a:61:13:94:e1:bb:63:12:38:ef:
83:c0:b9:36:c4:3f:c4:1b:c8:dd:89:c7:7b:f2:3e:
d6:60:80:50:3d:78:0f:c7:83:a0:ed:f4:07:61:3a:
fd:05:9e:8d:86:7b:63:78:ef:87:09:1e:cf:dc:6a:
92:ab:b6:49:45:5c:31:25:b2:ff:2a:75:48:32:fb:
0b:9e:34:ad:9d:a1:fc:63:6c:ba:44:f9:04:5d:5b:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D4:71:14:BC:3D:5F:1A:A9:93:16:88:E3:A0:5D:2F:B7:5D:7C:DD
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:08:26:5f:70:57:d3:c3:31:9b:2e:8e:6a:6d:7f:64:0e:42:
7a:d3:c7:e4:e8:59:dd:1a:3b:a4:9e:38:0f:af:75:aa:9d:98:
bf:16:15:8f:e8:e0:da:ee:a6:73:36:0b:59:f0:a1:8c:e3:8e:
31:63:71:e8:9c:44:09:be:30:4b:8a:32:a5:95:89:b3:92:96:
33:56:96:53:a1:ff:78:66:ad:04:43:b2:10:27:5f:0d:25:ec:
03:c7:f5:88:78:99:25:3f:81:5a:59:42:33:e0:c4:d4:28:72:
81:ba:1c:09:3f:9e:94:7a:ea:43:4d:1e:0b:ce:53:03:f2:dc:
6d:0a:0d:73:6a:e9:2d:a8:7e:32:cf:80:7c:bc:af:01:74:eb:
c7:9d:5d:8b:44:ca:99:f7:4a:0a:1e:dd:39:e5:4c:69:5d:1c:
31:6d:36:5b:93:aa:68:bf:4f:24:9f:16:8d:eb:54:6b:94:b8:
49:26:00:c6:01:2b:e1:33:5a:18:fb:ed:07:4f:d6:a5:a3:e9:
45:50:c8:1c:09:b2:39:00:8d:cf:a1:38:2b:81:60:15:e7:db:
51:10:91:ef:b0:03:34:16:ae:19:8b:49:1f:09:03:a1:c2:20:
f3:e7:1a:74:f2:a2:7c:b1:79:a3:24:e8:19:63:83:f6:35:f5:
17:a2:24:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohN91K95Hr0AFhSc9FC8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl
MTJhOWIwHhcNMjYwMzI2MDUwMTI5WhcNMjYwMzI3MDUwMTI5WjAzMTEwLwYDVQQD
EyhlMWQ0NzExNGJjM2Q1ZjFhYTk5MzE2ODhlM2EwNWQyZmI3NWQ3Y2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpACuQt9nzp8VLkjWgPSA3q2L6Eq
d8dMMii2gYXCzavGCJF7ADyI/PS8Z3ZU930TV/7dK3q+7FtjCQtBNm9Z70DOcvR2
mwXttPZ/P2nyR0NV3vvP1Of6fFiUnazFaT3Vd4Jq4lPHdybSx1+bHEYkzHPcDnC6
uoioQobUAD4rKei6dxnmgndOgTa5zNMwPcOFW8ODwL58EhgI3aBNYMkCoOZEExqg
xiSPL1phE5Thu2MSOO+DwLk2xD/EG8jdicd78j7WYIBQPXgPx4Og7fQHYTr9BZ6N
hntjeO+HCR7P3GqSq7ZJRVwxJbL/KnVIMvsLnjStnaH8Y2y6RPkEXVuElwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHUcRS8PV8aqZMWiOOgXS+3XXzdMB8GA1UdIwQY
MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt
NDQ2MDE5OTY2YTE5LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5
LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwgmX3BX
08Mxmy6Oam1/ZA5CetPH5OhZ3Ro7pJ44D691qp2YvxYVj+jg2u6mczYLWfChjOOO
MWNx6JxECb4wS4oypZWJs5KWM1aWU6H/eGatBEOyECdfDSXsA8f1iHiZJT+BWllC
M+DE1ChygbocCT+elHrqQ00eC85TA/LcbQoNc2rpLah+Ms+AfLyvAXTrx51di0TK
mfdKCh7dOeVMaV0cMW02W5OqaL9PJJ8WjetUa5S4SSYAxgEr4TNaGPvtB0/WpaPp
RVDIHAmyOQCNz6E4K4FgFefbURCR77ADNBauGYtJHwkDocIg8+cadPKifLF5oyTo
GWOD9jX1F6IkVQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:52 2026 by rpki-client