Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: b5oGMFeW1fo1HKGiz6xg6qWZy1qdTdMbU/0zaSyXKTw=
Subject key identifier: 23:C0:FA:B0:7F:F6:02:25:38:2D:0C:6F:C5:AB:99:08:0E:65:C1:CB
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019E1BD954D5830E443957F191F357ED43E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 190D
Signing time: Tue 12 May 2026 11:01:28 +0000
Manifest this update: Tue 12 May 2026 11:01:28 +0000
Manifest next update: Wed 13 May 2026 11:01:28 +0000
Files and hashes: 1: 1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa (hash: M4FAHY2ohA57DjcYF38C6Ouqb+gh+WIb6rDrETiW3k8=)
2: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: U4f1gdm9PaqA72M/ix0gQJU3PZrZ7yF3iu9v77jywuE=)
3: A1TiuU0M75jp0mWYlWQ0dXCZftM.roa (hash: EhrXpdBCcTrMdsFgZCr+ZQCKKCBrE/k1CPAoaKHDuRg=)
4: CiXzPWmke5n548-SbTCFdFEYvdY.roa (hash: neMp5JrpOzLPa+wb8gpytOuldw6oEOTtfnGZtatHKXc=)
5: VbudqHUU3wej-Ky_SGgd-IL1oU8.roa (hash: PP3CaUPvJ8zLIQWtRlM90SR43ub+3rRJI44xSidlZHg=)
6: ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa (hash: VKiXvfaRIo/zqFVww9h0Ep/s8yiELNrrU4q9QIip7L0=)
7: e99HCBjQgcssRPkCDiUE7eAcY_w.roa (hash: IYb3xBr9j8PdXiJfn/hO3V8a/I7VRwJ3UbeucKB0LsU=)
8: t20IKoUV8idtpCE6ygNMZGStJOA.roa (hash: eQjGSUu221l3J4NCuaCZ9GFUuzoFvNOoLBpODCNQ5eI=)
9: tA0K8bGZYQr51ts9fgVMQNNETk0.roa (hash: tyQ/+T3yjAq3vDmdw3JjnFixVEUOuWwoh0sIsij3a8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:54:d5:83:0e:44:39:57:f1:91:f3:57:ed:43:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: May 12 11:01:28 2026 GMT
Not After : May 13 11:01:28 2026 GMT
Subject: CN=23c0fab07ff60225382d0c6fc5ab99080e65c1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:4e:85:df:af:7c:94:9b:ce:32:85:21:6f:
a8:db:64:a6:b1:d9:d9:78:67:0b:56:40:c8:d7:3b:
7b:c6:dd:86:b3:6c:c5:82:67:da:7a:2b:f8:de:9e:
d4:21:e8:1d:b8:ca:1c:41:6b:4f:59:7e:42:84:bd:
df:34:f0:2a:01:d3:35:14:ab:9e:32:28:85:bf:eb:
dd:25:52:df:09:32:91:82:d1:b3:9c:87:41:b7:d3:
45:09:36:a9:b7:fb:21:de:95:0b:53:5f:d3:0e:ba:
2d:b2:4c:7a:1a:d6:c9:64:de:46:92:d7:2e:90:2e:
84:ee:12:96:87:42:fd:7f:2d:a0:51:bc:f9:ce:be:
5a:67:b8:d4:40:f4:cc:10:86:de:33:01:27:d8:94:
95:d0:ec:03:9d:38:85:a1:51:40:df:a2:84:eb:78:
74:c9:7d:e3:be:23:ac:ab:08:e8:4a:ab:6d:c5:c9:
33:66:b0:35:b3:2f:0c:5f:25:a7:ae:92:27:ea:67:
ad:df:15:af:e0:52:67:bc:6a:30:07:ee:23:5e:b7:
c3:0b:ed:2a:0e:b2:9c:68:37:79:ff:c7:dc:39:69:
67:5c:a4:af:f5:87:73:1d:b3:07:85:7b:eb:8f:0a:
bc:9b:f5:53:39:8f:33:fc:c2:05:a0:18:97:bc:7b:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C0:FA:B0:7F:F6:02:25:38:2D:0C:6F:C5:AB:99:08:0E:65:C1:CB
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cc:26:87:0b:6b:7c:80:2c:14:2d:dc:72:99:47:da:69:67:
8f:c5:2f:3b:f1:09:57:3b:82:94:be:cc:91:6d:69:06:c0:75:
8f:b5:09:63:58:82:10:ae:1b:74:04:51:44:74:de:ef:ea:3c:
2a:31:d4:da:a2:53:35:87:86:e6:c0:bf:51:26:cc:2f:27:fd:
6a:89:6d:5c:66:f1:30:94:34:2f:8d:bb:24:26:36:83:94:6b:
9b:1d:7d:21:0c:ed:16:09:1f:ee:2f:c0:c6:59:e9:13:08:d1:
1f:cf:5c:8f:44:3e:59:89:58:bb:f3:16:b4:8d:af:9d:18:55:
d1:1f:42:fa:bd:40:12:c7:28:37:3b:5d:16:9e:6d:ff:85:63:
b1:0a:63:26:69:35:25:b8:e6:30:90:fe:92:0b:d9:3b:70:b4:
87:f1:2d:d8:3d:d4:8f:48:29:bd:fb:7e:d0:de:a5:1f:96:9f:
87:eb:61:80:03:53:16:81:dc:b1:84:f4:26:74:57:e2:2a:11:
93:29:45:84:8e:8d:f4:dc:17:d3:39:a8:96:66:f8:31:5e:ef:
66:66:54:cd:93:81:6e:dc:27:f5:60:71:06:b4:5c:cf:43:81:
de:6c:ee:e7:92:88:bd:45:39:9a:b2:5e:07:da:6b:29:1d:ee:
f0:24:21:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2VTVgw5EOVfxkfNX7UPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl
MTJhOWIwHhcNMjYwNTEyMTEwMTI4WhcNMjYwNTEzMTEwMTI4WjAzMTEwLwYDVQQD
EygyM2MwZmFiMDdmZjYwMjI1MzgyZDBjNmZjNWFiOTkwODBlNjVjMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug1Ohd+vfJSbzjKFIW+o22SmsdnZ
eGcLVkDI1zt7xt2Gs2zFgmfaeiv43p7UIegduMocQWtPWX5ChL3fNPAqAdM1FKue
MiiFv+vdJVLfCTKRgtGznIdBt9NFCTapt/sh3pULU1/TDrotskx6GtbJZN5Gktcu
kC6E7hKWh0L9fy2gUbz5zr5aZ7jUQPTMEIbeMwEn2JSV0OwDnTiFoVFA36KE63h0
yX3jviOsqwjoSqttxckzZrA1sy8MXyWnrpIn6met3xWv4FJnvGowB+4jXrfDC+0q
DrKcaDd5/8fcOWlnXKSv9YdzHbMHhXvrjwq8m/VTOY8z/MIFoBiXvHvbiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPA+rB/9gIlOC0Mb8WrmQgOZcHLMB8GA1UdIwQY
MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt
NDQ2MDE5OTY2YTE5LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5
LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMwmhwtr
fIAsFC3ccplH2mlnj8UvO/EJVzuClL7MkW1pBsB1j7UJY1iCEK4bdARRRHTe7+o8
KjHU2qJTNYeG5sC/USbMLyf9aoltXGbxMJQ0L427JCY2g5Rrmx19IQztFgkf7i/A
xlnpEwjRH89cj0Q+WYlYu/MWtI2vnRhV0R9C+r1AEscoNztdFp5t/4VjsQpjJmk1
JbjmMJD+kgvZO3C0h/Et2D3Uj0gpvft+0N6lH5afh+thgANTFoHcsYT0JnRX4ioR
kylFhI6N9NwX0zmolmb4MV7vZmZUzZOBbtwn9WBxBrRcz0OB3mzu55KIvUU5mrJe
B9prKR3u8CQhdQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:22:29 2026 by rpki-client