Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: tOnid9FdlYK7D3WL+ihNq7oCRNJLdVGUfdKQ5dRfP3Q=
Subject key identifier: 8B:0F:9A:DA:96:99:4C:C8:16:61:D7:0F:94:B7:17:E5:88:F4:70:5D
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019D37F70BB4D75EB06A4C704B6B0B1D5297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 05:00:30 +0000
Manifest this update: Sun 29 Mar 2026 05:00:30 +0000
Manifest next update: Mon 30 Mar 2026 05:00:30 +0000
Files and hashes: 1: 1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa (hash: M4FAHY2ohA57DjcYF38C6Ouqb+gh+WIb6rDrETiW3k8=)
2: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: PsBbvRGG1gWZqbqX/wcjWppujZNCs/NpX4etCd9Q7k4=)
3: A1TiuU0M75jp0mWYlWQ0dXCZftM.roa (hash: EhrXpdBCcTrMdsFgZCr+ZQCKKCBrE/k1CPAoaKHDuRg=)
4: CiXzPWmke5n548-SbTCFdFEYvdY.roa (hash: neMp5JrpOzLPa+wb8gpytOuldw6oEOTtfnGZtatHKXc=)
5: VbudqHUU3wej-Ky_SGgd-IL1oU8.roa (hash: PP3CaUPvJ8zLIQWtRlM90SR43ub+3rRJI44xSidlZHg=)
6: ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa (hash: VKiXvfaRIo/zqFVww9h0Ep/s8yiELNrrU4q9QIip7L0=)
7: e99HCBjQgcssRPkCDiUE7eAcY_w.roa (hash: IYb3xBr9j8PdXiJfn/hO3V8a/I7VRwJ3UbeucKB0LsU=)
8: t20IKoUV8idtpCE6ygNMZGStJOA.roa (hash: eQjGSUu221l3J4NCuaCZ9GFUuzoFvNOoLBpODCNQ5eI=)
9: tA0K8bGZYQr51ts9fgVMQNNETk0.roa (hash: tyQ/+T3yjAq3vDmdw3JjnFixVEUOuWwoh0sIsij3a8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:0b:b4:d7:5e:b0:6a:4c:70:4b:6b:0b:1d:52:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Mar 29 05:00:30 2026 GMT
Not After : Mar 30 05:00:30 2026 GMT
Subject: CN=8b0f9ada96994cc81661d70f94b717e588f4705d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:d1:34:4f:65:83:e4:bd:0a:dd:66:3c:11:
29:f4:83:6c:93:bc:0b:a0:7c:17:c0:18:8d:26:2f:
6b:97:cc:f4:57:97:78:b2:8d:41:d7:da:aa:bf:15:
7f:99:14:cc:95:f0:13:67:d4:0a:8d:65:05:56:c8:
e0:b3:66:a3:ec:c6:bd:7e:dd:c7:22:98:a5:4e:77:
5f:e9:0a:ce:7f:60:97:bb:f8:bb:49:78:c4:98:63:
08:60:0b:4a:09:1a:22:da:14:13:55:1d:39:34:78:
31:c6:69:a7:6a:c0:f4:83:2e:62:34:96:0d:f5:bc:
e1:c6:91:9c:df:d8:aa:c3:a1:08:5b:a7:a5:99:d0:
5b:82:2e:61:aa:78:f7:e8:da:85:8d:10:8a:57:3f:
c5:19:52:9e:a4:6c:55:ed:9d:80:2c:a1:32:05:01:
c5:62:40:ed:bd:a4:b2:18:3e:e4:0c:51:e1:d9:13:
38:0e:fa:85:d1:88:62:09:70:39:90:16:23:59:52:
db:6b:01:ed:d0:3b:53:83:54:44:63:7c:88:8e:f7:
32:0d:19:43:73:4f:78:1b:f4:c1:51:bb:ea:a4:f8:
a2:5e:b4:8e:8d:d4:1e:8b:89:65:39:e8:e0:ef:31:
5a:af:ee:a6:14:97:65:e1:b2:96:da:ce:ba:e4:7e:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0F:9A:DA:96:99:4C:C8:16:61:D7:0F:94:B7:17:E5:88:F4:70:5D
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a9:a2:65:3d:2f:87:18:b1:bc:b7:d0:4b:68:c5:fa:f7:e7:
da:26:d1:5f:16:cf:68:b6:9d:87:20:1f:44:85:17:53:47:c6:
bd:fc:ac:a2:60:4d:9c:97:7e:79:a8:54:64:ac:da:cd:78:76:
05:7b:69:b2:11:46:a6:1f:71:71:67:b2:3d:ab:ee:98:c4:7c:
01:d1:b5:a6:7f:6a:24:c4:41:47:33:99:06:59:5b:48:06:60:
4d:80:5d:53:ee:ce:a9:95:9b:e6:a0:c6:18:4d:d5:26:cb:3c:
d6:21:2c:50:3d:fd:e7:65:38:5f:02:c8:44:50:b4:34:c3:d9:
af:28:7e:d7:d2:ce:6e:a4:e9:b1:9c:77:89:36:c4:90:d9:c8:
03:1e:8f:0e:97:b7:be:23:b3:72:70:a9:93:ca:a9:a3:e0:23:
7f:c5:e7:d3:29:f8:ef:bb:ae:2a:30:38:bd:85:80:df:15:8f:
f5:5e:7f:19:04:65:c6:08:39:a8:2a:17:4a:33:f0:1e:fe:57:
92:b8:b9:3a:3f:52:78:66:57:ca:4c:dc:26:c4:41:69:b0:e0:
a4:39:5c:95:d9:b9:31:e4:85:81:2e:a3:49:ce:ab:c0:92:a4:
dd:37:80:4e:a3:93:6a:be:ee:18:71:87:ae:68:bd:46:2b:2f:
c9:fc:bb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:46 2026 by rpki-client