Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: nnZ3vVonaTJ82R15/yRry0KNAmARZHpzcOg+Xp+esEY=
Subject key identifier: F4:48:79:68:D4:35:EF:F6:39:B0:8D:1E:24:E7:EE:23:19:FF:CF:4F
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019F18D635E85568982AB2D3E2DDC503DC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 1990
Signing time: Tue 30 Jun 2026 14:01:59 +0000
Manifest this update: Tue 30 Jun 2026 14:01:59 +0000
Manifest next update: Wed 01 Jul 2026 14:01:59 +0000
Files and hashes: 1: 1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa (hash: M4FAHY2ohA57DjcYF38C6Ouqb+gh+WIb6rDrETiW3k8=)
2: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: M2QBtq84Ql3G5pSmFpY/KwIOhLRIta2sQ3jZ5jc1obQ=)
3: A1TiuU0M75jp0mWYlWQ0dXCZftM.roa (hash: EhrXpdBCcTrMdsFgZCr+ZQCKKCBrE/k1CPAoaKHDuRg=)
4: CiXzPWmke5n548-SbTCFdFEYvdY.roa (hash: neMp5JrpOzLPa+wb8gpytOuldw6oEOTtfnGZtatHKXc=)
5: VbudqHUU3wej-Ky_SGgd-IL1oU8.roa (hash: PP3CaUPvJ8zLIQWtRlM90SR43ub+3rRJI44xSidlZHg=)
6: ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa (hash: VKiXvfaRIo/zqFVww9h0Ep/s8yiELNrrU4q9QIip7L0=)
7: e99HCBjQgcssRPkCDiUE7eAcY_w.roa (hash: IYb3xBr9j8PdXiJfn/hO3V8a/I7VRwJ3UbeucKB0LsU=)
8: t20IKoUV8idtpCE6ygNMZGStJOA.roa (hash: eQjGSUu221l3J4NCuaCZ9GFUuzoFvNOoLBpODCNQ5eI=)
9: tA0K8bGZYQr51ts9fgVMQNNETk0.roa (hash: tyQ/+T3yjAq3vDmdw3JjnFixVEUOuWwoh0sIsij3a8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:35:e8:55:68:98:2a:b2:d3:e2:dd:c5:03:dc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jun 30 14:01:59 2026 GMT
Not After : Jul 1 14:01:59 2026 GMT
Subject: CN=f4487968d435eff639b08d1e24e7ee2319ffcf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:8c:c7:7a:c5:9a:8b:f2:82:86:89:b7:2b:
fd:8a:f0:29:29:00:fe:f2:4d:49:04:3a:03:78:f5:
21:11:53:75:2b:14:be:2e:1e:ff:e0:c0:43:11:00:
13:37:60:52:b8:13:be:dc:79:43:8c:2c:07:71:62:
62:db:49:82:b5:b6:36:02:9a:53:ba:75:e3:0e:74:
30:1f:51:c2:c2:c6:ef:a7:45:be:46:b0:98:cb:c8:
c9:70:b9:f5:2f:bb:ad:fb:d5:1e:40:7e:a0:bb:ae:
ce:f6:f1:22:54:13:81:d2:e7:78:b3:98:b0:b9:ea:
38:15:11:95:19:d7:0a:f1:a1:b1:ba:f4:9b:0a:f3:
8b:55:04:fe:b3:c3:30:f4:b8:71:d4:3e:38:27:51:
05:45:a9:09:fd:8f:14:98:ef:5a:1b:8b:6d:fb:5f:
c3:1e:7f:50:76:14:f3:70:7a:75:e0:6c:fa:da:5d:
04:e4:db:95:f2:06:ad:53:45:f5:fb:a9:5a:02:e1:
76:00:c4:86:4a:33:14:03:95:ee:48:db:40:2e:8b:
e8:57:ff:ed:39:e2:1e:4f:7c:04:7b:06:ba:11:83:
1c:a9:63:73:3d:9b:53:e4:19:c8:2a:89:4d:00:9f:
60:dd:4f:51:ed:3c:a3:eb:6e:64:ba:dc:b8:d3:fb:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:48:79:68:D4:35:EF:F6:39:B0:8D:1E:24:E7:EE:23:19:FF:CF:4F
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3a:c5:44:82:c9:e7:92:09:5a:56:d2:7a:00:e9:88:3a:0b:
16:95:cc:a7:79:ec:79:63:14:16:b7:3b:29:7b:4f:83:8f:ed:
18:c1:33:ec:b4:8b:12:4b:b2:e2:a0:dd:4d:59:4a:a7:41:a6:
f0:7a:15:19:83:04:7a:53:8b:3c:93:7e:59:67:fc:56:8d:77:
a2:e3:5c:2b:10:36:22:03:ed:84:38:6a:ea:25:9e:0d:9e:b0:
56:ec:57:92:46:a6:35:f5:c8:2b:6a:02:07:2f:85:82:f8:f2:
c0:26:9c:35:42:5b:4e:40:67:07:08:64:71:74:7b:02:08:50:
fa:94:82:98:cd:c1:7c:13:5c:df:5f:84:7b:95:c2:c6:54:14:
72:83:e9:24:a6:c5:6f:14:39:13:0a:b5:d1:3d:7b:ab:05:6d:
2c:23:5b:22:fb:b8:14:bf:c5:63:7a:80:38:ee:cc:3a:13:ee:
03:4b:9c:44:14:1f:f0:df:79:3d:b3:ba:da:58:32:b1:cb:85:
4b:b0:63:7a:32:a0:ad:3f:cd:e8:ed:d7:3a:f6:4b:88:60:28:
8a:7d:0a:2a:8a:c6:76:84:56:a0:ff:e5:9e:7b:a4:f5:57:cd:
3c:5c:e1:9d:5f:4a:d1:b9:98:ba:d9:42:4b:f2:d8:fc:33:be:
ce:c0:3f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:23 2026 by rpki-client