Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: HtZbrxBra1x6uLakXGAx14AsqzSLjA8I4n1DumFWYzk=
Subject key identifier: 14:8D:92:17:2F:81:83:D8:7A:EC:EA:91:FE:69:C1:97:91:8D:3E:FF
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019E3117ACFBA549FD101E3E2A206776BB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 1918
Signing time: Sat 16 May 2026 14:01:35 +0000
Manifest this update: Sat 16 May 2026 14:01:35 +0000
Manifest next update: Sun 17 May 2026 14:01:35 +0000
Files and hashes: 1: 1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa (hash: M4FAHY2ohA57DjcYF38C6Ouqb+gh+WIb6rDrETiW3k8=)
2: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: qKXvWXqSsXeM1D5X4vbpgz3n6kf5ftpxrkQPCFugA8I=)
3: A1TiuU0M75jp0mWYlWQ0dXCZftM.roa (hash: EhrXpdBCcTrMdsFgZCr+ZQCKKCBrE/k1CPAoaKHDuRg=)
4: CiXzPWmke5n548-SbTCFdFEYvdY.roa (hash: neMp5JrpOzLPa+wb8gpytOuldw6oEOTtfnGZtatHKXc=)
5: VbudqHUU3wej-Ky_SGgd-IL1oU8.roa (hash: PP3CaUPvJ8zLIQWtRlM90SR43ub+3rRJI44xSidlZHg=)
6: ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa (hash: VKiXvfaRIo/zqFVww9h0Ep/s8yiELNrrU4q9QIip7L0=)
7: e99HCBjQgcssRPkCDiUE7eAcY_w.roa (hash: IYb3xBr9j8PdXiJfn/hO3V8a/I7VRwJ3UbeucKB0LsU=)
8: t20IKoUV8idtpCE6ygNMZGStJOA.roa (hash: eQjGSUu221l3J4NCuaCZ9GFUuzoFvNOoLBpODCNQ5eI=)
9: tA0K8bGZYQr51ts9fgVMQNNETk0.roa (hash: tyQ/+T3yjAq3vDmdw3JjnFixVEUOuWwoh0sIsij3a8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:ac:fb:a5:49:fd:10:1e:3e:2a:20:67:76:bb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: May 16 14:01:35 2026 GMT
Not After : May 17 14:01:35 2026 GMT
Subject: CN=148d92172f8183d87aecea91fe69c197918d3eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:56:04:25:b1:49:8c:80:20:7b:03:bc:6c:
7a:14:33:46:9e:4d:22:bb:a7:30:81:88:9c:59:8b:
1a:53:7c:53:25:a5:fa:f6:71:75:53:b4:27:52:8d:
40:e2:6f:dd:7a:20:97:63:59:95:c4:28:fe:e9:60:
b5:c5:1c:34:b8:f2:8f:9a:bb:36:58:dc:68:f3:df:
e8:f5:7c:27:21:97:ec:3f:ed:03:a9:37:b4:9c:00:
0b:5c:14:6c:62:24:53:16:f3:cd:e3:7e:77:5f:92:
a1:0f:26:52:1f:df:0d:14:b2:65:51:96:2e:70:2e:
ef:42:8d:94:5a:6c:25:e5:56:c2:a1:7d:68:0f:81:
94:8c:97:cf:b4:4f:24:0e:7e:54:3f:c0:da:d7:5b:
a5:f0:a8:c4:88:1c:66:a9:c1:8d:3c:52:8d:09:ab:
7b:1d:f0:53:da:66:6d:6a:46:a8:03:5e:19:98:b1:
30:5d:83:b3:4f:0e:c2:a1:0e:be:f4:ea:81:9c:24:
6b:a4:67:b6:c5:5f:d0:dc:f3:1a:8e:73:c2:56:02:
1b:bc:70:c7:dd:1e:42:28:56:fe:89:d7:9a:46:c9:
5f:5a:19:a6:9f:a3:11:00:74:04:de:e0:58:df:bd:
28:2b:7f:5c:34:07:f2:51:f2:6b:44:eb:76:f0:3f:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8D:92:17:2F:81:83:D8:7A:EC:EA:91:FE:69:C1:97:91:8D:3E:FF
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cf:e3:1a:f8:ca:70:f6:88:3f:79:8c:98:4f:d9:d3:6a:a3:
e0:41:fd:97:a6:3b:8d:1c:4c:79:44:cb:7f:87:6d:fa:a8:ef:
51:69:e6:96:c9:a2:88:ff:99:9e:e6:16:ae:dc:1e:0e:be:88:
a4:20:c1:f5:ee:cd:fb:4d:9d:d3:f6:d6:1f:c7:08:87:81:f9:
82:41:4c:44:2b:b3:c6:c3:81:51:5c:65:a4:2b:a8:27:68:0b:
af:6f:93:b2:31:31:17:e7:fe:91:9e:b7:58:b5:f5:9e:55:75:
7c:fa:57:c9:cd:2d:14:59:e8:98:1d:e5:37:42:75:83:5e:7e:
18:d2:09:ff:06:01:b1:01:00:08:d4:86:f9:56:4a:d5:b5:55:
fd:0b:a2:78:b0:3a:78:09:73:bb:f0:ea:db:c0:9a:7e:64:93:
c4:c0:b1:88:b2:f7:8c:07:9d:15:99:c1:5c:b9:48:05:be:f3:
80:55:1c:86:2b:b1:d1:bc:1e:43:e0:a6:56:41:f4:53:72:84:
5e:de:2d:47:19:40:9e:86:2d:65:f9:4e:29:ec:50:17:32:c5:
0a:bc:4e:2b:69:8f:fc:c0:79:8a:9c:ad:6f:0e:f8:80:12:e8:
48:7f:69:36:1b:9a:75:27:7f:07:4a:42:bd:22:de:3a:7f:c4:
0f:d3:18:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:46 2026 by rpki-client