Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: ZrcqZg46iwbZNVCsx4OS3VoL4fYFnlzXjmrlcPAKcAU=
Subject key identifier: 6C:C8:B3:9C:C1:ED:77:3B:7D:A2:0D:DF:6F:D7:D7:81:89:13:7A:C8
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 01A13F396D28ABC14069F91F7B63C3E6956E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 1AAD
Signing time: Thu 15 Oct 2026 11:01:30 +0000
Manifest this update: Thu 15 Oct 2026 11:01:30 +0000
Manifest next update: Fri 16 Oct 2026 11:01:30 +0000
Files and hashes: 1: 1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa (hash: M4FAHY2ohA57DjcYF38C6Ouqb+gh+WIb6rDrETiW3k8=)
2: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: jjmNrWysYdSriHAdRiYzKAo6R6M9FrCeCoUg3ZEKsgI=)
3: A1TiuU0M75jp0mWYlWQ0dXCZftM.roa (hash: EhrXpdBCcTrMdsFgZCr+ZQCKKCBrE/k1CPAoaKHDuRg=)
4: CiXzPWmke5n548-SbTCFdFEYvdY.roa (hash: neMp5JrpOzLPa+wb8gpytOuldw6oEOTtfnGZtatHKXc=)
5: VbudqHUU3wej-Ky_SGgd-IL1oU8.roa (hash: PP3CaUPvJ8zLIQWtRlM90SR43ub+3rRJI44xSidlZHg=)
6: ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa (hash: VKiXvfaRIo/zqFVww9h0Ep/s8yiELNrrU4q9QIip7L0=)
7: e99HCBjQgcssRPkCDiUE7eAcY_w.roa (hash: IYb3xBr9j8PdXiJfn/hO3V8a/I7VRwJ3UbeucKB0LsU=)
8: t20IKoUV8idtpCE6ygNMZGStJOA.roa (hash: eQjGSUu221l3J4NCuaCZ9GFUuzoFvNOoLBpODCNQ5eI=)
9: tA0K8bGZYQr51ts9fgVMQNNETk0.roa (hash: tyQ/+T3yjAq3vDmdw3JjnFixVEUOuWwoh0sIsij3a8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:6d:28:ab:c1:40:69:f9:1f:7b:63:c3:e6:95:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Oct 15 11:01:30 2026 GMT
Not After : Oct 16 11:01:30 2026 GMT
Subject: CN=6cc8b39cc1ed773b7da20ddf6fd7d78189137ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:65:d7:f7:75:06:f3:b2:af:85:7e:4a:1c:
aa:56:c6:b8:6c:d1:99:82:fa:89:76:bd:c2:ac:64:
b7:16:48:f3:85:66:2a:db:18:22:b6:c7:40:65:1d:
76:3c:92:43:7d:fc:c6:48:13:61:f4:7b:75:8f:ea:
b3:39:e6:29:c9:90:5a:31:3f:e9:33:53:7d:24:3e:
1c:28:c0:cd:93:c3:90:61:0e:63:cd:cd:b4:2d:ca:
67:7f:4e:60:6a:2b:0c:01:b9:fe:7b:34:ca:5c:7f:
f0:9c:5a:d4:c8:bc:ed:7b:61:56:39:54:09:92:5a:
df:ff:86:4d:b2:51:f3:de:d7:e3:11:7d:02:33:be:
c3:65:50:cd:90:f5:00:c9:68:33:26:5f:3b:ca:3f:
b2:94:a4:40:6f:ac:32:87:5f:f1:4b:3b:48:1d:1b:
7e:ce:40:aa:fc:18:e3:94:f5:41:08:3b:26:d4:a4:
9d:7b:66:ec:c1:ce:fc:14:85:7b:0f:05:4b:ef:c1:
29:ae:c0:1d:92:29:a6:bd:b4:07:57:57:e4:47:1f:
1c:a7:7a:62:fc:7b:af:4d:4f:57:90:89:7b:3b:1b:
9e:c8:61:44:40:cd:e7:2b:f2:c2:03:6a:33:fb:43:
db:cb:da:52:ce:05:31:e6:6d:82:3e:a3:40:6f:a9:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C8:B3:9C:C1:ED:77:3B:7D:A2:0D:DF:6F:D7:D7:81:89:13:7A:C8
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:10:71:05:16:f1:da:25:f8:4f:fb:54:91:c5:6f:3a:bb:48:
74:25:ec:5e:dc:b6:2d:fa:f2:ab:b5:00:4e:1c:56:34:dd:ef:
f3:77:19:51:e7:26:c4:be:d1:73:e0:2a:c2:7b:04:0a:7b:5a:
8b:91:63:30:81:69:e3:d5:b3:aa:5f:5b:0b:9a:10:3e:5b:e7:
2d:c2:bf:c6:09:b8:b9:c9:67:be:61:77:e5:e7:12:05:37:89:
ba:32:a6:f6:3c:30:06:45:76:43:e3:9b:96:d1:85:07:9b:63:
aa:48:48:eb:b9:7f:ba:be:e9:11:55:7a:2a:52:b5:29:30:fc:
c8:23:c5:2d:bf:ff:da:73:2e:4b:1e:c1:90:1b:bd:4a:42:de:
e2:b9:d0:da:85:6b:eb:64:03:ea:4a:46:9d:1f:78:2b:12:b7:
74:a8:4e:74:d4:2c:6c:95:34:ee:25:25:75:88:26:3c:bc:25:
47:a4:52:d8:10:66:d3:ad:7c:4e:20:36:b0:92:2a:85:c7:81:
2a:49:0a:a8:42:c7:37:c4:71:5b:1c:d3:15:97:73:5a:c9:80:
b7:e1:49:23:ca:26:1f:5d:ad:a3:84:a7:bd:9b:0d:3d:e2:4a:
73:2e:9b:7e:98:60:24:f9:31:0c:99:f0:a7:bf:ce:b4:ac:c9:
3a:b5:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:06:52 2026 by rpki-client