Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: Ya/esBkDX6EdVTaQz/H57zvdg9BIv4jDWQ4vNpRBfXE=
Subject key identifier: 14:4E:3A:CC:BF:F2:63:0C:63:34:8C:6A:89:79:0F:9B:32:34:DC:BD
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 01A00281C3C545499CB8EDD8C0262BE3BD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 1A09
Signing time: Fri 14 Aug 2026 23:00:53 +0000
Manifest this update: Fri 14 Aug 2026 23:00:53 +0000
Manifest next update: Sat 15 Aug 2026 23:00:53 +0000
Files and hashes: 1: 1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa (hash: M4FAHY2ohA57DjcYF38C6Ouqb+gh+WIb6rDrETiW3k8=)
2: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: QBxNhHYWwkujiGbCTH8eiYq5QLO1J7nkvWk7hpn1ZLc=)
3: A1TiuU0M75jp0mWYlWQ0dXCZftM.roa (hash: EhrXpdBCcTrMdsFgZCr+ZQCKKCBrE/k1CPAoaKHDuRg=)
4: CiXzPWmke5n548-SbTCFdFEYvdY.roa (hash: neMp5JrpOzLPa+wb8gpytOuldw6oEOTtfnGZtatHKXc=)
5: VbudqHUU3wej-Ky_SGgd-IL1oU8.roa (hash: PP3CaUPvJ8zLIQWtRlM90SR43ub+3rRJI44xSidlZHg=)
6: ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa (hash: VKiXvfaRIo/zqFVww9h0Ep/s8yiELNrrU4q9QIip7L0=)
7: e99HCBjQgcssRPkCDiUE7eAcY_w.roa (hash: IYb3xBr9j8PdXiJfn/hO3V8a/I7VRwJ3UbeucKB0LsU=)
8: t20IKoUV8idtpCE6ygNMZGStJOA.roa (hash: eQjGSUu221l3J4NCuaCZ9GFUuzoFvNOoLBpODCNQ5eI=)
9: tA0K8bGZYQr51ts9fgVMQNNETk0.roa (hash: tyQ/+T3yjAq3vDmdw3JjnFixVEUOuWwoh0sIsij3a8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:c3:c5:45:49:9c:b8:ed:d8:c0:26:2b:e3:bd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Aug 14 23:00:53 2026 GMT
Not After : Aug 15 23:00:53 2026 GMT
Subject: CN=144e3accbff2630c63348c6a89790f9b3234dcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:00:e0:18:b3:e7:99:20:21:34:85:ce:cd:
06:1e:b2:c2:84:52:fb:28:1c:fe:6a:73:83:af:98:
a0:bf:35:95:82:79:46:e9:7d:9b:a1:07:bf:4c:51:
51:04:ba:e3:b1:16:dd:90:b8:3d:17:b2:10:62:0c:
c6:4b:7b:a3:e0:94:66:37:1b:d8:2b:d1:4c:d7:c9:
95:39:bc:23:60:6b:e6:be:85:97:b6:68:57:e7:ae:
d1:8b:c3:04:39:17:d8:85:ca:96:6f:96:30:7c:59:
af:d2:fd:22:cb:86:74:71:52:78:c1:27:a1:0d:52:
bb:dc:20:8d:72:dc:ab:31:3a:58:c9:d1:71:1a:b2:
92:92:8c:fd:af:1c:c5:c5:b2:ab:eb:c2:bd:62:0c:
55:86:f8:a4:4e:5e:d5:51:71:02:04:e4:1f:a2:c1:
7b:0a:b8:64:e9:0a:f0:d5:2c:84:0e:0e:9a:a9:3a:
ec:03:de:8f:61:64:bb:8c:3f:d2:36:76:98:21:c0:
90:1e:d2:21:18:a9:d4:17:d3:3f:91:66:3c:15:ef:
31:8b:61:63:71:42:22:db:f9:0f:b2:f1:f0:71:12:
12:9a:1c:30:54:a0:e7:20:c5:43:3b:a9:1e:f6:d9:
33:ea:3a:14:e1:ca:1c:61:13:0a:cd:ac:7c:b8:db:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4E:3A:CC:BF:F2:63:0C:63:34:8C:6A:89:79:0F:9B:32:34:DC:BD
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4e:7b:ab:e1:6c:95:fb:b0:ae:0d:bf:7a:8a:53:1c:df:9e:
a6:f7:c0:3a:cb:73:ca:f1:52:4e:0d:0c:8f:0a:89:8d:d2:e7:
2a:f9:b9:81:c8:bf:b1:07:ed:57:d4:5e:90:64:a4:ab:a5:3f:
b1:5d:2b:e2:d7:2b:e1:aa:da:ad:4c:69:b2:10:06:8a:32:4d:
ac:0f:0a:88:df:d2:c4:81:5c:a3:56:97:25:ac:3b:da:a9:98:
13:04:93:7a:7b:6e:e5:d2:5c:89:3b:7c:32:05:b5:53:33:3d:
fa:7e:a4:59:dd:7a:6f:f2:db:71:5d:d9:e1:e0:45:2e:08:ad:
87:ba:ce:bb:68:61:95:dd:fa:db:ff:1f:8d:af:c0:dc:5e:17:
95:cc:bd:50:22:66:4a:eb:7a:46:50:b2:06:05:62:ab:7d:a0:
06:da:ab:6b:d3:7f:41:c5:41:53:70:6d:b5:83:7d:26:0c:12:
1f:98:54:be:e9:83:a3:86:95:47:8a:40:21:1f:b3:c6:7a:bc:
63:16:7a:4b:45:91:ba:89:48:79:e4:07:21:eb:98:17:60:d3:
ee:40:0f:ce:1c:80:75:e7:61:46:b9:3d:0e:e2:6c:50:24:93:
23:28:08:cc:32:3e:e0:61:fb:08:a6:85:28:3c:22:8e:98:07:
a2:09:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:33:01 2026 by rpki-client