Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: QHZC/0fdLbWIQERuC4ZKgBX5saqXiHKa+9XTHNctZfw=
Subject key identifier: 68:79:24:1E:29:2A:52:FB:20:8D:18:AA:91:3B:52:82:93:5E:27:76
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019FA9AC68CB3A6C22EC3FC020F45C3589A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 17:01:16 +0000
Manifest this update: Tue 28 Jul 2026 17:01:16 +0000
Manifest next update: Wed 29 Jul 2026 17:01:16 +0000
Files and hashes: 1: 1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa (hash: M4FAHY2ohA57DjcYF38C6Ouqb+gh+WIb6rDrETiW3k8=)
2: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: Hd335Re1WhtJ1Oy5Ml48DTcwz5VV+92IzF5IvcoOyfs=)
3: A1TiuU0M75jp0mWYlWQ0dXCZftM.roa (hash: EhrXpdBCcTrMdsFgZCr+ZQCKKCBrE/k1CPAoaKHDuRg=)
4: CiXzPWmke5n548-SbTCFdFEYvdY.roa (hash: neMp5JrpOzLPa+wb8gpytOuldw6oEOTtfnGZtatHKXc=)
5: VbudqHUU3wej-Ky_SGgd-IL1oU8.roa (hash: PP3CaUPvJ8zLIQWtRlM90SR43ub+3rRJI44xSidlZHg=)
6: ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa (hash: VKiXvfaRIo/zqFVww9h0Ep/s8yiELNrrU4q9QIip7L0=)
7: e99HCBjQgcssRPkCDiUE7eAcY_w.roa (hash: IYb3xBr9j8PdXiJfn/hO3V8a/I7VRwJ3UbeucKB0LsU=)
8: t20IKoUV8idtpCE6ygNMZGStJOA.roa (hash: eQjGSUu221l3J4NCuaCZ9GFUuzoFvNOoLBpODCNQ5eI=)
9: tA0K8bGZYQr51ts9fgVMQNNETk0.roa (hash: tyQ/+T3yjAq3vDmdw3JjnFixVEUOuWwoh0sIsij3a8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:68:cb:3a:6c:22:ec:3f:c0:20:f4:5c:35:89:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jul 28 17:01:16 2026 GMT
Not After : Jul 29 17:01:16 2026 GMT
Subject: CN=6879241e292a52fb208d18aa913b5282935e2776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:96:f6:7c:08:2a:8b:21:a0:86:d0:7a:a9:
4a:d8:25:61:cd:45:f5:a6:58:db:16:ce:16:03:bf:
b9:f4:72:7d:2d:0c:6c:e8:d8:fb:08:04:d3:80:0c:
22:f6:2f:fc:95:8d:b5:44:e5:57:ec:f6:ab:7b:61:
8a:a1:5c:3a:4a:86:66:47:35:7f:fd:02:64:48:b5:
fb:0b:2f:36:0f:fb:4f:e6:2c:f5:ce:52:9e:cf:05:
20:c6:29:06:0f:29:dd:a4:69:b6:cd:52:e9:65:ca:
e0:1d:c7:64:75:81:d2:16:70:ca:80:e5:a9:87:e6:
c9:8a:2e:71:d3:a2:58:3e:bf:e8:5c:10:e3:b3:5a:
1d:5b:de:33:9a:ae:6b:1d:4d:e0:8e:27:b2:ca:95:
22:a4:78:0b:e8:c2:1f:d3:58:5b:2f:a1:51:a6:0b:
93:8f:76:00:cd:44:94:eb:2e:05:1e:f4:f3:d4:5c:
4a:6e:c4:1c:14:d8:cc:ae:f2:89:47:dd:85:8d:e7:
97:56:f0:14:b6:2f:d5:49:07:57:ae:fa:4e:de:04:
15:17:3b:77:93:a6:53:aa:08:2e:62:a7:f7:ed:d6:
7a:d2:f1:15:80:d1:90:fd:4b:0c:91:cb:c3:f7:6a:
00:a3:f9:22:a3:0e:8c:81:99:70:44:b5:18:4f:6b:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:24:1E:29:2A:52:FB:20:8D:18:AA:91:3B:52:82:93:5E:27:76
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:06:d2:f3:bd:0b:c2:66:69:26:2a:92:e2:33:53:66:3e:7e:
69:c2:31:f5:19:1e:6d:d2:6d:fe:c4:1a:20:dd:8f:68:83:cd:
91:f5:48:9b:50:1e:c4:40:e5:88:c1:07:4d:fe:d9:0a:59:50:
49:a4:ce:ee:aa:1b:e0:81:50:87:f6:5a:e0:71:f4:8b:65:3b:
32:ac:9f:41:c6:e8:ab:cb:c9:93:f6:0b:78:a4:fc:cc:f7:ce:
2f:48:8e:38:fe:e7:7f:d1:c1:b4:65:9b:6a:1e:33:f5:58:1a:
66:bd:4d:1b:8d:73:a0:c8:0a:fb:c2:cc:e1:3b:58:02:d4:76:
83:b2:41:9c:1f:84:1c:f0:35:3b:42:8f:a6:a5:0a:56:26:59:
c0:a6:e1:29:35:96:2f:45:f7:ee:62:65:68:b6:f5:a4:d7:f9:
f0:ff:96:3c:43:98:15:fe:22:8d:c8:d7:d2:de:0c:ef:8a:e9:
df:2a:62:e7:b1:b1:46:e0:52:6c:b5:78:ba:7e:e1:34:42:59:
ef:60:34:1b:85:32:03:4f:c2:1b:e3:33:94:20:16:4a:15:61:
cc:a4:52:9c:dc:5b:12:cc:9b:17:e6:fe:5b:d3:ee:c5:96:d3:
83:e8:b4:62:6e:09:a5:7e:e9:12:32:b2:b2:b8:fc:36:f2:d0:
43:e1:59:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:20 2026 by rpki-client