Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: mtdoqDKJa3+KAzqMErdLZN1NqrVQHz0jwmiKK84N4Mg=
Subject key identifier: F6:7C:68:A1:DF:EF:F6:40:B1:77:E6:9B:09:C1:07:D0:A9:D4:9D:9C
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019D9A748C979DF83C3436A7570B09110F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 08:00:22 +0000
Manifest this update: Fri 17 Apr 2026 08:00:22 +0000
Manifest next update: Sat 18 Apr 2026 08:00:22 +0000
Files and hashes: 1: 1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa (hash: M4FAHY2ohA57DjcYF38C6Ouqb+gh+WIb6rDrETiW3k8=)
2: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: tfTxO5htLzNfbXd7iMfKdFvnf0N+fxlds5COmjGnwNg=)
3: A1TiuU0M75jp0mWYlWQ0dXCZftM.roa (hash: EhrXpdBCcTrMdsFgZCr+ZQCKKCBrE/k1CPAoaKHDuRg=)
4: CiXzPWmke5n548-SbTCFdFEYvdY.roa (hash: neMp5JrpOzLPa+wb8gpytOuldw6oEOTtfnGZtatHKXc=)
5: VbudqHUU3wej-Ky_SGgd-IL1oU8.roa (hash: PP3CaUPvJ8zLIQWtRlM90SR43ub+3rRJI44xSidlZHg=)
6: ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa (hash: VKiXvfaRIo/zqFVww9h0Ep/s8yiELNrrU4q9QIip7L0=)
7: e99HCBjQgcssRPkCDiUE7eAcY_w.roa (hash: IYb3xBr9j8PdXiJfn/hO3V8a/I7VRwJ3UbeucKB0LsU=)
8: t20IKoUV8idtpCE6ygNMZGStJOA.roa (hash: eQjGSUu221l3J4NCuaCZ9GFUuzoFvNOoLBpODCNQ5eI=)
9: tA0K8bGZYQr51ts9fgVMQNNETk0.roa (hash: tyQ/+T3yjAq3vDmdw3JjnFixVEUOuWwoh0sIsij3a8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:8c:97:9d:f8:3c:34:36:a7:57:0b:09:11:0f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Apr 17 08:00:22 2026 GMT
Not After : Apr 18 08:00:22 2026 GMT
Subject: CN=f67c68a1dfeff640b177e69b09c107d0a9d49d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:08:1a:d7:20:bc:6b:49:78:1b:9d:f3:6b:
6c:b6:c0:1a:35:ca:6f:f7:fe:36:d7:e4:ba:7c:eb:
b7:3f:65:4c:67:de:bd:d1:64:23:0f:a2:b7:1d:70:
6f:0e:d2:44:d2:c9:ee:c2:ca:2b:84:a2:c1:26:9e:
2b:1f:ac:0e:a2:01:74:ee:78:12:f0:eb:f0:ca:ae:
54:68:be:fb:de:3c:3b:fa:30:fb:d5:4b:80:c3:33:
b8:eb:fb:ee:85:4f:30:05:65:2d:3f:16:d3:a5:19:
6c:74:07:d6:d4:09:e4:cf:27:60:7a:d5:ff:ab:3d:
1d:46:34:ef:6c:28:3c:d5:8c:08:ff:1f:6c:d2:bb:
fa:92:49:75:99:d9:de:48:ac:92:90:10:a9:b2:f8:
7e:cd:e6:08:74:43:67:15:5b:a0:8a:38:9d:bc:f8:
a0:cd:eb:81:50:b4:6e:b0:f5:f4:02:aa:72:22:b6:
0c:4a:18:c3:75:70:bf:32:18:ac:f9:28:d7:e5:e7:
61:2f:4a:c0:f9:01:9c:1c:e9:df:81:f2:e1:70:bd:
a1:20:d2:b7:10:e6:51:bf:33:a1:c3:d1:be:f2:07:
ab:90:56:9d:94:21:d5:f2:de:e6:4c:ca:89:f2:3d:
7e:9c:bd:ad:28:98:a7:d5:e5:dd:9c:26:65:50:9b:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7C:68:A1:DF:EF:F6:40:B1:77:E6:9B:09:C1:07:D0:A9:D4:9D:9C
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ad:ed:71:bb:17:ca:f0:ca:c1:90:7f:75:5e:28:77:26:ac:
19:2f:94:5a:1e:18:d0:4b:e8:c4:2a:d4:98:19:14:1e:0f:1f:
01:3c:b8:ae:2b:f9:37:fd:b8:1b:84:5d:d8:33:ad:13:4b:b1:
46:ad:ca:c9:f0:f9:26:bf:f3:4a:c8:43:ee:34:11:87:ad:b2:
c2:3e:a6:5d:04:10:44:0a:31:cb:5d:46:a2:cd:30:e8:ee:98:
56:1e:25:8b:ea:09:71:e8:7e:0d:a0:2f:ab:58:30:c8:84:5e:
6e:e9:ab:0a:1f:2c:59:03:9d:30:41:a7:b7:14:77:7b:1f:fc:
2a:20:56:bb:04:ed:cf:72:5f:a9:c0:10:1d:e0:79:dc:e3:57:
3e:33:56:99:15:f8:b9:0e:2a:fc:24:53:48:d9:c5:be:27:77:
93:92:7b:8b:02:a0:9e:2f:ba:99:1d:a3:81:fa:b2:db:d7:67:
ce:16:4d:c7:97:65:ff:30:0f:ab:d5:40:11:dd:95:d2:b3:73:
04:e3:52:ac:21:0f:2c:6b:f7:2d:06:b4:40:35:80:a5:c2:12:
b9:26:75:33:76:91:92:a4:44:87:e1:55:0a:7e:3c:b2:6e:7c:
1b:46:f7:18:b1:97:f9:04:13:07:a8:3a:a1:da:29:27:21:e6:
dd:94:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:07 2026 by rpki-client