Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: nJy51/5tFVMAcB0WCbkI9RxBw/BPMnRrtaghpp7L9mE=
Subject key identifier: 32:88:5D:B9:68:DF:56:6B:81:63:5A:89:1E:3A:0A:53:E8:02:C9:06
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 01A0D5028F4DB0D329F3B4F4533A7C5B8DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 1A76
Signing time: Thu 24 Sep 2026 20:01:49 +0000
Manifest this update: Thu 24 Sep 2026 20:01:49 +0000
Manifest next update: Fri 25 Sep 2026 20:01:49 +0000
Files and hashes: 1: 1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa (hash: M4FAHY2ohA57DjcYF38C6Ouqb+gh+WIb6rDrETiW3k8=)
2: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: ZARr4xYZapelxomw8o+rswPJeqHVWOnP3xhjavUnnAA=)
3: A1TiuU0M75jp0mWYlWQ0dXCZftM.roa (hash: EhrXpdBCcTrMdsFgZCr+ZQCKKCBrE/k1CPAoaKHDuRg=)
4: CiXzPWmke5n548-SbTCFdFEYvdY.roa (hash: neMp5JrpOzLPa+wb8gpytOuldw6oEOTtfnGZtatHKXc=)
5: VbudqHUU3wej-Ky_SGgd-IL1oU8.roa (hash: PP3CaUPvJ8zLIQWtRlM90SR43ub+3rRJI44xSidlZHg=)
6: ZXDuGr7iGMvqnSCPI1ZaZEJA94Q.roa (hash: VKiXvfaRIo/zqFVww9h0Ep/s8yiELNrrU4q9QIip7L0=)
7: e99HCBjQgcssRPkCDiUE7eAcY_w.roa (hash: IYb3xBr9j8PdXiJfn/hO3V8a/I7VRwJ3UbeucKB0LsU=)
8: t20IKoUV8idtpCE6ygNMZGStJOA.roa (hash: eQjGSUu221l3J4NCuaCZ9GFUuzoFvNOoLBpODCNQ5eI=)
9: tA0K8bGZYQr51ts9fgVMQNNETk0.roa (hash: tyQ/+T3yjAq3vDmdw3JjnFixVEUOuWwoh0sIsij3a8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:8f:4d:b0:d3:29:f3:b4:f4:53:3a:7c:5b:8d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Sep 24 20:01:49 2026 GMT
Not After : Sep 25 20:01:49 2026 GMT
Subject: CN=32885db968df566b81635a891e3a0a53e802c906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:86:16:1d:a0:76:64:78:2a:88:5c:d3:d0:
58:9e:93:c7:66:5a:fe:6c:25:a8:6c:b9:17:a3:a7:
0d:38:09:e4:b8:1a:2c:d0:d7:61:b4:84:74:eb:07:
5e:d4:cb:99:31:de:06:f6:d0:57:72:20:7a:33:e7:
ed:fa:a0:49:91:11:77:bf:da:d7:ff:50:ff:57:4b:
c8:9d:50:e4:85:37:6d:b1:dd:62:3a:b6:be:5e:7a:
0e:35:2a:d2:79:0e:f4:47:59:87:65:ec:3f:65:08:
ea:d2:fa:d4:27:5a:76:6c:47:7f:32:b3:40:3f:e9:
1a:78:17:37:c3:5a:82:78:02:dd:4f:d2:96:47:21:
dd:dc:fb:34:f3:06:5d:ca:49:d1:fb:94:76:75:ea:
9f:ae:53:d9:ca:1d:3a:38:6f:da:73:d3:f6:fc:19:
f5:a6:17:9a:04:36:be:d2:74:67:47:12:ff:51:07:
ec:df:d7:aa:7d:f1:0d:1b:a5:f3:c8:aa:e7:72:98:
15:37:9e:00:e1:f0:da:ba:d4:d3:32:22:02:52:2b:
00:0e:b1:c0:d3:b3:b1:0d:44:07:3e:84:aa:c4:3d:
d0:b2:ef:8a:25:9e:0d:93:49:24:ce:e0:5f:0b:f5:
cc:82:20:31:58:98:c3:09:fe:1f:c0:ca:b8:db:5b:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:88:5D:B9:68:DF:56:6B:81:63:5A:89:1E:3A:0A:53:E8:02:C9:06
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:63:47:47:59:16:a1:0a:52:27:2f:5f:70:60:9f:a5:b9:ad:
6a:54:0d:f5:77:71:1e:a6:65:ed:96:22:f1:ac:ff:06:50:32:
2e:8d:7e:b4:06:8f:da:f2:a0:c7:c0:a4:81:60:fb:b1:35:c7:
0b:30:2e:5c:fc:72:9d:ce:1f:f2:53:01:05:86:de:67:d2:5a:
36:cb:fa:39:ba:27:2b:81:0e:80:9b:d6:dd:1c:a9:e7:bb:02:
2a:05:e9:c6:5c:b5:1a:7f:17:a5:f1:b8:1c:31:98:fe:72:85:
f1:8f:49:fe:ac:07:62:db:90:e9:df:f3:f9:97:b9:b2:41:cc:
01:f5:26:96:e0:50:80:bd:31:ec:c1:c3:89:4d:f9:35:fb:3b:
3b:5c:8d:19:f8:7f:b6:62:20:53:69:11:43:d8:82:b8:48:ff:
24:61:f5:82:3d:9d:57:ca:38:b9:e8:2c:38:ec:c5:c5:2d:e3:
01:3a:02:fe:03:a8:95:1c:d9:09:11:96:9b:3b:b9:8c:10:cd:
6d:d3:c1:b9:0c:67:25:6e:ef:2d:33:b6:14:e7:94:55:95:52:
a0:23:51:68:c8:b5:52:43:12:fc:cc:3c:78:9d:40:b9:5d:d9:
27:12:da:cf:cf:a7:4a:b9:ff:41:c4:e9:ac:f8:cf:73:b2:50:
3a:2a:f8:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAo9NsNMp87T0Uzp8W43OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl
MTJhOWIwHhcNMjYwOTI0MjAwMTQ5WhcNMjYwOTI1MjAwMTQ5WjAzMTEwLwYDVQQD
EygzMjg4NWRiOTY4ZGY1NjZiODE2MzVhODkxZTNhMGE1M2U4MDJjOTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LeGFh2gdmR4Kohc09BYnpPHZlr+
bCWobLkXo6cNOAnkuBos0NdhtIR06wde1MuZMd4G9tBXciB6M+ft+qBJkRF3v9rX
/1D/V0vInVDkhTdtsd1iOra+XnoONSrSeQ70R1mHZew/ZQjq0vrUJ1p2bEd/MrNA
P+kaeBc3w1qCeALdT9KWRyHd3Ps08wZdyknR+5R2deqfrlPZyh06OG/ac9P2/Bn1
pheaBDa+0nRnRxL/UQfs39eqffENG6XzyKrncpgVN54A4fDautTTMiICUisADrHA
07OxDUQHPoSqxD3Qsu+KJZ4Nk0kkzuBfC/XMgiAxWJjDCf4fwMq421sxBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKIXblo31ZrgWNaiR46ClPoAskGMB8GA1UdIwQY
MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt
NDQ2MDE5OTY2YTE5LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5
LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmNHR1kW
oQpSJy9fcGCfpbmtalQN9XdxHqZl7ZYi8az/BlAyLo1+tAaP2vKgx8CkgWD7sTXH
CzAuXPxync4f8lMBBYbeZ9JaNsv6ObonK4EOgJvW3Ryp57sCKgXpxly1Gn8XpfG4
HDGY/nKF8Y9J/qwHYtuQ6d/z+Ze5skHMAfUmluBQgL0x7MHDiU35Nfs7O1yNGfh/
tmIgU2kRQ9iCuEj/JGH1gj2dV8o4uegsOOzFxS3jAToC/gOolRzZCRGWmzu5jBDN
bdPBuQxnJW7vLTO2FOeUVZVSoCNRaMi1UkMS/Mw8eJ1AuV3ZJxLaz8+nSrn/QcTp
rPjPc7JQOir4BQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:52:50 2026 by rpki-client