
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json)
Hash identifier: eVoCDxlT6kKhfat0a5SBnG1bqC6KQccV1CnliOgEr/c=
Subject key identifier: B9:26:D0:70:3A:57:AF:BA:BA:C0:29:86:96:86:90:93:93:C7:0D:9B
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 019E1C0FAC3833F2AC1DE6F45C36E17F7940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
Manifest number: 1930
Signing time: Tue 12 May 2026 12:00:49 +0000
Manifest this update: Tue 12 May 2026 12:00:49 +0000
Manifest next update: Wed 13 May 2026 12:00:49 +0000
Files and hashes: 1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: 9HvtaRjURRb9BCDOY0tgGbton5Uu1acVe2PeM1MkWs8=)
2: 6tTmYQwXOKfIx8EFjvxOkACOgVE.asa (hash: B+RAPGXA/BvL3QEc86FbnID2OOj7wYJWGGhX0NgqKgw=)
3: H6apiE0r9rOHvwzUANUDplSJSTM.roa (hash: cqjpgcUWiCJ8i4KpFtLhuI6KYkP0u+mdUggey1II1u8=)
4: HO--5wVYjTks1d4pGuEUndfhIc8.roa (hash: PSZ01mmnd3IXqRjRDT7Afa21Y0Y9+VVQ6A0uP0yE5t4=)
5: KVNUqCsXQcZgUooNu9UzKtAuOCM.roa (hash: 2RC1IFuUFIVH05omXlQAScQzGAEg4Bdnqsce4idbrQE=)
6: MW9IWiMaMbGWFIKAeGiIeFNoSuk.roa (hash: WXFlau1tw1wJE2NKxIsomrLjPJJN929dyuhMW8ngWzA=)
7: MdU1TDg6gPzzC5Jls0YI4g9dlJY.roa (hash: j2NCQtDtoHkREqMeNzVs0PKFMT/ogTJaPYMRxR3JZtM=)
8: T-DUSJ-O8JuK2PTgLk1errJO3_0.roa (hash: gJp14x3RVojW4Suzi+mnaQxUdouo4FmMOXfOj5Yct9k=)
9: ZHbHMoVLkFBwhZlfsyeyMo-r1YI.roa (hash: uDFD5MRDq12e9FrZ9TcR4muF3bF0UyIZh3ZvvCBU2ko=)
10: ZxZQikqsaz0OBgAuk40P1B9mOf4.roa (hash: +lV4F2CcosnXBXnETAHYkbM6uZLP9AqAiX7Djks3Lcg=)
11: iEeEp42GZdk24J_XhsWfZczs8bI.roa (hash: Es9r36V7+YULS9141hzfnZoXbLZeW7YOudDWcJDuqPo=)
12: iFaMxfToISMhuIOtnklJbKH8sU0.roa (hash: kU5eLBTCsLrlHtahyO4pMWGlPVbZxhPgtGU2m2KhHJU=)
13: kivoHyrrTapcSTu_dcsRevtd1qU.roa (hash: vlUy1Pp06OgEmxAK5wPWEB8oYerqdlsGZx57sDlsb/I=)
14: knMCjsMKq8boFlcM4TD-NB1mee0.roa (hash: 5pXrohpLzHpy5wR5NL0Pk7xascagMMWfyt+Jyy021+I=)
15: nBm950xJAm9pONVZhHt0wVFEq7Y.roa (hash: ZyCH9JBRPWP0WR4LL51Jbb1msIvVHDWA7bezxMkIVWY=)
16: orZjZ-bLi4QKzxMYS8aOyD5DwHw.roa (hash: j0NxewdNRbQ+iT6xBmN+n5xKVYa/xRMyvSC57UkHgro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:ac:38:33:f2:ac:1d:e6:f4:5c:36:e1:7f:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: May 12 12:00:49 2026 GMT
Not After : May 13 12:00:49 2026 GMT
Subject: CN=b926d0703a57afbabac029869686909393c70d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:61:3b:01:79:72:e5:2d:53:a4:41:71:c1:
41:25:c0:8f:6f:b2:dc:fe:0c:4e:51:28:48:99:01:
4c:2a:7f:05:a4:81:b2:85:5e:77:52:cc:0c:54:ff:
86:6b:f7:27:92:2f:0b:77:b9:3e:9e:0a:42:44:7c:
b0:11:4c:cc:dc:a3:2f:99:a7:ed:ab:fe:7c:48:df:
5c:1b:9a:f4:e8:85:0c:90:0d:08:26:de:e5:c6:d0:
69:11:7f:6c:4e:01:d8:02:76:57:42:19:80:fe:8e:
d0:ac:9e:25:48:f3:4a:4b:ee:18:73:b5:dd:c6:c2:
8d:e2:b3:96:ce:59:96:67:4b:e5:b4:ad:3b:b4:82:
61:9c:2b:2b:34:db:49:24:f9:11:75:c3:ee:35:e5:
99:64:2d:44:50:8c:a1:bf:c2:36:38:d8:1c:f9:15:
07:fa:71:f7:c0:52:00:4a:77:ba:99:17:4e:a4:e3:
74:e4:c4:5f:ce:a8:a3:3a:b9:a9:b2:40:16:0a:53:
23:ae:78:b7:aa:98:df:e1:28:3a:b3:29:83:75:68:
dc:b1:71:c6:91:81:95:87:51:b5:10:58:dc:9a:0f:
a2:7f:a6:b0:20:6c:e0:ca:95:27:e8:e5:9b:22:2d:
19:13:bb:46:aa:41:43:e8:3f:b3:9f:4e:12:7e:7d:
b4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:26:D0:70:3A:57:AF:BA:BA:C0:29:86:96:86:90:93:93:C7:0D:9B
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9c:1d:83:80:4d:04:dd:85:ae:48:46:66:e4:b2:26:25:34:
93:21:bf:c9:89:5e:c2:9b:17:6a:13:53:f9:15:68:a2:bc:20:
6e:10:fe:96:2d:a8:1b:c6:eb:81:11:b9:d3:c2:f9:5a:8a:28:
85:3a:12:0b:d2:91:26:f8:2e:ec:98:3b:bc:c4:03:e6:ea:7d:
e0:b2:10:81:6a:af:c4:bc:0e:8d:aa:4a:34:eb:39:dc:df:0a:
57:91:d9:50:57:66:18:77:6f:68:78:49:51:8a:af:f8:c7:c5:
44:43:16:ca:11:07:ab:64:30:b4:f2:da:71:fd:cb:7a:4e:f0:
bc:aa:71:ec:46:4f:f4:fd:b2:3c:a8:43:75:c0:94:8e:c8:a1:
0b:2c:e0:02:92:63:d3:04:4b:f3:d7:8a:10:1b:b9:c0:18:5b:
04:89:fb:5b:98:82:78:bb:1b:68:2a:92:e2:d0:63:33:fe:41:
fa:0a:71:9f:c6:0e:78:f9:c3:d5:fe:48:b8:e1:03:5c:4e:79:
f9:d1:d8:68:3e:b1:95:c3:18:21:70:30:7b:d3:ef:70:48:75:
02:41:a8:9b:62:b5:43:fe:a8:50:74:81:90:44:84:70:7a:3c:
78:0e:78:7b:e8:90:cb:c5:b3:66:7f:39:84:c5:65:9d:04:b9:
ac:17:f4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:18 2026 by rpki-client