
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier: oAzToFzRyys9S7WcPo4eeCYLcn76hsIT4iTYKRwEei0=
Subject key identifier: 68:C8:81:E0:D9:AA:BB:60:AA:86:16:8B:1D:49:7A:2C:74:83:96:69
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial: 01A0E17451403F360FEB565515CCCC1836E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number: 1AE1
Signing time: Sun 27 Sep 2026 06:01:31 +0000
Manifest this update: Sun 27 Sep 2026 06:01:31 +0000
Manifest next update: Mon 28 Sep 2026 06:01:31 +0000
Files and hashes: 1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: yfiuTqLO7kjfi3qMb1soVEwZ6GVNo5YTSINiKydzVOg=)
2: 6GUIWwZxGI0_11LUAF2nyD6ApTM.asa (hash: o9hRLFlhcdetNherJ5nziP+ejI2p5Hk/AOSB3fzCgR8=)
3: CyXEon0EjqXOHr8IeWjEVFpMffs.roa (hash: 61FTseLqfGHD+d4UC74A9kaSSpCsOAMcXitG3hvPp+Y=)
4: JMUe3al0pklathcu47XaPUqkjyY.roa (hash: WrIFwPH2vXkQmPfNJ4EO/lLH8xEpJfsA80i818mNAGc=)
5: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=)
6: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=)
7: ccBq--nhlrlj-SQFFud3LvSjHcs.roa (hash: xXhVmuwZaVq/u5W4va4FychwRtt+dYkphzF8S3KVfQI=)
8: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=)
9: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=)
10: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:51:40:3f:36:0f:eb:56:55:15:cc:cc:18:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Validity
Not Before: Sep 27 06:01:31 2026 GMT
Not After : Sep 28 06:01:31 2026 GMT
Subject: CN=68c881e0d9aabb60aa86168b1d497a2c74839669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:62:a2:b1:e4:11:77:af:04:46:9d:73:18:
13:0e:f2:6d:d3:85:1d:5e:33:80:57:ab:c5:a6:58:
2b:d3:03:c4:ff:76:ad:58:ba:35:e2:38:0c:50:78:
dd:48:ca:4b:1a:c0:2b:e1:b6:59:ab:3a:a1:5d:54:
ab:e8:da:13:51:b2:35:ae:79:a1:77:2f:c1:f9:d4:
2d:81:3e:f5:c5:7b:a7:bc:51:b9:68:8f:49:d3:8c:
c3:21:8f:7a:23:9d:b2:de:98:b9:ad:e2:7d:03:ec:
6b:a6:e5:24:6f:82:c3:f5:4a:e1:27:fd:cf:e1:0d:
36:d8:08:f7:9e:24:60:cf:b4:05:49:f7:f0:04:79:
70:cd:de:56:a1:b5:c0:44:ef:8b:03:d6:23:0c:10:
70:4e:9a:82:61:14:27:ca:b1:8a:eb:51:13:9c:be:
8e:cb:66:3a:f9:26:bc:06:02:e5:81:73:4f:3d:78:
67:86:78:f1:14:ea:fe:f0:34:44:e4:a7:8a:39:d8:
95:a0:60:43:ba:ac:3d:f3:1a:c5:f0:da:cb:18:7d:
90:8f:d5:37:c6:2d:04:bd:73:4b:76:7d:b5:76:01:
f0:cd:34:04:b3:29:08:24:b3:26:a9:d1:cd:1f:16:
8c:a5:98:e1:23:e2:1a:f7:7d:ff:29:ee:63:59:b8:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C8:81:E0:D9:AA:BB:60:AA:86:16:8B:1D:49:7A:2C:74:83:96:69
X509v3 Authority Key Identifier:
keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:75:91:8e:89:56:1d:51:9d:a4:80:50:d3:53:d1:50:28:07:
20:25:70:d5:96:f7:95:6c:4d:8e:a9:e2:a5:53:03:a0:39:9f:
9b:06:d8:4e:8f:bc:2b:31:11:60:fa:7b:70:78:d5:b3:e3:66:
c0:32:3f:18:e4:f4:94:0b:6e:15:a5:2e:de:3d:f4:00:29:c1:
7d:1e:e3:f3:41:c3:a3:86:70:91:6d:3a:a1:60:e9:d4:64:e8:
c2:6c:e5:9e:6f:56:e1:2e:e4:2d:49:f6:77:14:95:3e:7b:c8:
b8:54:73:07:4b:eb:3e:5c:a1:d2:8b:71:67:9d:d8:45:14:c0:
9f:28:f5:77:b1:e1:da:94:0e:47:f7:c6:9a:0c:27:ef:9b:da:
c2:b4:cf:80:14:24:87:9a:10:29:ac:76:61:52:d7:8a:3f:66:
0b:e6:9f:9a:a7:6a:9d:6d:11:95:86:b3:54:b3:51:03:e1:6c:
88:30:ed:42:ac:91:09:89:5d:6a:10:ec:b4:b9:04:0f:0f:26:
59:fd:1d:a3:7a:ab:0f:42:d1:39:47:56:32:17:a0:fe:21:07:
5f:b9:43:92:d5:4a:7a:d9:5e:51:a0:1c:78:94:39:d2:a2:d4:
39:c5:6a:d8:01:14:14:d4:59:3d:28:5c:a9:ed:b8:b7:27:ca:
e6:27:98:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdFFAPzYP61ZVFczMGDbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3
MWJlZjQwHhcNMjYwOTI3MDYwMTMxWhcNMjYwOTI4MDYwMTMxWjAzMTEwLwYDVQQD
Eyg2OGM4ODFlMGQ5YWFiYjYwYWE4NjE2OGIxZDQ5N2EyYzc0ODM5NjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41RiorHkEXevBEadcxgTDvJt04Ud
XjOAV6vFplgr0wPE/3atWLo14jgMUHjdSMpLGsAr4bZZqzqhXVSr6NoTUbI1rnmh
dy/B+dQtgT71xXunvFG5aI9J04zDIY96I52y3pi5reJ9A+xrpuUkb4LD9UrhJ/3P
4Q022Aj3niRgz7QFSffwBHlwzd5WobXARO+LA9YjDBBwTpqCYRQnyrGK61ETnL6O
y2Y6+Sa8BgLlgXNPPXhnhnjxFOr+8DRE5KeKOdiVoGBDuqw98xrF8NrLGH2Qj9U3
xi0EvXNLdn21dgHwzTQEsykIJLMmqdHNHxaMpZjhI+Ia933/Ke5jWbiVNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjIgeDZqrtgqoYWix1Jeix0g5ZpMB8GA1UdIwQY
MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt
ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz
LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3WRjolW
HVGdpIBQ01PRUCgHICVw1Zb3lWxNjqnipVMDoDmfmwbYTo+8KzERYPp7cHjVs+Nm
wDI/GOT0lAtuFaUu3j30ACnBfR7j80HDo4ZwkW06oWDp1GTowmzlnm9W4S7kLUn2
dxSVPnvIuFRzB0vrPlyh0otxZ53YRRTAnyj1d7Hh2pQOR/fGmgwn75vawrTPgBQk
h5oQKax2YVLXij9mC+afmqdqnW0RlYazVLNRA+FsiDDtQqyRCYldahDstLkEDw8m
Wf0do3qrD0LROUdWMheg/iEHX7lDktVKetleUaAceJQ50qLUOcVq2AEUFNRZPShc
qe24tyfK5ieYvw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:20:42 2026 by rpki-client