
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json)
Hash identifier: /Xm+WIwDSyYBmFEVFf/a+iv9ZsML1qGuig15MzZOMKw=
Subject key identifier: 51:3C:CA:0B:39:64:99:D6:75:F4:94:29:6A:77:50:D6:26:98:20:8D
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 019E1CEBEA48259B675EECA2E0674FFBAF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
Manifest number: 1942
Signing time: Tue 12 May 2026 16:01:23 +0000
Manifest this update: Tue 12 May 2026 16:01:23 +0000
Manifest next update: Wed 13 May 2026 16:01:23 +0000
Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=)
2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: mlnHmGbmFJzHD8AJ/LBEERmRRKhPmDRCO8PqdCp+ktA=)
3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=)
4: 6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa (hash: Lpm2qdKvSHv1n64+iddb1tvoxMF6Y4LQAfrzqafISLM=)
5: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=)
6: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=)
7: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=)
8: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=)
9: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=)
10: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=)
11: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=)
12: tldfbdi2KX3t4BcCVx6VGGK3iyo.roa (hash: Fi4d+ISfAotrj39E0racwhFRU+l4o+QEW3BSrZlvaV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:ea:48:25:9b:67:5e:ec:a2:e0:67:4f:fb:af:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: May 12 16:01:23 2026 GMT
Not After : May 13 16:01:23 2026 GMT
Subject: CN=513cca0b396499d675f494296a7750d62698208d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:8f:05:32:51:67:57:7a:c0:8e:ed:d8:51:
54:d0:56:1d:13:ea:40:79:47:d4:c3:e4:16:dd:26:
b5:b4:58:a7:40:47:bf:8a:76:b1:f6:3e:4a:22:4b:
8a:83:6f:9c:28:1f:88:96:e3:b0:7e:df:47:a5:d8:
1a:a6:c3:f3:57:9a:43:13:ac:90:a3:e5:73:f4:23:
fe:7a:e3:b9:05:e3:af:fa:27:ed:f3:55:67:be:03:
bb:2c:89:36:87:3e:f7:b2:47:32:02:c0:0a:7b:f5:
87:61:d2:47:33:a8:74:cb:b5:bf:b1:dc:aa:58:fe:
c6:0d:77:ab:63:9e:91:63:df:f8:b8:89:dd:5a:b1:
9b:0c:90:89:fa:93:9e:a1:72:bd:f2:fe:9e:e0:b6:
51:b7:7a:f1:ac:1e:eb:db:7f:63:64:34:dd:52:c3:
18:4c:95:b9:32:02:87:7e:ed:d9:71:fc:5e:ea:62:
f6:ef:b8:91:e5:2c:98:01:91:bd:c7:bc:81:8e:d3:
39:c9:4e:4a:60:f5:a6:b9:38:c8:3e:da:b9:46:05:
3c:e6:59:64:e0:fb:1c:e1:dc:0e:b6:b4:e2:f4:36:
33:ce:85:e6:be:7d:d6:fb:52:99:fc:a5:e6:80:e7:
05:ec:5d:49:f7:fd:33:c8:69:fe:63:2a:79:f9:bd:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3C:CA:0B:39:64:99:D6:75:F4:94:29:6A:77:50:D6:26:98:20:8D
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:30:40:86:15:1d:c1:37:79:04:14:54:a2:18:e3:e5:05:ac:
4e:02:ad:f5:2e:0f:7e:82:91:1f:f9:f6:52:9e:ef:d0:e9:69:
43:74:2a:81:a2:2c:3a:c6:88:bf:a7:d1:66:50:2f:52:e4:4e:
62:f3:c7:dc:e4:c7:fe:97:b2:1f:ef:04:73:79:04:eb:1d:26:
11:34:a2:01:92:17:0e:39:77:00:60:42:c4:75:99:dc:76:53:
05:04:9f:06:f1:af:f7:d8:b2:7b:58:37:49:19:77:1c:63:7a:
30:db:56:67:7f:78:fa:3a:7f:61:92:81:c6:7b:45:e3:6c:3e:
46:83:ca:5f:dd:ea:b6:1d:54:77:89:b8:de:f3:61:02:23:f6:
bb:6e:8a:76:21:d5:e4:1b:0b:61:6c:4c:10:f7:38:89:f6:e1:
c8:51:64:92:7d:c5:ef:63:8f:47:06:74:72:81:05:85:5b:05:
c5:36:66:ab:83:14:ec:5c:66:5f:b1:e0:e9:6c:8e:45:20:9b:
c5:dc:58:ab:35:f6:74:ec:d7:70:e8:63:f2:75:2e:2b:18:9b:
b6:ec:db:c7:8b:da:6f:4a:b3:aa:76:2b:10:5b:fc:58:f7:70:
46:7e:ec:7c:4e:b3:04:3a:a0:61:38:c5:25:b1:25:af:b3:fa:
c6:98:61:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6+pIJZtnXuyi4GdP+69tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj
YjJiNzMwHhcNMjYwNTEyMTYwMTIzWhcNMjYwNTEzMTYwMTIzWjAzMTEwLwYDVQQD
Eyg1MTNjY2EwYjM5NjQ5OWQ2NzVmNDk0Mjk2YTc3NTBkNjI2OTgyMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHePBTJRZ1d6wI7t2FFU0FYdE+pA
eUfUw+QW3Sa1tFinQEe/inax9j5KIkuKg2+cKB+IluOwft9HpdgapsPzV5pDE6yQ
o+Vz9CP+euO5BeOv+ift81VnvgO7LIk2hz73skcyAsAKe/WHYdJHM6h0y7W/sdyq
WP7GDXerY56RY9/4uIndWrGbDJCJ+pOeoXK98v6e4LZRt3rxrB7r239jZDTdUsMY
TJW5MgKHfu3Zcfxe6mL277iR5SyYAZG9x7yBjtM5yU5KYPWmuTjIPtq5RgU85llk
4Psc4dwOtrTi9DYzzoXmvn3W+1KZ/KXmgOcF7F1J9/0zyGn+Yyp5+b1zGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFE8ygs5ZJnWdfSUKWp3UNYmmCCNMB8GA1UdIwQY
MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt
MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi
LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjBAhhUd
wTd5BBRUohjj5QWsTgKt9S4PfoKRH/n2Up7v0OlpQ3QqgaIsOsaIv6fRZlAvUuRO
YvPH3OTH/peyH+8Ec3kE6x0mETSiAZIXDjl3AGBCxHWZ3HZTBQSfBvGv99iye1g3
SRl3HGN6MNtWZ394+jp/YZKBxntF42w+RoPKX93qth1Ud4m43vNhAiP2u26KdiHV
5BsLYWxMEPc4ifbhyFFkkn3F72OPRwZ0coEFhVsFxTZmq4MU7FxmX7Hg6WyORSCb
xdxYqzX2dOzXcOhj8nUuKxibtuzbx4vab0qzqnYrEFv8WPdwRn7sfE6zBDqgYTjF
JbElr7P6xphhtw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:27:51 2026 by rpki-client