
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json)
Hash identifier: IW+Vkp5425F8bbiMWxfDx5CPI8drx9Uh5B2Hm+DPddc=
Subject key identifier: 2A:F9:38:86:60:88:62:E6:97:69:0C:CF:EC:3F:53:3E:D7:CD:B1:E1
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 01A1DE7057244DB846E9F1657BA158CB11F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
Manifest number: 06D2
Signing time: Sun 15 Nov 2026 09:01:06 +0000
Manifest this update: Sun 15 Nov 2026 09:01:06 +0000
Manifest next update: Mon 16 Nov 2026 09:01:06 +0000
Files and hashes: 1: 0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa (hash: XeB6K6T8p6c7RwUL3urLh05fa1KeuyMXlU3sgTg6kwI=)
2: 1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa (hash: h7CqqSl2LQjJmhCLF1MeDbbfhgUi7N6nFb/MApYSj04=)
3: 3gai81UGgfLPbQftciy3jGMkOwI.roa (hash: kiaWDVp8FEgRP18QSL61NeSbPNIL/KFNeSuP3Gkl88Q=)
4: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: 956KTzEaJpcgtWt/kebKHgyEHsNpHpcw6z0AX4EHlzE=)
5: C6uUnb-GcnQfqIvL7gX32SouFUA.roa (hash: W8gXCQVnHQZj4Fig+/xRtixgdI9dMwYVfKpFVE38sls=)
6: Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa (hash: qthe4k3qdM7snNafkTyRsJRCRgLD006FLSrfqpvtf/M=)
7: P2DOHQZk6uadyNsFYKTvp0Yljns.roa (hash: drWm8UAEyYp0gk5pD0pZZGlNfBy4kmJrj0xpKvuccbI=)
8: dUz1_BGuEwa1si0sC79DuRXSTMw.roa (hash: EggvRKKO8J9fQom0RkmSKJQOGfA94V2BXYRDmutG/IA=)
9: jG8u0DdMeVDnzAs9ajzk41GxjYI.roa (hash: 2i9+DbG6rnpNrbDbrTa+vcvNqwfsERMCoNQAt/YdO9A=)
10: pMSYP5P8y8eLfNyDEeXV3zc-nps.roa (hash: enJ6YCYyQ+/wl2mffuOqzFyRpZKc2xjCWdqck8SgcXI=)
11: pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa (hash: 2qg2UMxY9Ne99nZ+znUrMGap65SST+L3iSUILMH/2YQ=)
12: uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa (hash: 5GA0c289K1eM0975vFreXvBAvts4XCEq2R0BlZHe6C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:57:24:4d:b8:46:e9:f1:65:7b:a1:58:cb:11:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Nov 15 09:01:06 2026 GMT
Not After : Nov 16 09:01:06 2026 GMT
Subject: CN=2af93886608862e697690ccfec3f533ed7cdb1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:ef:17:c8:d2:f3:49:3c:f7:76:5f:fb:a2:
9c:0d:c7:5f:86:2b:86:89:15:c6:28:de:33:bb:f5:
28:e4:6f:1c:c1:8b:f6:8b:4e:b9:a5:39:5c:7c:57:
f9:50:af:81:d0:7f:3f:96:9d:1a:4c:a5:4f:8d:2a:
48:a7:ad:69:61:3d:71:61:e4:36:7b:4a:f8:fb:fd:
94:d5:48:d4:77:aa:df:17:2f:c3:5a:09:a9:31:21:
c5:e6:2a:4d:59:df:02:78:b9:60:a1:2e:6c:ae:a2:
9f:af:ae:b6:39:3f:64:94:41:45:91:f9:77:94:c6:
ea:89:64:a5:3e:b3:c8:55:d4:2c:97:cb:6f:c8:b8:
84:38:a1:65:aa:3f:f3:e5:58:e6:89:62:ad:95:e7:
47:40:aa:47:c8:01:40:96:79:05:1f:eb:a7:ac:06:
b6:aa:cb:ab:ee:31:b3:d5:76:49:83:44:0b:55:4f:
b2:87:53:55:29:82:8f:dd:bb:b0:55:b4:81:de:9c:
60:eb:14:f2:a7:13:60:d4:04:70:f9:d0:8d:2d:b0:
21:dd:ce:41:24:74:1c:aa:09:1a:2c:0e:57:b3:a9:
08:78:ca:32:fc:e5:60:eb:31:79:79:98:f1:a5:df:
80:85:5c:9c:51:57:70:a9:83:98:d4:df:4a:10:b5:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F9:38:86:60:88:62:E6:97:69:0C:CF:EC:3F:53:3E:D7:CD:B1:E1
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e9:3e:16:82:22:3b:a1:03:b3:0a:5e:af:3d:c6:4d:39:f7:
e9:0f:1a:3e:2f:e1:e1:54:0e:00:02:49:74:03:9d:b5:01:70:
ac:c5:5e:a0:73:93:36:23:aa:9c:db:4c:67:54:53:e0:c3:08:
70:05:05:ba:8c:3f:1b:a6:fe:01:2c:62:da:03:7c:10:9c:18:
ab:59:d0:ea:89:ae:32:a9:09:d4:ba:8e:cd:de:9a:89:64:11:
80:06:ca:55:9b:6d:7d:e5:3a:cf:cc:ed:32:23:cb:c9:29:a2:
ca:a8:30:42:11:13:69:6d:ca:78:6a:78:c5:62:ac:c7:e9:37:
48:06:b7:57:5e:f7:8c:b8:5c:6f:e0:f6:7a:bc:30:df:74:ae:
62:2d:14:b3:ea:26:ae:91:f4:ba:b6:b0:47:4a:d8:f9:79:04:
80:a2:76:73:a0:07:ec:3a:5e:07:c3:43:3c:db:b1:fe:43:8c:
60:5d:15:1e:61:65:d5:e6:c4:6c:1c:58:f7:56:b4:37:dd:68:
f6:8c:70:13:f7:3a:80:ef:20:a9:d4:25:1b:6a:02:41:24:41:
15:03:ea:15:71:9a:ca:c2:b6:05:f6:45:6f:a2:6d:b8:46:9a:
f4:55:06:4e:62:3c:78:17:57:da:b5:d9:c6:cf:de:dd:aa:15:
67:8f:0d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:32:56 2026 by rpki-client