
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
File: 4wzJQptjOC6bFxTSGzyW0uXr4lc.mft (raw, json)
Hash identifier: fQihHVaiRmS5e7NHET+VGb0LpGxla1f1DMSr19XjNPk=
Subject key identifier: 3A:F0:FB:96:D3:AB:75:94:6E:97:21:8D:86:0F:8D:10:73:D9:34:D5
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 01A0CEC888FF71FF3C564C77DE3B6562B8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
Manifest number: 1A7D
Signing time: Wed 23 Sep 2026 15:00:43 +0000
Manifest this update: Wed 23 Sep 2026 15:00:43 +0000
Manifest next update: Thu 24 Sep 2026 15:00:43 +0000
Files and hashes: 1: 1hUS0dgYuOKagKuRYnGRSU6mdO4.roa (hash: wgVw1wbgU61hnugYMEVTiyojcBCYeUAd4AGAHpCyW28=)
2: 2hajvV8gK-m59BYU1-dZQrvoGOU.roa (hash: akWetgY85iiMSrn15VPNa6Tn/6+J6UK1hNE5J48ERz8=)
3: 4wzJQptjOC6bFxTSGzyW0uXr4lc.crl (hash: j54tWf31FQ/+FiCCvucjVOJ25xWT+bJ0XtFZYmYmHmA=)
4: 5hx2PgGlsoHU52DnoY5z8nDA6Uc.roa (hash: V6FRtdQair4Jd18FQhevQfbc1XrlHcZDfofcJOEH238=)
5: 5jRHAAz_hj8a7OP44v7mWLCpLIg.roa (hash: M9wN8baVpSc5b65dc6iAke2qV/7ywF4aCA4G87mYdOU=)
6: 7mNPzDQUy4TWk6yVcvwp5gn92PY.roa (hash: wX/s845m+j+aefEHx+Ug2JNMpDWqfvvDBGuvcQGJjF8=)
7: AdZzJXVjU4uhQNVuxwK1-7uDINw.roa (hash: WH7H7jpla88i3rn0oGPohqLaC7h+h5aP6N2rE4fb5+k=)
8: AkvQldLQY58hrMuy5JJUpN5DWNI.roa (hash: afG9+wD4QhYrt7Kw2LgpaOdHZKEw2Hl0r195C8kvfAc=)
9: BJazlwxqEmJsYMjVhmIaDtQC8e8.roa (hash: 2ZK9c4vofcWeUv3b/fecvK2nc6pClocYLtMjG/t3Axs=)
10: GwlPBnPafwNESxPOmYchrobp9kc.roa (hash: 2bg5Zps/9Nl20iDTOVJMixlxSv+z0s4P6wxJpe1+ojE=)
11: MENCP9vV-DN8rTiaMKzCj_ZJHTQ.roa (hash: rbtpAaAkeOS9IFdDYYmlnqwTq2cxGgERFnXxmCVRJEA=)
12: PlrUxGnUEiHdEwXChXkr73zDzkg.roa (hash: EMehwEJ8sMbKPMfB13BN85G2PxwvK02T0PjHEVbc+3c=)
13: RUpO7YzO4Q4u7emkeEttJ-upFss.roa (hash: 4gXmhPhFM6wlFrTW4TyF6zeN7qnZYJUp2trDabq3weE=)
14: TBBV9kVE8yxlnA5LtUYB4k1H7Ck.roa (hash: hSK+h3pQm5k7j10oe3W2NOK+/IyzkDBNICSGH9KMJ6s=)
15: UqWiGwSKWqyJRdGttOAL9pdFqF0.roa (hash: EcAPWWCFosb1c66v05znaxCwziIYlAJXvCZC4C9hAJM=)
16: WBrHOxJFEJMOD-RQR2LqsWU2gfU.roa (hash: 82EurPdNuP1c5NP1AAN5UKQ8eqhgLDwwseGx0U4immw=)
17: YE43DFlSdGIi5Y5V0q6Dcu3R1jo.roa (hash: 7y13WjFIQev9f7bZV98y9KEB0ps1yt+8qhRlRU3ZvPA=)
18: _pmSmEyGoFs3fpqzGtBjfXV-fa8.roa (hash: fW2hww6BoaOymLlW23CIMa7uBnEa/2LTaq/FpjqoNLI=)
19: eEcQktLlsEWr1Q1sZ7Bgl-t_xfg.roa (hash: 3Az08ESnXLCW18L3NJVhsweQ1FstJelwkdv9JOzRZ3Y=)
20: m7iwatMXsXjWk65KbnwzYMYe9Jc.roa (hash: Pztt+Fk8+0WLZVKTeBTXG8cVsCcLHqrpi4CgocNceUI=)
21: vjlNS9sVhIyqiR3gMRLX2vUoWIA.roa (hash: wh/14x7K5xZ+wn7kq4tAZCLLRZIq3uwLoPywgg8maMw=)
22: vmQB5rb8U8ZSKWEOjbzFrnBc8MQ.roa (hash: I6XTBHfwaQQIOTboVRUtz1BJpRM00zCr9ZjaQJkslfg=)
23: wcKXCZWW_WrMj-H0vskgHgbK58g.roa (hash: TD379ppG8Ut76tU11pZP2K3s8S4pqHUKncAJlr7fy8Q=)
24: yAUJNYcU_3Fdm2A-g9BDYhobeMY.roa (hash: MAEY7tBraubtKoodWTH2DPA+SuxElYKFE3cdaGB9ZX4=)
25: zvVYEhGaUBI92FKcl0-d5m_pOTw.roa (hash: P4ADjECiLkZPgfWh/PQnaPWZWlCx25ucl7Lz3XB5G/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:88:ff:71:ff:3c:56:4c:77:de:3b:65:62:b8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Sep 23 15:00:43 2026 GMT
Not After : Sep 24 15:00:43 2026 GMT
Subject: CN=3af0fb96d3ab75946e97218d860f8d1073d934d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:29:3b:72:b0:e4:85:8a:43:b6:0a:bd:12:
8b:dd:6a:e2:7d:64:06:66:fb:60:26:7d:86:b9:2f:
05:ce:3e:70:10:09:51:3a:d9:1c:2a:ee:95:ce:a8:
1b:fe:39:8c:00:87:8a:c6:51:d3:0d:f5:60:f9:13:
97:61:f5:60:d6:8e:f9:13:c2:01:29:2f:b2:33:6d:
aa:69:73:8e:41:10:4e:c2:01:92:3f:a1:14:dc:11:
82:16:5e:b0:11:6a:45:d0:17:01:45:e2:45:e3:ec:
f7:48:e4:6f:76:1a:17:83:f9:b0:47:39:ce:ad:32:
f4:8c:43:c8:d8:31:0d:60:70:62:98:5a:68:d8:bd:
4d:2d:19:a3:63:31:ee:91:fe:91:f6:0c:38:e0:68:
30:5b:9b:09:7a:31:87:0b:2c:cd:2a:fc:9a:ee:fd:
22:db:3d:82:73:a3:2b:53:b3:91:9e:ef:b7:a6:fb:
3c:d4:ec:c7:54:76:d9:d0:52:e3:f7:90:ae:6b:64:
31:be:06:a3:d8:56:9c:03:e3:f1:77:58:b1:71:88:
ca:96:c9:6a:d5:75:8c:d4:1f:41:c6:ec:3f:15:d1:
2e:97:3b:e2:1c:3e:31:e7:0c:52:10:0d:e8:72:ef:
96:9d:d7:88:2b:64:11:7b:d2:be:a3:df:18:33:c3:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F0:FB:96:D3:AB:75:94:6E:97:21:8D:86:0F:8D:10:73:D9:34:D5
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a7:37:dc:b3:8e:f8:71:da:48:cd:b6:13:19:75:44:cc:71:
e2:a8:71:ee:f9:fe:ab:43:b9:2d:71:85:ca:90:01:ef:80:9f:
44:f9:d2:1f:e3:f9:76:80:df:c1:c0:1c:1c:31:cc:2a:3b:80:
b1:15:1f:a5:b6:f5:c9:d4:08:63:4a:91:4b:86:b1:cd:d9:66:
f0:76:7d:d2:b0:87:f9:5a:9f:65:a4:bd:4e:44:38:3e:32:c6:
9d:e6:9c:56:ea:d7:8e:e7:b2:da:d4:99:0d:97:21:c0:24:15:
3a:a8:4c:01:4c:2a:42:9d:fb:c6:74:62:f6:12:96:23:01:59:
2a:93:b4:65:11:dd:2f:f8:27:b2:4b:d0:af:bb:18:56:f4:74:
81:1d:20:11:23:40:fd:4a:40:dd:69:bd:48:5b:58:51:34:4f:
82:61:92:8f:b3:cd:39:16:69:33:a0:15:0d:19:e1:11:fa:61:
8e:80:ea:37:aa:aa:33:ff:da:a1:52:f6:e1:6a:dd:0f:76:5e:
37:ff:ff:32:f9:99:85:d2:49:76:49:09:82:fd:93:be:6b:d5:
94:24:51:8e:e1:50:43:1d:5a:df:ae:56:d3:9c:37:03:56:af:
a0:51:59:b2:0f:70:d2:7d:1f:d6:62:d0:c8:65:8b:12:01:d9:
f8:31:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:36:47 2026 by rpki-client