
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json)
Hash identifier: QKqduxvGNenc+6DokhxCnRjEafbVKtr4khOUK5DXU6w=
Subject key identifier: 48:42:EE:D2:E5:E4:3F:64:98:17:41:A1:8A:65:F5:31:02:57:3C:83
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019F90FEDAFE6E61BC35D1EEF4DC7F487609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
Manifest number: 1AC9
Signing time: Thu 23 Jul 2026 22:00:49 +0000
Manifest this update: Thu 23 Jul 2026 22:00:49 +0000
Manifest next update: Fri 24 Jul 2026 22:00:49 +0000
Files and hashes: 1: 0r3kkbCIc2trczoA0tV0PpuHTqk.roa (hash: hYQwD9eKL8aadDbtj9scQfTVqsN0ThTdN4voLWbulpc=)
2: 1-HMehk4Z5593y_16dRGWIQyy-Ng.roa (hash: EurbSdpdbDWY2LP7kxCHMWSabQW2ttzuwZ+l6NbR48o=)
3: 7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa (hash: 0WZmcRa658Us5LFqpepkQ3ZD0Z3AX8LDSbJ/uzthFek=)
4: CDjWTyoS71DXASo2Nj7eHKZDgBU.roa (hash: 0MjLF8Ccc2qdY2KgDxvd+hMdzbz7ozx3zfAkryxvvg0=)
5: J1bOpzfz9N73oSFlFV1z4QDm-64.roa (hash: h6M5XtZ8RlW37k6FxTv2spT98MJgWMzY1tvdNHQE2Vg=)
6: KVv7_M50V2iyBxYsG_dQpH_S9tQ.roa (hash: RkhZYcx1K+qPGt8mNSXPpba3hYgNZEfnfscSk3pS5x0=)
7: KXN5i1ksyLJ3gWuszNVJ4lkPFkA.roa (hash: yrzgi/xgwBaka39UCK/DNXA3vvLMwfJcozcKOOGIcnk=)
8: KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa (hash: 7kkTNpurW7ovwPOEHHf7JVghG0bKfPeVVb6gJUM+74E=)
9: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=)
10: NRslGXwzqXLsPOGISDrIoXtcmqY.roa (hash: DEaiL5GBQA1ssRMigPA8Fc7/Qa4ewlIX8LGF5gSXnqI=)
11: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=)
12: Xk9NYhdXTr3rd3NYRXydtLgFRbs.roa (hash: 5i33Vv91iUeFK5+uzl8a/uVNcXnYM4QXT7Iz6UOmTNs=)
13: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=)
14: _-CNKE2_7z_kM89zZk_UMMjhAl8.roa (hash: Fyok2cPZyLmptoNn7yS8WruQ3n7BVYZFEv5nHH8YA4g=)
15: _yYeoQViTIjqsYE0h5QCAQRGd04.roa (hash: ZBg3y/n8GjKrQaC1IigA7ZREsnmFDIrXAnas9eg3WXo=)
16: a8icz_iV0I-bqil-bMRlOH1Nr5g.roa (hash: tNDWlSbeDLoMRL90ewXHPXUG9G9kPAmkJbfvaEeyj78=)
17: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: PwVizmF7N3XyZZbaNWLGFnumi5yVMqXSUjjAc7r9ZeM=)
18: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=)
19: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=)
20: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=)
21: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=)
22: x2-UOiQ1JkGjRhg5Y3BKO6HEghI.roa (hash: Sqa+wceVkaOOyPhxXULzb2svO17UJ0RHxLUOfuxIaDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:da:fe:6e:61:bc:35:d1:ee:f4:dc:7f:48:76:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 23 22:00:49 2026 GMT
Not After : Jul 24 22:00:49 2026 GMT
Subject: CN=4842eed2e5e43f64981741a18a65f53102573c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:9b:d2:e9:44:aa:d3:12:8c:f4:f2:91:52:
57:3e:32:f1:6c:64:f0:d7:7d:a6:79:1e:61:48:89:
42:a9:b3:a7:b0:07:55:e9:3b:e4:b2:2f:48:a2:da:
4c:70:c5:0f:ae:1b:6c:61:ec:00:2a:01:7c:14:16:
db:f8:61:34:77:63:a3:8d:b4:be:25:94:51:cf:0d:
68:ed:ef:51:1e:e4:d3:b4:a3:2a:5a:d5:89:db:ea:
5a:ea:1d:ac:f4:95:83:97:48:34:16:aa:a6:36:c9:
cb:cb:c3:48:bb:9c:08:1d:a5:d9:c6:dc:81:70:d5:
b1:94:96:7c:70:28:69:b1:8f:74:a7:cd:f2:c0:66:
09:eb:25:55:28:a2:82:6a:54:97:b6:1f:af:0a:c8:
74:3e:a5:28:e6:68:46:da:9c:bd:89:4e:4f:17:c4:
79:bb:51:c9:f6:50:2f:af:7b:f7:83:24:ef:fe:3b:
2d:d8:e4:b0:de:03:0d:6c:23:d3:3b:b5:13:74:40:
0d:55:3d:67:fe:a8:c1:f0:07:1f:5d:bd:8e:27:dc:
8a:0c:af:95:06:35:b7:b1:9e:80:48:e4:73:24:68:
df:61:2d:37:34:08:2f:1d:02:dc:fc:c5:7f:ec:54:
2b:a6:56:9b:a0:9e:8f:c4:20:85:29:66:0f:23:64:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:42:EE:D2:E5:E4:3F:64:98:17:41:A1:8A:65:F5:31:02:57:3C:83
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5a:dd:8b:1e:de:96:f0:95:27:c8:01:89:4e:6f:75:5f:df:
76:c7:c0:dc:ab:44:a7:5b:06:5b:b1:7d:78:5a:ce:d4:92:f2:
14:15:99:62:4b:fb:61:e2:f6:20:34:af:6a:c8:56:24:60:c6:
75:20:6b:2e:dc:59:f9:4d:3c:f3:09:aa:67:20:25:c2:f6:b8:
f5:29:c3:42:0a:b1:15:cf:e5:6b:86:e1:cb:d0:52:e3:a1:78:
9b:f5:6f:ac:0d:25:0f:66:88:93:6e:08:93:d5:e2:8a:64:66:
38:cc:33:ca:ad:f7:70:8d:68:22:e1:67:95:0b:04:44:a5:18:
3c:91:7d:73:da:db:0b:a0:1c:fb:c6:42:f7:e6:f4:18:7d:83:
eb:9f:60:24:76:1f:1f:47:2c:e1:54:1b:a0:24:4a:9a:7b:6a:
e5:d8:75:7f:21:66:73:38:27:ed:60:90:52:eb:af:17:4f:2c:
97:bd:8b:23:f7:4b:62:89:70:67:52:3e:1d:b3:fb:22:69:fe:
1d:fe:04:d1:2a:09:0d:7f:5a:50:93:f9:78:74:b2:36:b5:92:
24:9d:4d:27:e5:7b:ff:48:4a:42:19:29:95:9c:aa:b7:d7:4a:
5e:97:89:70:27:2e:65:e1:a5:37:0b:b2:7a:2d:d3:d4:68:b9:
e5:b6:fa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:52 2026 by rpki-client