
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json)
Hash identifier: 87C49m2AMWIyl43NUmdZuWf5Bfzz5JJ3ce84Gp5iyp0=
Subject key identifier: C6:FF:0C:2B:B7:15:C1:01:51:5B:53:E6:40:31:9B:83:71:9A:CF:FF
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 019E1F10C6E817C40DB1B4372C63B72142E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
Manifest number: 1617
Signing time: Wed 13 May 2026 02:00:53 +0000
Manifest this update: Wed 13 May 2026 02:00:53 +0000
Manifest next update: Thu 14 May 2026 02:00:53 +0000
Files and hashes: 1: 0PWfBn0oGldVFHP5tIF47j3zzAs.roa (hash: 0sM6Ze3gvOmQYlCu1oomU3dkg7xN6YhbGGDnKDWKSSQ=)
2: 2_JDrlEf39vL8qmUM9CaRXwOr04.roa (hash: /7e65G97+6p4mluseOQELP9OxF86iI75OQ+5Z/TQzmA=)
3: 5d874HtQy3_g6Lh42ATS1BQL16o.roa (hash: FFJNypVbDwx5p1OtRayAO1/xI3zEji2XKy7Oj/jRza0=)
4: 6NzUbUPfmG_2OYaxE5u0iljd-HM.roa (hash: GEVpwDXH3AnmmmYcwcQLhZ1oJzowlyvgSDom4fjBpAM=)
5: BVx20OvNIr_bjMiJlAuvJK99SH4.roa (hash: DO6SxTL8ZIDZlJLjGOfKoMzyvMaVazIOTTdETJq4hxI=)
6: DyhSqV4302w_Jd8C_oWX0mObDDc.roa (hash: XVB5wgNU/o6hHZ2aTWsuDvd3gUhS28oEwkGfS/KVZ7w=)
7: H9Xbs19Dof8eiG5lJjAhQV9WdWI.roa (hash: iXBhXfrYk+sqUaa89rfM9pApaz51gWzZlcef+RPdmsg=)
8: MSewK7b92JObaKeUrbrsAb5fWQk.roa (hash: sWACoQHb5c7UneFSMmjv5A00HKxYwU6xUqQ/8qlbIPE=)
9: NqUE_7vgG-i019hpuas3mtpVIf4.roa (hash: X2ZRbDZD/jel7nDnPIG6pqjl2LVgOhthOTW0hTf7CyA=)
10: ZBRiJj4yKjp6xE7hgkNq4cQdPLQ.roa (hash: 6GJHppVcWVXgDv6JkXYDCys38/Oyzd7ZRUn3j/wIDXU=)
11: eKfYhAdXZm4QBxrRp-Jb19IhjKA.roa (hash: IW6hoy0lnAYpEm6NvMoOrfkrhinHm5CYNAqE2SF2Y3g=)
12: ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa (hash: 6KJzsBOmWkWNjIPw+pN6XcIjmWVNJnyQyPCTB+CKohg=)
13: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: FaeL7iNE0imysGU0AAWZkRWJ1pX4hlbHXTLkhQl362Q=)
14: qaltJRhtOumKjVHwnWVUetcuLl8.roa (hash: BGZRfPeZLiJVX41F+zt+HW9khnF21BsLuwIzvIKpNck=)
15: slCMC5MetlL-UdrbcYVL6ivEaR8.roa (hash: L9bTvLMwoTmbYW/wx8YfNg5L/r3pNdrG0c8bxsu4UcE=)
16: tFL9wVh4WkSXocKu5wD0zL_9_m8.roa (hash: 6EEVwO12s7jfNRlLHqcR0cD6u3HIV2GLT5UfsJtR9iA=)
17: wGOi-hc1qunRv3mfhlCNuwgWq88.roa (hash: VEFeNu27Mw/MaO7I2TqKbQuNe8tJIgFySJ8plRBHBzM=)
18: zLZn5fjIxGUIeLJs3xz-C3OdAK8.roa (hash: RzZEQ/gzmc0sHqoihLaxMsPQLNBKCTKE0KmCQNShYdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:c6:e8:17:c4:0d:b1:b4:37:2c:63:b7:21:42:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: May 13 02:00:53 2026 GMT
Not After : May 14 02:00:53 2026 GMT
Subject: CN=c6ff0c2bb715c101515b53e640319b83719acfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:8b:fe:45:71:8a:8d:8d:e4:49:c6:4c:42:
c4:65:45:45:d3:63:39:e9:5f:6f:28:9f:f9:09:72:
60:3a:a2:23:4a:44:e0:5f:18:f3:9f:17:86:36:e0:
df:e4:2b:4f:d5:d3:22:ac:29:e8:8e:bb:76:f3:6d:
17:4e:88:83:d5:b9:ab:d2:5c:a2:f6:71:61:6c:d5:
95:1e:4b:9d:de:12:62:d7:dd:a3:14:9a:75:0a:7e:
96:15:3a:28:52:77:a0:77:a8:50:da:be:65:45:b6:
75:72:a4:4f:73:cc:2f:71:4e:4e:e0:1d:d6:a1:26:
61:56:20:24:81:bf:23:97:d2:37:ff:54:e3:9d:ad:
02:6e:05:7d:fe:01:d6:3d:fb:68:21:79:11:bc:6a:
8d:99:89:d7:99:68:dc:b7:d7:8a:f5:61:b2:09:71:
a5:b2:e2:ac:a6:9f:c6:06:06:dd:c2:6f:1b:2f:3b:
be:1a:86:f7:62:70:c1:9b:44:b4:d1:c6:76:cf:32:
8a:94:37:3b:61:a5:c5:fd:f2:69:5b:f6:ee:8f:b1:
a3:bd:6c:d2:44:44:b0:c9:8b:49:ab:8f:a7:b2:3d:
47:ed:d0:35:21:fc:24:5e:ef:46:fc:08:2d:33:52:
d6:a1:b1:2d:9b:71:21:d5:72:18:cd:ba:95:56:b9:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FF:0C:2B:B7:15:C1:01:51:5B:53:E6:40:31:9B:83:71:9A:CF:FF
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:a9:f6:f3:a6:60:23:d5:5a:75:be:68:8a:dc:c7:7b:61:23:
31:aa:29:6c:84:ff:16:fa:fb:60:b2:d2:02:9b:7d:de:eb:77:
b5:70:86:77:11:78:cd:b9:2b:09:5b:30:85:68:d9:9e:29:e8:
33:89:37:f7:d1:5b:3d:92:ea:a8:95:ab:1b:3f:db:8a:0d:c6:
7e:86:93:16:4b:50:19:a1:b6:1d:1f:ef:76:cc:43:21:5f:44:
2f:0a:73:64:eb:aa:73:ad:e5:d4:fa:fc:7f:0f:1f:2e:c9:a3:
ce:5c:9b:03:ba:56:cf:d6:94:17:9b:39:d6:f0:bd:2c:3d:6b:
b7:12:3b:c7:3d:27:35:16:08:c0:b4:9c:ea:8e:6f:3f:62:56:
09:16:a2:a7:81:4f:bc:8c:d6:33:9f:3f:2c:30:ab:a9:e0:b0:
84:83:45:2a:6a:df:82:49:8b:77:fd:21:95:c5:97:c7:48:b0:
9a:68:65:1f:1d:6c:97:76:12:95:ec:06:b5:65:c4:62:5f:9f:
6c:85:a3:84:c9:77:56:cc:0d:9d:91:e2:bb:a8:1d:d1:94:36:
ab:b5:62:2a:99:20:53:7f:6d:50:e1:4f:9a:d4:6a:d6:66:cd:
0e:88:2a:30:53:c9:84:d6:3d:a1:6b:b4:98:31:5f:26:f1:7a:
13:25:ce:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:50 2026 by rpki-client