
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json)
Hash identifier: AAe+ZnqUI0DLY4a6R7q165MSAvqDzlznfzTsgPzG/H0=
Subject key identifier: 91:90:80:DD:36:2C:37:95:21:33:D7:84:28:FC:87:59:91:D9:D1:A5
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 019D27DF5CC2FEE8A63DB35ABA958ED06E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
Manifest number: 0C56
Signing time: Thu 26 Mar 2026 02:00:42 +0000
Manifest this update: Thu 26 Mar 2026 02:00:42 +0000
Manifest next update: Fri 27 Mar 2026 02:00:42 +0000
Files and hashes: 1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=)
2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=)
3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: tF+qf/vEmMVgqKKxrvlzUqhLFVmDazEEkjEUz1kMq0E=)
4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=)
5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=)
6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=)
7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=)
8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=)
9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=)
10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=)
11: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=)
12: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=)
13: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=)
14: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=)
15: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=)
16: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=)
17: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=)
18: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=)
19: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=)
20: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=)
21: lj669dX1v9pNSJRiu80sXV0wDEU.roa (hash: a71cJCBEg+tia0cmJQMaQwkbw9fYgnq3IrPLp8Y1TeY=)
22: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=)
23: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=)
24: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=)
25: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:5c:c2:fe:e8:a6:3d:b3:5a:ba:95:8e:d0:6e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Mar 26 02:00:42 2026 GMT
Not After : Mar 27 02:00:42 2026 GMT
Subject: CN=919080dd362c37952133d78428fc875991d9d1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:b8:ca:a5:85:9e:88:34:05:3e:83:58:1e:
99:cc:cb:3c:48:63:02:f3:4b:ba:6b:d9:4a:07:20:
86:ae:8c:3f:cd:fd:08:1e:b2:db:40:c1:ff:65:7b:
c7:02:62:0e:2e:38:2c:e5:b6:48:ff:99:6f:97:48:
c0:fa:04:93:86:5b:89:e7:58:7e:9c:79:3a:15:d7:
68:93:14:d2:59:1a:7e:7d:ab:77:c5:87:f8:6f:d0:
0f:64:53:c1:44:2f:06:47:7f:fa:18:7c:8a:42:26:
ed:e2:34:f5:fb:ce:bc:68:ef:d4:bb:e2:9e:96:da:
ea:0a:f1:c2:cc:3e:c5:f8:38:81:a8:5f:d5:56:93:
57:0b:49:b9:b3:ce:46:fb:7c:b1:41:09:b7:30:fa:
e0:cf:9c:cd:2b:95:a8:e3:c5:38:dc:2a:4d:b1:02:
25:d2:a9:32:52:24:de:57:41:16:9c:be:05:46:e3:
58:1c:0c:5c:9a:3d:d7:a5:2e:17:6d:d1:b9:9c:34:
07:9e:15:d2:fc:1d:87:dd:ad:20:40:44:6c:9e:6e:
03:4f:4b:2e:f8:9d:e6:ff:52:54:39:a6:7b:9a:85:
e1:35:8e:32:ae:e4:b7:cf:83:01:98:d1:5e:e6:16:
79:dc:29:cf:f7:69:4f:f0:8f:78:eb:a1:d0:d5:57:
4d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:90:80:DD:36:2C:37:95:21:33:D7:84:28:FC:87:59:91:D9:D1:A5
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:45:37:4f:ed:ae:e3:e9:2d:8b:56:fd:3d:2d:82:57:fe:7e:
1e:cd:e9:3f:ca:03:1d:f6:2a:08:45:70:64:68:ee:0f:19:c0:
73:02:ef:3d:f1:8c:ee:1e:05:63:93:0f:5a:e7:97:c5:b0:2d:
41:2c:2f:7f:7c:61:79:0f:ad:b8:0e:93:2d:53:e0:4e:ea:21:
38:ed:64:60:f1:49:41:1f:2a:1a:a5:7f:0e:00:5d:84:aa:07:
fd:35:7e:a4:06:f5:e8:b2:f7:58:6a:4a:4c:2b:05:58:85:3d:
ef:fb:c3:a8:89:51:da:c6:4f:c9:97:68:68:20:72:dc:9e:74:
2b:8e:d9:cc:c4:20:33:87:db:71:df:8c:de:b6:7d:49:d1:50:
82:9c:65:a8:04:78:0a:33:1c:39:6d:ce:92:ca:5c:f6:48:6e:
86:92:89:78:0e:5f:2a:4b:cd:71:3f:32:ad:d1:25:b0:fb:7a:
15:03:fe:ae:c7:40:eb:43:25:3a:af:fe:76:b0:af:5e:cf:3a:
96:a9:8d:8c:92:e0:18:3c:bc:6f:6c:93:55:d3:7a:5e:d4:b3:
e6:8a:e7:89:7c:dd:64:47:98:dc:0a:0c:37:03:df:c6:9b:7a:
83:da:4b:55:2c:a3:bc:d7:eb:d6:0c:e2:ee:81:55:9a:b0:92:
44:e7:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:14 2026 by rpki-client