
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File: 4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier: kADJ/YBbllR16qAM0pguJ9AzLa4DiGztzcnLJh8IEdE=
Subject key identifier: 20:A1:41:D8:3F:24:8A:50:A8:95:30:AA:96:27:F4:91:8E:A2:78:AD
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01A0CA479E45D286CF47C4FD179CF5CC00A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number: 1A98
Signing time: Tue 22 Sep 2026 18:01:26 +0000
Manifest this update: Tue 22 Sep 2026 18:01:26 +0000
Manifest next update: Wed 23 Sep 2026 18:01:26 +0000
Files and hashes: 1: 253R_HjPAe_ULUSoVVCZut_DWoY.roa (hash: D4Z9WrfO5QDHXjS9ZWgcaTJ1VBuEVEWpyCuirpjL6iQ=)
2: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (hash: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE=)
3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: rt/2OlaWn5Hp0JUao7tVzq73nu+BzojLAFB0/JsbY38=)
4: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (hash: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI=)
5: 7w4SlqD5_TJRCUYNtP45pq1RdHc.roa (hash: x5KSqzcfRNfCh39tqIYQzi+K7RIdwi2UYjNzfLXTpBE=)
6: Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa (hash: yVvI0HdEf/H1QrUvDUpGVPHK9JSyS/y9MuhDAFTD8KE=)
7: NRnc0MiLNgbuvfsNBN_chXpyQsY.roa (hash: C5qgrl3mdnbFvtHeaqRaus49s6OOOYlaRV1VkekoU7w=)
8: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (hash: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg=)
9: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (hash: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM=)
10: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (hash: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw=)
11: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (hash: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4=)
12: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (hash: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU=)
13: irISjxv6hlEOs-X4Vplb5dPSU00.roa (hash: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs=)
14: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (hash: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng=)
15: kI6qZM_ZaitHrWvGolHhHlDVsrQ.roa (hash: Q3M/OMYn5lm9sKUydcSkDpIKl2s8dMnBBJUvs2+PkIA=)
16: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (hash: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA=)
17: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (hash: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo=)
18: pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa (hash: eZJlHsrZQ1146ReM9KzwDX7BATtaYNhY9J9MSAdbqxA=)
19: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (hash: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo=)
20: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (hash: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ=)
21: vxK22FrQeol1z1T5kocbd4vcApY.roa (hash: N3qYiB5IYfSxPtYJirle9FvfdxcaVmwY/ECfel7WScI=)
22: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (hash: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:9e:45:d2:86:cf:47:c4:fd:17:9c:f5:cc:00:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Sep 22 18:01:26 2026 GMT
Not After : Sep 23 18:01:26 2026 GMT
Subject: CN=20a141d83f248a50a89530aa9627f4918ea278ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:d7:24:4c:e4:e7:d8:93:c8:75:19:8f:b2:
5c:de:14:1d:51:ef:9c:c1:cb:3e:d9:9c:30:40:a1:
1d:71:31:f1:0f:8b:64:fc:e5:c8:1d:03:68:1b:7f:
39:69:0c:e2:f3:eb:88:4c:92:3a:3e:fe:60:4c:7f:
ed:a7:d2:ce:45:8f:51:0d:9e:e9:66:dc:76:75:90:
01:af:d0:7d:8d:3b:2e:2c:f1:67:3f:44:46:52:ef:
fb:0f:82:97:64:a3:4a:dd:1d:47:c5:fc:29:4e:bf:
21:2f:d1:8d:cf:ee:a1:e7:86:f4:12:cc:46:84:cb:
76:2f:8f:ec:67:97:39:4b:c4:47:9e:95:58:96:e1:
c0:43:67:97:2d:ea:97:cd:03:5d:93:cf:2e:31:e5:
ed:bf:64:83:35:d6:e6:49:7c:2d:9c:df:ce:0b:30:
a6:ff:6c:7f:6a:7c:68:ce:6c:46:82:8f:75:79:26:
9c:a9:36:16:f4:ae:0c:f0:cc:e2:ad:7f:79:7d:ae:
6e:f5:2f:52:92:df:13:a8:2e:81:37:0b:c2:1f:39:
da:2f:b9:74:bc:be:75:1c:80:fa:82:ad:6e:fd:92:
3f:14:ee:67:0d:ae:2d:69:24:ad:fa:57:25:7a:e4:
24:b8:27:18:8d:70:2d:e8:f9:0b:b5:f9:56:7d:94:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A1:41:D8:3F:24:8A:50:A8:95:30:AA:96:27:F4:91:8E:A2:78:AD
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:23:c2:13:2f:dc:0c:8f:60:ff:89:47:b0:a1:d3:2e:ad:c7:
30:a2:b8:a3:c9:0f:40:9f:af:59:3a:67:3f:77:29:1c:89:b2:
4f:d4:9c:b7:bd:3a:c0:e3:9d:0d:9e:66:14:c4:16:94:f3:2c:
05:f1:23:03:39:05:b3:f2:68:eb:62:35:97:a4:69:de:94:8c:
fc:c2:cc:f9:38:da:46:ff:d8:29:be:55:53:26:54:71:45:5c:
ae:49:96:cc:16:f3:92:52:78:87:78:b3:a1:60:10:7e:68:ae:
5f:f6:19:70:a6:ad:cb:ca:a9:51:71:c7:ea:a5:37:af:d9:51:
b1:a3:7f:26:ff:85:9d:c9:63:86:39:de:cb:3c:6e:1e:7c:b4:
ac:88:f4:05:a4:6b:74:1d:6b:b7:d3:63:30:3d:89:58:44:5b:
45:a2:fa:93:d3:66:d9:78:ab:d3:4e:15:fa:f4:97:f6:0a:32:
ef:45:e6:25:27:16:45:9b:45:f4:f0:19:2a:b4:4d:94:30:b1:
d4:19:c1:21:3a:87:aa:87:6a:9c:9f:07:32:3e:5a:94:1d:9e:
2d:60:7a:6c:6a:56:d9:4a:35:46:eb:e8:5e:9f:b6:e3:e8:eb:
4c:a4:73:de:53:f2:27:2f:31:15:a1:3b:1c:54:2b:71:da:fe:
90:28:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:48:02 2026 by rpki-client