
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File: 4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier: c300bdyIBJ48MwsiZArTQY9svMBooA1daTsK1wxSMiY=
Subject key identifier: 9C:26:D3:5A:40:CF:87:F4:19:ED:61:3C:BE:3F:52:C4:61:B3:20:C8
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 019D33087573B74B3EFD9C9D64EC400551EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number: 18BB
Signing time: Sat 28 Mar 2026 06:01:25 +0000
Manifest this update: Sat 28 Mar 2026 06:01:25 +0000
Manifest next update: Sun 29 Mar 2026 06:01:25 +0000
Files and hashes: 1: 253R_HjPAe_ULUSoVVCZut_DWoY.roa (hash: D4Z9WrfO5QDHXjS9ZWgcaTJ1VBuEVEWpyCuirpjL6iQ=)
2: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (hash: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE=)
3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: +WZGYIAkSBlTuHTy2UqEkc6K1qnLbmba5LOOIAfj+iM=)
4: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (hash: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI=)
5: 7w4SlqD5_TJRCUYNtP45pq1RdHc.roa (hash: x5KSqzcfRNfCh39tqIYQzi+K7RIdwi2UYjNzfLXTpBE=)
6: Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa (hash: yVvI0HdEf/H1QrUvDUpGVPHK9JSyS/y9MuhDAFTD8KE=)
7: NRnc0MiLNgbuvfsNBN_chXpyQsY.roa (hash: C5qgrl3mdnbFvtHeaqRaus49s6OOOYlaRV1VkekoU7w=)
8: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (hash: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg=)
9: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (hash: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM=)
10: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (hash: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw=)
11: TYy0_7J7KDgPFXIQznrWkATWKoo.roa (hash: S3jUpVJhOWtNPETQx6yVyRUSNY9H4HAxcLvNiQwtEuc=)
12: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (hash: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4=)
13: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (hash: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU=)
14: irISjxv6hlEOs-X4Vplb5dPSU00.roa (hash: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs=)
15: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (hash: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng=)
16: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (hash: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA=)
17: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (hash: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo=)
18: pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa (hash: eZJlHsrZQ1146ReM9KzwDX7BATtaYNhY9J9MSAdbqxA=)
19: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (hash: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo=)
20: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (hash: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ=)
21: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (hash: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:75:73:b7:4b:3e:fd:9c:9d:64:ec:40:05:51:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Mar 28 06:01:25 2026 GMT
Not After : Mar 29 06:01:25 2026 GMT
Subject: CN=9c26d35a40cf87f419ed613cbe3f52c461b320c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:b0:a7:d8:89:6b:ca:3e:1d:19:1a:36:08:
d5:cd:8f:ea:58:3d:f2:d6:05:c6:c8:41:ba:d9:9f:
00:e1:f9:fe:74:4a:7e:b9:ab:54:15:47:ca:14:a2:
23:00:23:75:3f:a6:1c:c0:87:91:c2:17:c8:54:0a:
46:17:74:0c:a5:f1:66:08:ab:09:f8:7d:e5:eb:e4:
47:1d:57:72:83:f0:b7:cf:ca:e3:38:d5:75:bc:be:
41:8f:7f:cc:d8:f7:61:9a:db:dc:3e:e6:b2:ab:1f:
12:30:9a:d6:de:c3:4c:17:06:3c:20:ba:fc:81:7e:
6f:67:6b:51:ac:47:c7:9c:35:34:c5:2e:aa:4c:df:
dc:df:2e:40:c1:79:ee:72:86:cc:a2:e4:b0:9e:e7:
80:fc:79:3f:77:23:40:0a:22:64:cf:12:c4:23:45:
8f:3e:2c:16:e6:47:80:62:74:49:2e:27:62:6f:00:
42:9b:a0:95:89:99:8a:15:27:26:7c:9d:f1:ec:3e:
68:d7:7c:da:ca:95:3d:7e:8e:d3:47:ee:32:6a:dd:
b9:3a:a8:07:d8:81:5e:0c:6b:a4:b1:9a:92:46:c6:
6a:e4:b5:20:99:67:9f:68:80:34:31:ab:e1:67:ec:
cb:e8:5c:07:6c:20:7a:67:b5:56:8d:83:2a:1f:b9:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:26:D3:5A:40:CF:87:F4:19:ED:61:3C:BE:3F:52:C4:61:B3:20:C8
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a7:5e:c8:5a:dd:6f:3f:0e:98:1a:d7:3a:de:df:b0:6f:d6:
3b:1e:11:3a:4e:e2:ec:08:d6:ba:22:5c:dd:af:98:ad:90:d1:
fa:6d:0f:54:c6:0d:28:de:fa:00:70:84:99:57:01:84:eb:75:
20:af:7a:c2:09:0a:53:4c:e6:ff:9b:ba:f1:02:f6:4d:d2:8d:
a9:09:fd:71:28:f6:cc:d9:97:05:4c:45:92:ca:be:f9:e2:78:
31:6f:af:fc:75:62:f2:37:89:df:ec:e8:a5:79:09:95:89:74:
40:27:a4:40:dd:f6:86:64:10:a2:84:ab:fe:76:24:9b:9a:c4:
89:68:56:08:23:b5:64:3f:f0:60:7e:e0:08:ae:ab:59:39:67:
81:6f:2e:41:84:eb:87:38:76:55:3d:07:94:4b:7f:3d:af:17:
01:87:39:88:65:e3:34:ce:a5:2d:15:34:40:22:76:36:17:d5:
e8:18:31:2e:c6:1f:4b:9b:49:d0:77:e8:6f:0d:ac:fe:f2:d5:
d1:cc:1d:a9:df:fc:21:a7:be:94:92:31:45:91:df:c0:f9:73:
23:f9:46:66:e2:fd:e1:74:aa:7b:34:b2:e8:f3:8c:77:9c:e9:
39:59:d8:7e:a5:29:ab:e2:06:7b:de:0a:10:9c:ee:a8:b9:c0:
c6:38:4e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:20:53 2026 by rpki-client