
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: GCDj4DgQKYAta2MpI8/yWTw20JYcfCxE5YOufhsp1z4=
Subject key identifier: D9:56:F8:74:BE:82:CF:BC:5B:F0:38:77:C1:DA:F1:5C:C1:55:58:CA
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019E1EA339EEF5F86EF2F6F29E42AC0EE925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 1970
Signing time: Wed 13 May 2026 00:01:14 +0000
Manifest this update: Wed 13 May 2026 00:01:14 +0000
Manifest next update: Thu 14 May 2026 00:01:14 +0000
Files and hashes: 1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: 67P9wUBDymfgVTtbzEpQ2XK16ORzJDwV4VSN+PCJZis=)
2: 8MxVvwEohbQmIikgrwper0uymEc.roa (hash: Xz+dhMsydC+qsZLDpjaa9cvEI5H7yFeVKoYAKozIz24=)
3: B6KVvgx5TM8VN3l8pwcEtXd1Zv0.roa (hash: 8nF8dktPdwqwoKApiZ3hvMdTDPbdz2wRKZCsJzWa0NI=)
4: CPFUjdYmYvlsWtWYLd7v5035Xuw.roa (hash: 7sSnoPkIa2/4PXjqT4j8dkD8edXrnocaOy0KeObQQ4s=)
5: JqRZJ3yZS2NGw3E4q9F77DlBVPU.roa (hash: UPvHDY+QZmptAo1aMBQZCt3JHBBqlqPm63jjsEBEq9k=)
6: LJD0wszJHZ-p4v3JPuOMJg7uKmo.roa (hash: TJ3xrBMjWHKG9ZSq93tozgGEeJxQ3QPVN2RdVHYWMkY=)
7: PBQ-z6lWkll5_xzrR2WCQOr2Qzk.roa (hash: /tL6eTwfwCwpcz2/AVK6n7Lt7RJFOtU3gDEp7Zh35Cs=)
8: QE7hnRKM-pIX463UZ_tra0EKYOg.roa (hash: fsT9JglSf+xfQNMVUetiVbQpKYSJUuYkpRqKMcd4NGU=)
9: Qgo-jNupET7F8UuDNqpiTrUhr_Q.roa (hash: v6myRWOIyHvBSB5K6wXjkQvrFI1AFI2YvdioGAkLuFI=)
10: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=)
11: YkuX6DxJ3MBxSGWHOEz4VyjcfWI.roa (hash: d90Ei75/XO1HxJOdhm5VOw1ds37/eeO285fdj7zSdvs=)
12: _AhqSMXzSMZFbHcqNodKDi0IAzM.roa (hash: wvol9PJfQddzQCHHullYDweNMpi9bpx2stFM7mxl7Do=)
13: p_47JOFF0E01-58j2eofD4s7bIE.roa (hash: LIYnpSfPSlgRvAOMOdRIDdMr7brMsNS9YO3X0bgkaMU=)
14: rwPc9bMhlqNj5Ru4sU4Gba-lN28.roa (hash: kN5HJwpyzHfkeeDZTdChHe3NbAw1d5/SE+lUnmOLe84=)
15: vGXTEVlZEvvy_OO65LppPnLWzds.roa (hash: qVUACJdOYqZMXJXhZVtMk9bckrNCEf6pmzMIUiKZwR4=)
16: zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa (hash: ddUTwFfUFZpRc1ExRHE36LurAQIjxRiZ+75kFQEiqQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:39:ee:f5:f8:6e:f2:f6:f2:9e:42:ac:0e:e9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: May 13 00:01:14 2026 GMT
Not After : May 14 00:01:14 2026 GMT
Subject: CN=d956f874be82cfbc5bf03877c1daf15cc15558ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:1d:80:75:d1:65:d6:ba:56:84:d9:57:4d:
b8:07:ef:d1:9e:42:19:d6:ab:19:bc:d0:77:15:74:
7b:de:2d:f1:e3:f6:a2:8e:85:86:a1:aa:82:49:22:
39:3a:6a:08:ee:29:8b:68:02:82:3c:2c:8b:1e:f5:
c7:f4:cd:54:75:9b:4c:e7:3a:5c:c3:f4:df:8b:2f:
41:c2:11:04:a1:68:14:12:dc:ca:8f:f2:d4:87:09:
83:51:ec:9f:38:e7:93:a1:10:58:b6:ba:c9:65:de:
a6:24:51:da:ee:21:a8:56:88:22:bc:ce:46:51:d4:
c4:41:f2:f1:e7:ec:7d:2d:be:7b:6a:60:4c:59:87:
98:88:f5:c2:e1:55:1d:43:c8:5d:f0:2f:3e:4d:32:
22:49:d9:b3:39:9f:8b:15:e3:b9:e8:a1:1e:4f:ff:
da:16:ea:68:ee:3c:3a:6e:38:82:5b:e5:b5:b3:45:
a1:4d:ab:8d:3b:1c:b9:a3:27:33:aa:58:0b:7b:5e:
36:c1:46:be:f1:05:dc:61:be:f5:ab:af:7a:53:f0:
d3:a8:b9:15:1c:d5:ae:c3:38:ff:dc:55:fe:64:6a:
90:51:f5:38:77:87:06:f6:c7:c0:3f:05:ad:2c:46:
f5:3a:71:37:5d:a1:66:98:c0:9d:eb:e7:3e:fa:f0:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:F8:74:BE:82:CF:BC:5B:F0:38:77:C1:DA:F1:5C:C1:55:58:CA
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c3:55:8e:ae:82:f3:0e:3f:03:d9:c8:2e:85:58:3b:0a:28:
bc:b6:7c:4b:69:7d:24:f2:9b:0b:22:9d:6e:09:f9:a6:c8:15:
e1:13:e9:a1:78:78:85:dc:56:29:a5:85:28:29:ab:c3:0c:63:
fb:5e:c3:36:10:98:79:58:be:db:11:8e:b7:19:d1:ec:56:b5:
11:2e:71:eb:d2:67:e0:5a:de:d8:81:86:56:2e:97:34:c6:83:
03:d0:b3:56:b3:2f:21:2b:e0:be:aa:d0:c3:f2:ed:6a:68:77:
8f:5d:14:86:4d:e4:76:7c:b6:85:89:40:25:ca:92:8b:f0:50:
0b:8c:0c:02:98:db:90:d2:3b:42:1d:e1:2b:cb:22:a7:a6:0b:
07:a7:0c:09:9d:ea:7b:24:c4:c7:45:a4:49:64:7c:38:e6:01:
da:53:6e:0d:38:f4:60:7d:d3:f5:e8:36:51:d4:85:9b:6b:e1:
fa:4f:5b:6d:e6:3b:cb:c8:b0:e7:5b:dd:8b:93:ac:50:b8:1e:
32:25:97:1c:2d:1f:69:1d:90:c9:7d:0c:d6:7c:e6:d0:cd:fd:
1a:57:16:32:1f:9f:6a:d6:75:b1:29:ec:8d:b1:72:73:53:39:
18:c3:8f:d5:48:16:28:4c:eb:87:32:c5:1a:9f:44:38:4a:11:
72:43:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:00 2026 by rpki-client