
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: mi6vZsIQG/3ec5wlY38X05syM5SjMaSs2JlsWbDdBdg=
Subject key identifier: 5E:F3:8C:9A:C3:33:DF:13:42:0D:4D:B9:94:B5:62:22:03:8A:69:3C
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019F905A1990A8F51DF079B5A8059594975F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 1A44
Signing time: Thu 23 Jul 2026 19:00:51 +0000
Manifest this update: Thu 23 Jul 2026 19:00:51 +0000
Manifest next update: Fri 24 Jul 2026 19:00:51 +0000
Files and hashes: 1: 1--d0cnUCeMBBJAQCBol8GjOem0A.roa (hash: K1CkZ/qUDDNfccO9OiBBdc3yV0iu0FE3gUcsryaKkr0=)
2: 14gmHyQe4PBetMf4RzBQhNC2FOk.roa (hash: GGBNsYzCN+EF6PiC/qvnbnXzs5PIoYQwa6DEc9vP7DY=)
3: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: jQCq2DSOG2p9DS1K/v3T0tDW6qRzHw3Hnnfm/pJ6iWI=)
4: 6DlgWAr1pze2xwhzVuH9SH83sUI.roa (hash: gbVO2/E/cSyLnCFbipnzOKJO3cIbi/OYiOvNNgSS+Wk=)
5: 7e9287JiavvNibirznmGp8Ri68M.roa (hash: V6aikhGlnGo6wTqTxUKPIvBQH2DvVyy6y6tZnidwhEM=)
6: 8MxVvwEohbQmIikgrwper0uymEc.roa (hash: Xz+dhMsydC+qsZLDpjaa9cvEI5H7yFeVKoYAKozIz24=)
7: B6KVvgx5TM8VN3l8pwcEtXd1Zv0.roa (hash: 8nF8dktPdwqwoKApiZ3hvMdTDPbdz2wRKZCsJzWa0NI=)
8: EaIyfGeRC79erqoN_TV1V3pBgCI.roa (hash: fp/pHfcXfwK5Ba1oEm4wGvNYS46jMvtZK3LLVjXLYYE=)
9: Kj0CSZRO7Ttjx8zTQ7TY2lYWk6U.roa (hash: 5ijTFRrYY4N4pS9N+fgT1g/tsE4VuTayoctiYwfJwSw=)
10: LhT4Mr7pBvmSebh_xpC6XvBDifs.roa (hash: /pqawyzvpLTnZE+ptaDtmcd+h9N5yx6aJ4Q7iNJd134=)
11: M7Qnaao-wDlPyDUa21pW7viJ6uU.roa (hash: Pb3KKeU2RFaohJ/loiF0Yw7/oOqNkzJemldZbia5xys=)
12: PBQ-z6lWkll5_xzrR2WCQOr2Qzk.roa (hash: /tL6eTwfwCwpcz2/AVK6n7Lt7RJFOtU3gDEp7Zh35Cs=)
13: QE7hnRKM-pIX463UZ_tra0EKYOg.roa (hash: fsT9JglSf+xfQNMVUetiVbQpKYSJUuYkpRqKMcd4NGU=)
14: Qgo-jNupET7F8UuDNqpiTrUhr_Q.roa (hash: v6myRWOIyHvBSB5K6wXjkQvrFI1AFI2YvdioGAkLuFI=)
15: T2NfzMdsMpViaAkLEjvuKknHJcA.roa (hash: o9QhHh2ECEBAp63dR2QCY67xVjrjcR7RnvJzXzoRqNQ=)
16: TwoQEmVWkVabFmL6zVszo7vMnUY.roa (hash: /LnMxaouyJTpcMVb8KiNbGv5/aFh1e/B9rqb2NOQWb8=)
17: UE4x2J_JjdAdXOITfo1JaB3GqZo.roa (hash: F8+2zT5bS88GS7Q+A9z996t58lNLXeHU3rrhcs+OftY=)
18: USXvFGnAypWHrQsUpHflyE7AkBw.roa (hash: leJb5YM9g0TdZzX8je+gHf/RsV+l7VFjkyGBSWLgWYo=)
19: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=)
20: Z4qJ0AuvFG9LwCUujh1SFAyCFEQ.roa (hash: L/2723303TsKIyZTz4LxjhNc7XDzNUykt0wbQqKmi1I=)
21: ZrPtSCJ532i12xugeZ1dO4rY230.roa (hash: dH4IWysW7Ys5TJ2lt17gZtfQSYeKivQxpHQG4qiY7zQ=)
22: cLWx9mOmhkJFiHX0vOhviqK5jPg.roa (hash: pz0fm9ldHmFbMZZys/irFjXMA+EOl7vaFP6O4HvjCBs=)
23: hEtZyqE_kfbZ2WGUYKSC0jBfrEI.roa (hash: CPA0tt0+lAYozU3bXwUoMHqEh8nMLbJsWqOdKpIaQuo=)
24: iPahdVFjnIMLFab7e1hz9AD8mnQ.roa (hash: X5DNApyaL3xMnN7g/7ZqxS0aZOIXDBxHJJjMjs9/8GE=)
25: w5ldQ0CjL0tGIL7RdlldMWQrpOA.roa (hash: QwbB2Dm20UEpXkRwmnRCF3k99p0EBKuROeuhoBVi3/8=)
26: x6TaUDjx_Xkt_2Lw0GlWR57EAlc.roa (hash: m5z3Yg3lZo67vrQykV72uJNnGiIVgvzyPCgBuqRvX2A=)
27: zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa (hash: ddUTwFfUFZpRc1ExRHE36LurAQIjxRiZ+75kFQEiqQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:19:90:a8:f5:1d:f0:79:b5:a8:05:95:94:97:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 23 19:00:51 2026 GMT
Not After : Jul 24 19:00:51 2026 GMT
Subject: CN=5ef38c9ac333df13420d4db994b56222038a693c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bf:22:26:d0:90:bc:ae:95:7f:95:dc:8b:31:
d8:f4:24:2d:b2:1c:41:6f:b5:e8:a3:a5:cb:7f:72:
b2:76:c7:6c:83:ce:ed:c2:af:69:f6:d4:3f:b2:4c:
a0:aa:2d:6c:d8:43:0d:6b:85:d1:9d:91:5e:4b:1c:
f1:a2:c1:e5:03:40:96:47:17:64:a2:46:cd:0c:ca:
e4:e3:33:b9:0c:7d:2a:46:49:36:33:1f:3d:be:f3:
cc:f5:a0:5e:39:11:09:6e:d6:22:42:cb:ee:f7:e3:
17:8c:34:e4:18:92:fd:99:19:80:c0:29:a1:43:8d:
f1:5d:45:fb:05:13:44:e6:48:59:6e:40:b5:46:b7:
1e:a1:bf:22:3e:df:bf:df:aa:bb:2d:32:1c:e5:8e:
da:16:98:9c:27:a0:3d:7a:0e:de:56:4e:3a:27:06:
d2:c1:2e:2a:2d:96:d2:50:b0:76:d9:f7:f8:5e:49:
44:33:9d:3d:0a:4e:c6:28:50:00:fb:d2:98:a2:2d:
f2:46:fe:50:ed:9f:37:ce:58:95:22:4b:35:54:30:
52:74:bf:da:52:25:1b:10:33:9b:b1:ee:bf:50:21:
33:e3:25:ce:36:19:46:33:b9:37:48:56:8b:d3:b8:
bc:b0:a3:ef:8d:80:fe:07:4a:50:a6:5d:ed:a0:78:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F3:8C:9A:C3:33:DF:13:42:0D:4D:B9:94:B5:62:22:03:8A:69:3C
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8a:ab:d0:67:0a:a3:43:a0:af:e3:81:bf:ca:2c:33:9f:bd:
b9:a6:8e:10:df:c3:6b:e9:23:8b:a6:e3:1b:0f:09:77:c6:ce:
8a:87:84:2b:b1:9b:e4:e3:cf:6a:9d:5a:33:27:67:6f:5e:fe:
30:a0:7d:96:ce:83:48:c2:97:35:d1:84:22:e7:38:1a:84:32:
98:0d:ea:4a:64:98:59:8a:eb:1b:14:46:1c:18:6b:04:47:26:
19:4f:9c:42:cc:49:29:cc:bf:37:38:32:f0:c4:6b:99:e4:7f:
f0:88:8b:17:cd:8f:04:91:2e:c2:e2:b3:4b:73:75:76:8c:6b:
ba:1a:1e:1a:96:71:e9:2a:6a:db:70:ca:0c:54:44:81:d5:79:
1b:e1:bc:78:03:05:68:87:15:c8:3c:13:c7:96:fd:25:1e:1b:
6a:fe:04:c7:45:7e:8a:12:0d:81:74:f4:bd:2d:b3:15:20:0d:
04:05:a7:e8:71:bd:99:7a:fc:8a:b4:96:25:c1:b4:5b:7a:33:
0a:dd:98:f9:9e:9f:60:cf:96:6a:6b:04:65:be:fc:a3:1f:00:
9b:7a:9c:dc:13:e3:d2:65:1f:1e:36:53:a6:25:8c:46:d8:8c:
b6:41:e8:3e:69:33:4d:1b:4d:48:ce:40:00:ad:b0:f6:ab:3b:
6a:b5:93:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:15 2026 by rpki-client