
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File: T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier: LUtPKIhOTo6oq6DLGQHN08EV2y4QsWqgsw/jfRxhdRM=
Subject key identifier: 28:01:68:45:76:51:80:E2:C3:79:ED:93:9B:A7:B4:B0:02:36:DE:55
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 019D25F1DD7A77FBDE5B2C957013EECD4205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number: 1927
Signing time: Wed 25 Mar 2026 17:01:41 +0000
Manifest this update: Wed 25 Mar 2026 17:01:41 +0000
Manifest next update: Thu 26 Mar 2026 17:01:41 +0000
Files and hashes: 1: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (hash: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8=)
2: 4BT3ESnzNjCT2x59JVbAAXxSXAY.roa (hash: O8CcngTVUlHleqwd4kGt0w16qDAwdr4oH0nwRI5FfLI=)
3: 67Hu1VCqZOSeOiCM6FEEFd3iXlE.roa (hash: Him9pl9KpdgeG8GWKYKiLJdFav7i0xf6FzUlhcxDHRg=)
4: AQd6696DS58WSqKOJB3_PgGA6ww.roa (hash: LGXodTKuNu4kXpvG5ujn8tNfaAjmgD5yZwsMvUZmhpE=)
5: DFqAchiwJnzlSG4eyo-vOSeRNeI.roa (hash: N2RIPmZbJ5fy1derB4IMwjZbzNeDMo48frV/EdBPTzc=)
6: Ezkbpw5h6Yu188ximBXledMTyHY.roa (hash: EUfk52t0TP+il+Ji1SToM3ssr1h7ZowDd/it1ELPNV0=)
7: HJPaq1ftIce0cbhMLY5uOEC-VWo.roa (hash: fBTxWIRtt9pgmNZdV8y8oKacQV2jXNDSMOz+g4gJZQ4=)
8: M96SaOtXf2BYyJPHvAneKZXSlX4.roa (hash: Fjx5Jib6Xzn9dBAanulC/6wjKgvgmy9B+Oq0M30jiGo=)
9: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (hash: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc=)
10: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (hash: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8=)
11: Np-SgsMbvNtUeV1Q78-Ul_LgtAI.roa (hash: FpZOxRp9m2d8Wj5Wy6a90uOf4hQ5Liav+WcFTy+XdBk=)
12: OjY3C6L-EuPc2t0Qn-e-3bjWy-0.roa (hash: OthyvAnziDLpR9g+pkOT+1ZzWC7VC/seTw30st0/H/s=)
13: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: 6Ynq1sxddeanJcoLQ/7Y8FzG94QR4866/YRX364oMW8=)
14: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (hash: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M=)
15: ZrACWZQMbi6NxGaCnX9YMBCOCN8.roa (hash: OlqjwKoWnqX+XWjymWXMgysC4FA6tYi6yFNdSVG5cWA=)
16: iGAec5WLgxQuZO87yGrv6vRcxNk.roa (hash: qbtBIjuoPTdaV1pke2Rgv7Qz00a7lyCwRwSyFcFeCb8=)
17: jR5kew6fzKC8LrRELsfEF_xqPY0.roa (hash: DyIyP/D8JiwLk+A9TgA7HGYw8hICN7TzEhZyhCtBhvA=)
18: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (hash: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ=)
19: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (hash: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ=)
20: okpXovGo8Qws_PPRtlsVVUmZZzA.roa (hash: 4oR/V429uTC5kWQN94QEJqxEv4CSp9VQuHnF9qGLwmM=)
21: qyFRBJyuib1PnIx-vXa3UO6rHbk.roa (hash: ttUZYHflFlcNbkH75tZXAFD7K0f4LBSVLHQuKhH+hJo=)
22: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (hash: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0=)
23: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (hash: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY=)
24: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (hash: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:dd:7a:77:fb:de:5b:2c:95:70:13:ee:cd:42:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Mar 25 17:01:41 2026 GMT
Not After : Mar 26 17:01:41 2026 GMT
Subject: CN=28016845765180e2c379ed939ba7b4b00236de55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:4a:52:e2:43:2c:89:e3:ea:bf:65:f1:28:
b0:53:cb:20:75:5c:83:9f:07:d8:ad:80:ce:85:d5:
0b:3c:87:5c:79:fd:e4:73:d1:18:d1:b0:86:b1:40:
8e:5d:3a:0e:00:c2:06:ab:44:ee:cd:55:4e:1d:06:
2f:07:66:01:93:45:86:cd:c5:45:17:91:a4:06:ee:
01:4b:e7:7c:25:4e:62:25:1f:86:c0:d4:ba:eb:a0:
e4:d8:c7:86:b9:c1:b9:b7:24:c4:aa:bc:5b:63:9d:
2d:fa:b4:9a:ec:8f:53:db:a5:4e:92:1a:d3:20:ea:
48:8a:ce:fa:c2:f2:36:35:d1:99:30:08:6f:36:01:
f9:5d:9f:ac:b9:a6:73:1e:0a:69:25:f7:29:e5:82:
c4:0f:bc:04:ce:f9:65:1e:a6:8a:e4:54:d2:32:fd:
dc:12:fd:1a:b4:f7:a1:b7:08:3a:d0:11:d0:a8:54:
dd:8b:7b:3f:23:7f:b5:b6:86:a7:7b:e1:d1:af:f3:
09:32:9b:25:dd:83:88:3e:ad:6a:0a:16:72:82:2d:
ac:b1:d1:52:b7:f3:23:ac:0e:de:d4:dd:d4:39:13:
a0:7c:81:06:f8:93:24:02:56:dc:55:02:2f:2d:fe:
f6:5f:a4:a3:7c:fd:c0:ec:00:d7:aa:6b:b9:27:10:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:68:45:76:51:80:E2:C3:79:ED:93:9B:A7:B4:B0:02:36:DE:55
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ac:d8:cd:91:06:2b:a3:55:c2:88:5d:17:23:60:b3:84:5a:
a0:c8:55:42:42:b2:e4:0d:60:fb:0e:ba:fa:d9:0c:6c:48:fa:
c9:72:55:09:8e:0d:51:8a:09:61:c7:e7:bd:35:2d:1f:a4:a4:
de:82:42:6a:7b:17:43:17:92:e0:b6:10:b8:97:27:d5:1c:f5:
bc:10:4a:c5:f5:e1:dd:21:d2:43:de:3c:bb:56:fb:aa:e0:7b:
a4:03:c2:cb:e6:06:34:fd:0f:c4:e2:f4:78:b5:20:14:bd:9f:
e2:7a:cf:28:c9:f8:bb:cf:d4:37:8c:49:37:de:2d:44:f7:d4:
f5:0f:2b:03:ec:62:c4:87:2a:85:ea:a0:4d:2d:d9:61:1b:49:
ff:45:0e:18:a3:03:f5:72:25:39:56:65:76:43:28:8f:e4:1a:
a8:9c:c2:96:cc:c2:93:7d:5d:2c:d7:a2:eb:34:b7:de:4b:a7:
7b:e2:b0:f3:8b:41:ee:c4:f2:37:ae:e8:ad:f7:a0:f3:10:ca:
63:3d:70:8f:ca:9f:3d:5c:42:7a:80:ed:09:5b:13:6b:8c:72:
a7:0d:d2:a1:22:d9:b9:5d:ac:4d:81:c7:11:3d:7d:6b:24:ce:
25:f2:97:b7:2d:85:a2:86:4c:37:c4:e4:f3:40:e1:06:93:db:
e5:4d:13:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8d16d/veWyyVcBPuzUIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjYwMzI1MTcwMTQxWhcNMjYwMzI2MTcwMTQxWjAzMTEwLwYDVQQD
EygyODAxNjg0NTc2NTE4MGUyYzM3OWVkOTM5YmE3YjRiMDAyMzZkZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRVKUuJDLInj6r9l8SiwU8sgdVyD
nwfYrYDOhdULPIdcef3kc9EY0bCGsUCOXToOAMIGq0TuzVVOHQYvB2YBk0WGzcVF
F5GkBu4BS+d8JU5iJR+GwNS666Dk2MeGucG5tyTEqrxbY50t+rSa7I9T26VOkhrT
IOpIis76wvI2NdGZMAhvNgH5XZ+suaZzHgppJfcp5YLED7wEzvllHqaK5FTSMv3c
Ev0atPehtwg60BHQqFTdi3s/I3+1toane+HRr/MJMpsl3YOIPq1qChZygi2ssdFS
t/MjrA7e1N3UOROgfIEG+JMkAlbcVQIvLf72X6SjfP3A7ADXqmu5JxCsnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgBaEV2UYDiw3ntk5untLACNt5VMB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqzYzZEG
K6NVwohdFyNgs4RaoMhVQkKy5A1g+w66+tkMbEj6yXJVCY4NUYoJYcfnvTUtH6Sk
3oJCansXQxeS4LYQuJcn1Rz1vBBKxfXh3SHSQ948u1b7quB7pAPCy+YGNP0PxOL0
eLUgFL2f4nrPKMn4u8/UN4xJN94tRPfU9Q8rA+xixIcqheqgTS3ZYRtJ/0UOGKMD
9XIlOVZldkMoj+QaqJzClszCk31dLNei6zS33kune+Kw84tB7sTyN67orfeg8xDK
Yz1wj8qfPVxCeoDtCVsTa4xypw3SoSLZuV2sTYHHET19ayTOJfKXty2FooZMN8Tk
80DhBpPb5U0T+w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:28 2026 by rpki-client