
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier: kyhZOnX2ZkpziNWWc6B7tf9Hh4KLKHyhf9e/djhiSj8=
Subject key identifier: 60:61:27:EC:4F:51:AE:39:8C:92:EB:D9:9B:00:DA:CB:0A:67:83:B2
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 01A0CBC7C54BCC359A715F5312FF09E352AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number: 1A8F
Signing time: Wed 23 Sep 2026 01:01:01 +0000
Manifest this update: Wed 23 Sep 2026 01:01:01 +0000
Manifest next update: Thu 24 Sep 2026 01:01:01 +0000
Files and hashes: 1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=)
2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: Lr2mEq65QjfC61az0+fP/ILLsYa38WxWwc0V7wEL+4o=)
3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=)
4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=)
5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=)
6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=)
7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=)
8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=)
9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=)
10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=)
11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=)
12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:c5:4b:cc:35:9a:71:5f:53:12:ff:09:e3:52:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Sep 23 01:01:01 2026 GMT
Not After : Sep 24 01:01:01 2026 GMT
Subject: CN=606127ec4f51ae398c92ebd99b00dacb0a6783b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:57:2c:b7:b1:74:dc:55:46:9e:8c:d3:9f:
f5:d4:27:28:01:af:c5:31:d2:31:2f:be:cf:51:71:
0c:f3:8a:fe:dd:52:8b:d6:ba:5a:25:69:80:e7:bc:
0a:28:a4:41:97:7f:a6:25:a8:73:e2:e8:56:61:57:
15:fc:fc:00:00:14:a1:56:d0:83:17:b5:fb:cb:1d:
e0:e9:82:58:2a:37:99:f8:b3:60:1f:1e:98:6e:37:
17:01:23:24:ee:f4:69:4a:4c:e0:91:5f:c2:68:04:
68:36:bd:24:a6:4c:5d:c2:d2:4c:43:11:31:eb:20:
a0:ab:14:21:7d:b9:4e:7b:81:31:1a:2c:d4:43:d5:
ca:de:24:17:6e:f7:85:dd:bc:ab:5b:c3:5c:35:22:
da:41:42:bb:81:e8:bd:57:1a:39:45:b7:8c:77:df:
ef:0c:8e:cc:0c:0b:4e:e6:19:1a:ba:72:7f:8c:f5:
8d:c6:10:4e:15:fb:78:89:22:5f:1c:64:b1:4c:45:
fd:fc:de:12:f9:85:2d:6f:07:a2:5f:71:de:cb:4a:
a4:37:03:e1:35:6b:3c:b2:ec:dc:c4:f8:c9:0b:f4:
54:d7:6c:ce:2d:10:b8:1e:fb:4f:e6:36:fb:31:d4:
d9:cc:f1:79:7f:21:2c:5c:32:73:28:45:6c:0a:6d:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:61:27:EC:4F:51:AE:39:8C:92:EB:D9:9B:00:DA:CB:0A:67:83:B2
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2c:78:a6:98:c6:b9:05:47:52:05:ae:2d:73:04:76:39:02:
ca:87:80:4d:fd:a6:3e:e4:d8:4c:97:2e:00:55:c1:59:15:55:
e7:cd:9e:4a:9d:72:ce:b8:51:c1:93:e0:1e:63:67:a9:3c:54:
83:e5:f5:f4:3c:29:eb:5d:7a:48:ac:ae:5c:5b:c6:aa:35:05:
4b:65:a6:0c:c6:28:65:55:50:54:02:ac:f0:23:53:6b:c7:b9:
79:be:aa:25:d5:f1:a6:d8:2c:1e:56:a5:9c:cf:51:97:6a:68:
4d:09:74:ab:ba:47:db:c4:4e:88:71:9e:59:80:c6:b2:a4:2f:
22:52:07:cd:d2:f2:b9:67:04:28:26:36:7b:9c:01:b3:84:54:
c8:b6:7e:a8:68:08:f3:b9:5e:4e:5d:42:2a:6a:9f:38:e4:e3:
72:05:dd:90:49:3a:b5:cc:c7:86:54:45:e8:f8:de:82:c8:13:
68:ad:36:b3:e1:00:c6:82:90:f7:28:c2:f8:d0:f7:70:3c:bd:
0f:48:bc:ee:73:7f:4f:ac:b5:9c:85:c3:d5:a0:bb:49:b1:eb:
5e:44:cf:7a:e4:e2:8c:6f:32:e5:ea:6f:2a:37:0b:b3:cc:6d:
d9:64:ac:31:a8:18:a3:a1:3f:20:48:bb:c5:d7:f4:f1:1a:56:
c9:88:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:23:18 2026 by rpki-client