
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier: odoDcXmVYkP4TDAKGKSKJo+zjDyi0CvJrFojp6Q07Eo=
Subject key identifier: F5:05:80:FB:36:55:27:9F:0B:3A:5C:EA:C8:C6:CF:F2:50:89:67:1F
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 019D2704837DEFC5715E1CF1C4E3600D0C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number: 18AC
Signing time: Wed 25 Mar 2026 22:01:40 +0000
Manifest this update: Wed 25 Mar 2026 22:01:40 +0000
Manifest next update: Thu 26 Mar 2026 22:01:40 +0000
Files and hashes: 1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=)
2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: TENntd9MqbPvFHh+Q+8emOMCnIdiZKFMwVcdgMqOevI=)
3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=)
4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=)
5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=)
6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=)
7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=)
8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=)
9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=)
10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=)
11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=)
12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:83:7d:ef:c5:71:5e:1c:f1:c4:e3:60:0d:0c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Mar 25 22:01:40 2026 GMT
Not After : Mar 26 22:01:40 2026 GMT
Subject: CN=f50580fb3655279f0b3a5ceac8c6cff25089671f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:91:00:96:88:a9:87:63:0a:83:84:6d:28:
61:07:e3:cd:90:e4:0d:26:cc:03:a3:3d:b1:42:69:
ee:06:4c:2a:f3:65:40:f7:94:bc:52:86:a9:e5:98:
fb:8c:88:92:68:12:72:7a:18:b5:25:e9:e4:12:0b:
d1:a2:00:26:37:24:cd:36:f7:2c:de:36:03:04:39:
85:0e:d9:db:62:a6:bd:c4:c4:ea:9a:ab:10:e5:d9:
da:44:e4:ac:f0:a8:38:50:92:1c:03:d3:4b:a0:e7:
58:26:77:5c:c3:76:7d:e3:ee:4f:93:28:44:95:08:
ca:3b:d1:3e:d0:e9:c3:6a:93:2a:af:83:d0:27:c6:
19:48:76:62:92:1a:9b:8a:08:7a:51:c6:91:dd:d7:
55:11:81:30:47:ef:00:f2:0f:02:ba:d4:f7:55:08:
9d:55:65:4d:2b:80:7e:9c:fb:95:da:46:f8:4c:bb:
d4:c9:6e:74:98:13:02:26:bd:e0:79:b6:58:c0:0d:
5a:48:fe:8f:19:08:3b:a2:a8:37:12:77:73:67:61:
12:4e:97:bc:0f:ef:a7:f3:d3:74:c4:53:85:2a:0d:
0a:f0:77:31:41:e5:71:3a:9e:8f:f5:55:fc:5a:88:
5c:e6:6f:2a:47:c4:6f:80:b7:cc:93:88:8f:f8:e9:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:05:80:FB:36:55:27:9F:0B:3A:5C:EA:C8:C6:CF:F2:50:89:67:1F
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7f:bc:33:81:d3:51:1f:ba:31:e1:19:d1:7f:d6:b7:17:53:
c4:a8:b3:a1:5c:25:1e:47:dd:84:e3:1f:3b:2f:b0:a9:ea:f7:
4f:77:24:2f:ee:2e:b5:14:86:80:51:05:b9:0f:42:41:a8:fd:
e9:ad:51:46:75:47:e8:1a:4e:76:65:6d:bc:16:fb:20:ae:8c:
2c:b8:9f:db:1e:9e:4e:0b:82:fa:26:9c:a9:22:4d:fd:fb:32:
45:9f:cb:52:70:7c:26:ce:7c:31:d8:27:a4:fc:78:59:ac:c8:
6b:4c:1d:8c:86:81:10:33:c6:32:ac:d6:17:50:80:90:c8:fb:
de:c4:52:49:a9:37:d8:fb:e4:3e:97:c5:ba:58:ca:f1:0d:ee:
9d:9b:5c:b2:c0:5b:40:f4:0c:e0:dc:91:2c:ce:ca:5b:9d:64:
78:80:f6:93:de:90:54:08:63:33:82:38:c1:38:ca:83:30:20:
5a:c8:ff:43:dd:fd:c9:38:9b:cc:14:33:c7:7b:ae:ca:85:78:
f4:86:7b:09:00:fc:8b:72:e5:f9:93:4d:54:fb:a3:52:d5:61:
56:1e:16:1a:c6:a5:c0:2b:f8:30:d5:55:83:68:aa:b2:8b:40:
ec:9c:b2:e1:9b:2e:68:c9:1b:eb:27:fa:29:b5:3b:ce:15:b0:
77:20:58:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:45 2026 by rpki-client