
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier: IsNDuApp/jFl0EOFxkEcYqoWVaRvm26rPOV63DI9/kw=
Subject key identifier: 97:FA:0F:4D:4D:A0:B4:20:7C:D3:93:25:91:29:67:4D:0C:B5:9B:8A
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 019F90FF05C9B6B3A0A48DFD3A5339C5DA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number: 19EC
Signing time: Thu 23 Jul 2026 22:00:59 +0000
Manifest this update: Thu 23 Jul 2026 22:00:59 +0000
Manifest next update: Fri 24 Jul 2026 22:00:59 +0000
Files and hashes: 1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=)
2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: fRMKjijJ+RaSMrL1AfqKIBBuJQvNeneMQvApFeewE1I=)
3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=)
4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=)
5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=)
6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=)
7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=)
8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=)
9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=)
10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=)
11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=)
12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:05:c9:b6:b3:a0:a4:8d:fd:3a:53:39:c5:da:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jul 23 22:00:59 2026 GMT
Not After : Jul 24 22:00:59 2026 GMT
Subject: CN=97fa0f4d4da0b4207cd393259129674d0cb59b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ba:cf:b4:56:5b:59:f2:39:11:4b:b3:df:73:
3d:54:44:a3:23:a0:0f:22:51:45:28:b5:d8:06:5a:
85:6c:0a:20:1d:a3:d2:8e:e0:81:3a:84:1a:2b:29:
37:6a:68:d5:27:bd:47:30:d7:4d:d8:f7:b0:76:ad:
8b:e4:c4:f5:f4:76:58:39:17:fb:e4:30:4d:1a:be:
dc:9a:5b:a5:31:f1:74:18:c3:0f:40:47:f5:c4:3a:
a7:24:53:0d:93:98:34:bc:85:2b:2b:28:fb:f8:f1:
ca:44:85:14:e8:92:39:a3:4f:ac:4d:27:de:a7:22:
31:0a:b0:b6:44:cb:99:b6:55:7a:fd:10:a6:4f:a7:
8f:54:05:e9:e2:41:3f:36:94:13:8c:d5:36:f7:9e:
dc:75:d8:de:a1:30:31:bf:7c:82:d1:8f:61:90:40:
d6:94:39:1b:92:0d:1b:74:a3:18:94:e8:38:9a:0d:
ac:ee:5f:a2:29:66:67:d0:b5:cf:82:d7:84:cc:5e:
ac:8c:e1:00:23:c7:1b:c2:9e:5c:b4:72:83:fe:e1:
4c:8e:d6:ce:9e:07:d3:ea:83:45:9b:0f:10:33:53:
e8:d0:c5:86:9a:c0:4c:97:99:ad:3d:13:50:49:98:
b8:9d:7c:57:42:21:0f:92:e5:2a:e5:ff:e5:b3:40:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FA:0F:4D:4D:A0:B4:20:7C:D3:93:25:91:29:67:4D:0C:B5:9B:8A
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:af:37:84:71:bc:79:77:60:09:b7:25:9f:22:66:c6:5d:de:
9f:e0:bc:90:4d:6a:48:c1:15:7f:75:21:5f:ae:d9:bc:7a:12:
7a:b6:12:72:de:88:b8:d5:84:17:38:a0:79:1f:c7:78:db:95:
50:e4:df:fb:8b:9f:1c:39:c6:2a:95:d7:38:a0:59:bc:2d:79:
ff:bc:1b:4b:e5:6a:ef:26:50:aa:0f:63:36:ca:fd:30:5b:e1:
4a:90:65:2e:0c:ac:0c:f3:43:01:58:5c:fd:fc:a3:7d:c5:2b:
b4:4a:42:f4:f5:23:30:36:19:ea:54:88:cb:7d:47:19:bd:c8:
6f:f2:3f:6f:9e:46:5a:bd:f9:e5:bc:6c:0a:ac:4c:6c:4e:64:
a1:20:ea:03:45:f9:4d:f2:d9:0c:ca:d9:3a:a2:c1:6c:58:73:
f9:c7:a5:52:2a:d1:e4:dc:ee:40:ab:43:5f:2a:57:26:1e:2c:
c9:82:7e:52:01:77:6b:f4:bc:f6:f3:46:d6:7e:b3:d0:0e:9a:
f8:76:96:80:c2:c8:5d:2b:d4:ca:d0:83:49:75:3a:67:19:44:
22:2c:9a:06:d1:d5:7f:90:7f:ff:c1:66:ef:fc:ee:61:3d:8a:
67:eb:4e:e8:c2:a4:d8:6e:6a:e0:26:64:b8:33:f3:0b:c1:fd:
45:f3:e0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:41 2026 by rpki-client