
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier: lLh2GOu2UqJgEhziOr+POAEXoizFfFzQ4DPeBlKdX+0=
Subject key identifier: EA:A2:BC:98:16:61:5F:73:83:12:7D:1D:1B:FF:1F:5A:59:B7:2A:68
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 01A0CDB63D19B8CD83BB39D39158F0A40B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number: 1A90
Signing time: Wed 23 Sep 2026 10:01:07 +0000
Manifest this update: Wed 23 Sep 2026 10:01:07 +0000
Manifest next update: Thu 24 Sep 2026 10:01:07 +0000
Files and hashes: 1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=)
2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: 6vPWo+nbPLMctph5oftXTamIL3nbI2yE7CRIZO4F1Ho=)
3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=)
4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=)
5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=)
6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=)
7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=)
8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=)
9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=)
10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=)
11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=)
12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:3d:19:b8:cd:83:bb:39:d3:91:58:f0:a4:0b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Sep 23 10:01:07 2026 GMT
Not After : Sep 24 10:01:07 2026 GMT
Subject: CN=eaa2bc9816615f7383127d1d1bff1f5a59b72a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fc:db:c5:1f:94:8e:af:9f:de:99:50:5a:d6:
c5:d0:51:34:62:f5:62:9e:6a:0b:9e:f7:4e:d7:5d:
c1:4e:d3:f0:5c:f4:f0:64:ff:ed:4b:8d:d1:71:4c:
7d:2a:67:fc:13:6d:73:6c:15:3b:39:93:57:04:ce:
8c:bb:f7:2d:ea:b5:cb:f1:61:5f:2a:1f:47:30:fc:
62:58:b3:91:28:a7:01:d4:13:21:de:94:b7:b9:59:
31:ce:3c:d8:f6:72:0e:64:00:37:d5:4a:40:7c:7e:
3e:b5:53:0b:5b:8e:d1:cf:c1:4b:1f:f9:4e:37:40:
f4:5b:bb:ea:dd:ce:95:e9:c7:31:8a:d0:6e:01:96:
6c:79:2b:a1:4d:b9:91:67:87:bc:79:60:58:23:7e:
20:6b:ac:85:b5:9e:d0:d2:35:d9:4f:28:bb:d3:c0:
0e:50:c1:28:9f:92:58:ad:fe:a3:01:62:35:73:6a:
24:d3:26:a7:b7:c9:35:37:25:7c:ef:8c:33:57:a1:
be:c7:fe:31:92:89:ad:49:4d:a4:42:ff:d8:8d:19:
7a:b1:6b:09:22:77:1b:73:b3:af:6e:70:4d:bd:87:
55:47:01:ee:df:ea:38:3f:a6:d7:9d:d5:9d:bc:3e:
b3:c9:74:9d:76:fb:4a:ab:1c:46:3f:94:51:c8:2a:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A2:BC:98:16:61:5F:73:83:12:7D:1D:1B:FF:1F:5A:59:B7:2A:68
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ad:bd:11:e8:01:d0:74:10:fb:fc:c4:82:71:a9:62:17:9c:
90:95:c1:40:43:d7:98:9f:6d:4b:a1:27:54:bf:14:00:ed:b6:
92:27:8e:24:88:c6:d0:2c:ef:7a:8c:25:c9:29:2d:5b:a1:02:
3b:1c:9d:77:9b:71:25:0b:f4:7d:9d:98:30:5a:ac:59:c5:30:
00:76:28:1e:be:4b:38:3e:13:fa:d8:a4:c5:87:32:6f:ce:c8:
25:37:c7:ef:0f:e2:7e:76:05:ba:49:c9:7a:48:5e:c6:86:08:
57:83:cf:46:af:70:53:80:80:1e:70:22:81:e6:3a:34:85:b3:
70:7a:99:68:b5:86:33:f4:9b:1a:7f:0f:4b:a4:6f:91:a6:80:
bd:34:46:52:25:71:70:f3:bf:7a:d9:e0:e5:aa:db:b7:4d:b9:
e0:eb:a7:2d:46:11:c5:44:7c:1f:23:7a:21:f1:3a:c7:a1:8c:
23:6d:96:1c:41:09:22:df:d1:fe:fc:95:f4:d6:35:ef:df:4e:
3e:58:0e:41:11:92:37:72:4f:ed:d8:c7:7a:28:32:3c:e7:7e:
75:30:c4:7d:f2:f7:7e:22:bf:4c:3c:93:16:16:ed:35:43:e0:
8c:b3:65:e8:f2:c7:d1:2e:83:35:09:95:62:26:6c:85:2c:c2:
1c:c9:da:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:38:36 2026 by rpki-client