
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: KLoh67zz0HSJLcP85Z+OlIflKFubTHfXG62VFK9diw4=
Subject key identifier: D7:E1:93:7D:DF:B0:53:F0:96:D5:4D:56:E5:6B:B2:66:37:0C:F1:D2
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 019EC111E9358D02A9B8B77EAFAF65CCF959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 196C
Signing time: Sat 13 Jun 2026 13:00:36 +0000
Manifest this update: Sat 13 Jun 2026 13:00:36 +0000
Manifest next update: Sun 14 Jun 2026 13:00:36 +0000
Files and hashes: 1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=)
2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: JxwKSyodt10agYiGXv18qBeI7G0yB/oKBFh00BEwd78=)
3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=)
4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=)
5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=)
6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=)
7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=)
8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=)
9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=)
10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:e9:35:8d:02:a9:b8:b7:7e:af:af:65:cc:f9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jun 13 13:00:36 2026 GMT
Not After : Jun 14 13:00:36 2026 GMT
Subject: CN=d7e1937ddfb053f096d54d56e56bb266370cf1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:89:92:e4:fc:0e:ef:da:1c:7f:40:d7:fa:
10:e5:9d:0d:20:d7:d1:78:0a:0a:bc:27:4d:80:f9:
02:1d:fb:ec:ae:0e:ea:55:d0:38:61:2f:9c:6c:bd:
ae:27:59:77:36:fb:ee:ae:20:97:35:38:d4:06:ed:
6a:06:3a:6c:6b:f7:56:31:5a:a4:83:85:48:81:8e:
60:7f:fd:f4:51:7e:76:37:80:01:ef:da:8c:17:be:
b8:46:aa:b6:a8:6e:df:a4:69:13:d3:58:bd:f4:41:
88:91:17:38:b0:58:d8:60:c6:d0:07:2c:37:6a:95:
ca:e5:7e:46:52:bb:87:16:d4:2a:6a:b9:16:93:ab:
7a:90:95:6a:00:0a:eb:98:cc:80:3a:75:7e:48:27:
e4:29:9c:e2:37:de:1b:c3:f7:2d:32:ff:ef:e6:5d:
94:2b:80:64:33:b2:b6:a3:e6:e7:2a:d4:22:ff:a5:
26:b7:2f:94:87:cf:33:e2:22:76:ec:0e:6e:ee:ed:
b0:d2:53:08:0b:b5:4f:18:06:90:85:7a:88:a4:f2:
27:bb:98:2e:ce:06:02:ea:12:e7:d9:2e:e9:c7:de:
3a:c5:3f:d2:67:61:83:04:6b:ca:36:43:a4:71:48:
0f:76:44:b0:27:94:1e:7f:cf:0f:fe:41:e6:82:07:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E1:93:7D:DF:B0:53:F0:96:D5:4D:56:E5:6B:B2:66:37:0C:F1:D2
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:5b:98:f0:3e:de:3c:43:52:2d:04:c2:b5:40:7f:ad:a1:05:
69:9d:c4:0e:f4:af:2e:30:ef:55:c6:ee:97:b2:a7:fc:67:63:
f8:21:78:a3:15:35:68:e5:10:8a:1b:83:59:42:0e:b9:d8:ab:
e3:83:9d:35:6c:ae:db:18:58:88:7a:d3:3d:a2:ad:80:09:23:
4c:88:00:ec:32:fe:d2:5b:7e:a4:ed:ac:77:61:8d:ca:d4:f0:
50:6f:d9:cf:71:e8:6a:28:4c:89:93:83:97:0e:7e:7f:62:cf:
64:09:a6:b1:1a:f8:e5:9e:48:d5:e0:45:d4:ce:63:b1:2f:26:
89:b0:bd:d9:d6:2b:29:4b:a1:96:f7:7e:da:2d:5d:c2:f9:f7:
5c:cb:ff:22:27:81:e9:c2:a7:5e:1b:6f:13:d1:45:f6:57:ff:
67:9d:79:1c:53:57:7b:5b:2e:db:9e:ba:06:1d:4e:f9:8e:d0:
b0:6b:e8:16:76:af:b8:ec:ad:08:71:6e:11:fc:12:8f:90:5c:
d6:cd:62:a2:4c:31:a1:4e:12:83:95:42:ae:b0:cf:c5:79:e8:
8b:24:94:89:ae:79:68:27:b6:e3:c3:77:90:2d:c3:c5:e8:08:
a5:56:21:d6:4e:12:b5:ca:aa:87:c1:0d:ea:ef:01:68:60:16:
18:a1:90:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:35:13 2026 by rpki-client