
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json)
Hash identifier: jIejlcMVsRTn8HqCIQrJnMCstebYSqlue0gBHmH/42Y=
Subject key identifier: 5B:19:E6:19:6E:B7:02:6B:26:23:89:DA:4F:DE:47:0D:05:2C:90:72
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 019EBDA316D0533386E9CF8566DB2232C96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
Manifest number: 1978
Signing time: Fri 12 Jun 2026 21:00:42 +0000
Manifest this update: Fri 12 Jun 2026 21:00:42 +0000
Manifest next update: Sat 13 Jun 2026 21:00:42 +0000
Files and hashes: 1: 0dMJhsxjgnbAU5WFa10AoRaFilA.roa (hash: NPvcwvLEK2kbpEIl+DIrK18I+jAsrx0zSuGH2P9GkC8=)
2: 4KJ_GXRCZJ3i3re64jPbmY6CJmw.roa (hash: 6+nSknm5d3GJFxravLBFWrmCmG8ueiV1lwzdyLMLzvU=)
3: 4lIeViGYyAArH6xFgAXuF1KY8oo.roa (hash: 3sNxRj68ViMu808j4OAwb7vp2hEV9aYGZZ0Iae+xOYY=)
4: 6B2lYvT2dR81hzkQQELDn_duJcs.roa (hash: iYcBuEVmeXmfUIJkWbTRCIrfpwO2+UiKD6lHoQfEoI8=)
5: 8JeUl0gwKBaZ43vH7iblm5PR0rs.roa (hash: 1jsQ41jOwm0SLnU0Qv592bRuhGGbd2WMpr/SEYaEF9o=)
6: AxjWYbGGpT5pCJ414siHagIrYv0.roa (hash: Les+tBn+kJ+j2Lvoi/D4UE+2fwFt8YnrHjntjr+jnck=)
7: P7tnseevFfgmSuKuIWR7T1-giX0.roa (hash: ojvJdnjtgDrfvRMQCYPhOeHhRoL/uCyx9OSh7NhorVA=)
8: WlvzyTdODs1w5g16wAD9se0N5yc.roa (hash: ktIjwIA9pXx7a9RtBAHAvE+KFHxUcF6PaLm5AvCzXO4=)
9: X-pw--7v-eVKOMCYhEoBqMvv5i0.roa (hash: IUeZVsSUCXBqLM3lYzGREGoTqzMuBKPxlh2jySadCOY=)
10: ZYdv2S3m7eXPESVok8yxYTapz-4.roa (hash: hWVgkj4Hxb1fm9VqiSs0akAtvRlafZPuNGm7c0XMuPM=)
11: c4gKUGJIMgEyuId7ul08tWyPN-I.roa (hash: chucr3d4TvCMayMn3vPGpeF00MZgFV7fyC/x5QhhCZQ=)
12: mlVDqzsr0onFPunz8cRb0CxctTw.roa (hash: FmoWfiTgv6hVPqkJlMC8O0NyKtvBDx0DatsEpxV/8NY=)
13: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: 0bUsSqBKldngR1XuEFC2NLW2ahn0teVKub7K+mO5BQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:16:d0:53:33:86:e9:cf:85:66:db:22:32:c9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jun 12 21:00:42 2026 GMT
Not After : Jun 13 21:00:42 2026 GMT
Subject: CN=5b19e6196eb7026b262389da4fde470d052c9072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:de:00:ef:79:d4:d5:3c:14:57:52:71:97:
af:69:b8:42:14:89:56:33:11:95:0d:d1:d0:51:1e:
42:60:f5:a7:fd:4b:25:c3:59:07:b5:fd:c2:b3:ba:
d8:2e:71:e7:cb:31:1d:f1:44:4c:64:1a:33:d9:39:
82:57:b4:50:39:b7:7a:25:80:37:99:37:47:40:8d:
a5:cf:0e:3a:3d:e1:47:e1:c9:1f:cc:f2:19:dc:47:
c6:8d:13:e1:c4:b6:28:d9:2c:5c:b1:ee:c3:65:26:
1a:f1:b4:06:97:44:50:83:da:77:cf:1f:ff:67:cb:
c2:c1:ff:09:f2:ac:d4:82:21:c7:91:12:a2:77:2e:
68:2a:a0:9e:7a:0c:7e:10:82:2a:df:07:de:d1:ee:
6b:b7:92:45:40:58:35:6d:e1:b8:5a:c6:89:8d:1c:
77:28:9d:24:7a:e2:a0:b0:80:fe:22:ce:63:8a:10:
d9:38:da:31:95:83:34:5b:17:f0:9f:13:f9:83:f8:
da:6d:87:33:db:07:a5:bf:cd:54:b4:b1:fd:2a:ac:
2d:f1:3f:62:12:57:86:a5:a8:99:70:a0:70:e8:bd:
0d:f9:85:c5:22:f7:08:d3:8f:f7:a6:6d:26:df:b7:
e2:fe:a7:11:68:ef:6a:72:57:f9:6e:18:44:eb:f9:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:19:E6:19:6E:B7:02:6B:26:23:89:DA:4F:DE:47:0D:05:2C:90:72
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c4:97:c0:9d:06:87:43:61:07:74:e8:72:44:be:29:70:72:
38:08:e8:ef:b1:7a:5f:94:dc:64:dd:07:c5:78:6e:7e:d4:63:
2a:a6:f7:1c:64:7e:6c:1f:b9:3b:7b:32:0a:29:f8:a6:48:79:
40:6f:1d:d7:60:38:2c:a9:b1:bc:e7:06:c5:17:46:d5:f7:62:
6b:22:a1:28:58:f8:44:87:71:f1:e8:af:13:8d:5f:d3:cd:45:
7b:ad:9e:9f:de:a5:21:6b:5d:48:4f:0d:5e:91:75:f4:41:17:
9c:39:08:53:7d:07:0a:ef:65:85:ef:49:e5:ce:6c:0f:09:8a:
11:81:fd:4c:e9:df:ff:7c:3b:56:b8:07:6f:c9:50:97:8e:c6:
48:8c:e7:f5:72:a9:5b:a4:f9:c9:7c:a9:d3:e4:b4:01:65:b9:
3d:1c:92:5b:1a:dd:13:09:c0:e9:39:48:68:22:70:0f:89:bc:
99:07:c4:15:39:c0:59:da:71:af:63:19:9c:44:d6:b2:7f:17:
23:bb:7a:2c:f1:0b:92:53:91:dc:77:5c:35:a5:12:1f:b3:3e:
e5:1e:ef:43:9a:c2:f2:3a:02:07:91:15:0e:d7:10:17:c8:56:
ce:56:20:bf:74:48:c0:22:ea:62:24:97:a4:2d:cd:40:fc:a1:
b1:98:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:29:42 2026 by rpki-client