
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json)
Hash identifier: WYNC0hPJYNu3efe23jzknEbYs5SKTAEVjrWG5Ilx0fg=
Subject key identifier: 5D:86:3C:CA:54:7B:BF:2F:B7:7D:E9:AF:AE:CE:46:1C:74:C8:75:46
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 019CA8A0E2711CF41A5BD5E4F2A0415EF27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
Manifest number: 1864
Signing time: Sun 01 Mar 2026 09:00:41 +0000
Manifest this update: Sun 01 Mar 2026 09:00:41 +0000
Manifest next update: Mon 02 Mar 2026 09:00:41 +0000
Files and hashes: 1: 0dMJhsxjgnbAU5WFa10AoRaFilA.roa (hash: NPvcwvLEK2kbpEIl+DIrK18I+jAsrx0zSuGH2P9GkC8=)
2: 4KJ_GXRCZJ3i3re64jPbmY6CJmw.roa (hash: 6+nSknm5d3GJFxravLBFWrmCmG8ueiV1lwzdyLMLzvU=)
3: 4lIeViGYyAArH6xFgAXuF1KY8oo.roa (hash: 3sNxRj68ViMu808j4OAwb7vp2hEV9aYGZZ0Iae+xOYY=)
4: 6B2lYvT2dR81hzkQQELDn_duJcs.roa (hash: iYcBuEVmeXmfUIJkWbTRCIrfpwO2+UiKD6lHoQfEoI8=)
5: 8JeUl0gwKBaZ43vH7iblm5PR0rs.roa (hash: 1jsQ41jOwm0SLnU0Qv592bRuhGGbd2WMpr/SEYaEF9o=)
6: AxjWYbGGpT5pCJ414siHagIrYv0.roa (hash: Les+tBn+kJ+j2Lvoi/D4UE+2fwFt8YnrHjntjr+jnck=)
7: P7tnseevFfgmSuKuIWR7T1-giX0.roa (hash: ojvJdnjtgDrfvRMQCYPhOeHhRoL/uCyx9OSh7NhorVA=)
8: WlvzyTdODs1w5g16wAD9se0N5yc.roa (hash: ktIjwIA9pXx7a9RtBAHAvE+KFHxUcF6PaLm5AvCzXO4=)
9: X-pw--7v-eVKOMCYhEoBqMvv5i0.roa (hash: IUeZVsSUCXBqLM3lYzGREGoTqzMuBKPxlh2jySadCOY=)
10: ZYdv2S3m7eXPESVok8yxYTapz-4.roa (hash: hWVgkj4Hxb1fm9VqiSs0akAtvRlafZPuNGm7c0XMuPM=)
11: c4gKUGJIMgEyuId7ul08tWyPN-I.roa (hash: chucr3d4TvCMayMn3vPGpeF00MZgFV7fyC/x5QhhCZQ=)
12: mlVDqzsr0onFPunz8cRb0CxctTw.roa (hash: FmoWfiTgv6hVPqkJlMC8O0NyKtvBDx0DatsEpxV/8NY=)
13: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: +ZYiB0N6eiWa0q8EaI7tMQEkfSmHw4DTWxN/Lg7a8DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:e2:71:1c:f4:1a:5b:d5:e4:f2:a0:41:5e:f2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Mar 1 09:00:41 2026 GMT
Not After : Mar 2 09:00:41 2026 GMT
Subject: CN=5d863cca547bbf2fb77de9afaece461c74c87546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:56:c9:75:c9:4b:c2:00:9d:13:6c:c4:81:
3a:ea:9d:72:2c:48:30:04:35:85:15:94:11:05:73:
0a:86:ac:6c:90:89:d3:9d:ae:87:6c:8f:24:81:a2:
9a:24:44:c3:76:13:ab:47:2e:1f:ac:b3:ce:23:2c:
ca:4a:bf:bc:18:3b:ae:be:0d:a6:5a:85:14:3d:c0:
07:93:89:82:47:67:97:7b:27:11:8b:c9:17:d2:16:
15:6d:37:ad:9d:5b:cc:ba:2e:3c:7b:32:24:09:bf:
e7:da:4c:82:c1:3f:b2:ce:e9:8e:84:61:c2:13:ce:
f6:ea:6f:f1:ac:f7:93:aa:eb:3c:9f:57:32:a2:9f:
cb:68:be:17:27:ac:42:9b:7e:c9:0c:2c:a3:41:23:
e8:59:f4:c7:3e:5d:9e:2c:37:68:78:72:37:11:55:
99:0a:3c:a7:cc:89:f4:2b:56:88:ea:bb:6e:a2:f8:
10:e2:ac:93:e3:c7:00:db:c8:d8:d8:21:35:20:4d:
38:e6:8e:5f:62:b3:b6:93:75:34:e0:26:bb:7b:f1:
ee:51:cd:7e:22:7e:1b:1f:85:97:b1:cb:c6:01:01:
58:c0:cb:8d:53:62:52:2d:e1:7c:2a:47:cf:2b:80:
bb:59:51:fb:7f:90:d2:8e:ef:3f:2c:6c:ea:8a:e4:
b1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:86:3C:CA:54:7B:BF:2F:B7:7D:E9:AF:AE:CE:46:1C:74:C8:75:46
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d1:9c:2d:1e:de:22:e9:82:08:c0:7b:f0:32:a4:52:81:be:
53:f2:c7:27:5f:b0:25:b0:9b:19:b7:1d:57:6c:05:64:fd:2c:
73:54:c7:5c:e7:0e:43:b8:b7:69:06:6a:c8:80:50:94:02:66:
c2:1b:d2:60:dc:37:14:6f:d4:a2:8d:a4:6a:d7:9d:18:71:16:
14:ed:e2:b3:f2:fb:35:d6:77:30:78:2f:f2:33:0d:dc:50:99:
0a:d8:f3:73:34:a2:e6:40:da:de:34:32:4f:e3:d8:6e:b6:32:
d6:df:c1:59:47:d6:c3:4e:5f:f9:ab:08:cb:02:a9:f1:6f:9d:
18:11:6c:22:c8:81:d6:bf:fb:50:c5:86:d0:27:c8:a4:60:88:
0c:82:9e:b5:e2:5a:0b:3c:8e:26:18:53:94:32:4a:e9:a2:a7:
67:78:e9:5e:79:37:24:32:0d:d2:2d:70:fe:53:cf:11:94:2c:
77:7a:0d:08:26:5b:d3:0e:51:b3:8c:0b:ff:0a:25:51:4d:16:
19:50:c5:6a:ab:75:91:10:ee:1c:d6:1c:8e:da:47:9e:74:5a:
8f:87:c5:41:6a:0e:fb:4b:d8:d4:f0:a3:bc:f1:e0:7f:35:02:
74:dd:74:6e:f1:af:ea:3a:bc:fd:fe:49:8b:73:0c:19:79:af:
d2:52:9d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:48 2026 by rpki-client