
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json)
Hash identifier: GvVSIHWC2/GHuKvMSkF/7pLYcTCIZ6xL9hYGyUZghnU=
Subject key identifier: 13:EE:8A:B3:75:F6:AA:D6:1A:8A:51:74:96:34:82:D4:C1:48:FF:DB
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 019D98BDA3EABFF8E11DCB96D16CC0F9D970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
Manifest number: 18F6
Signing time: Fri 17 Apr 2026 00:00:58 +0000
Manifest this update: Fri 17 Apr 2026 00:00:58 +0000
Manifest next update: Sat 18 Apr 2026 00:00:58 +0000
Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=)
2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: T7KFT9IqSnL8whckjiFNYIcgh+f01AP/KTEplN+ZHA8=)
3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=)
4: 6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa (hash: Lpm2qdKvSHv1n64+iddb1tvoxMF6Y4LQAfrzqafISLM=)
5: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=)
6: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=)
7: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=)
8: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=)
9: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=)
10: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=)
11: _zgHSNgwAnxGvAKMk5omum7rI60.roa (hash: 1Jz0MZ9os9Ya4CaMGO/CHJzjBQRQzLAYl4B2MjOsxFw=)
12: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:a3:ea:bf:f8:e1:1d:cb:96:d1:6c:c0:f9:d9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Apr 17 00:00:58 2026 GMT
Not After : Apr 18 00:00:58 2026 GMT
Subject: CN=13ee8ab375f6aad61a8a5174963482d4c148ffdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:da:80:50:c2:79:69:58:9b:02:2d:25:0c:2c:
25:e9:91:1e:87:b7:f6:61:c6:06:7f:fa:0c:e4:1b:
1e:98:bb:00:74:8f:fc:2c:09:be:bc:6d:9c:b5:dc:
72:ab:c9:ab:3c:ce:ab:dd:d2:74:c4:58:05:a1:9b:
45:51:15:0c:07:fd:81:d7:dc:49:57:0d:da:8c:66:
35:cc:7b:6b:86:8f:ed:73:d8:1e:78:36:a0:bb:f9:
83:de:e5:87:b4:27:e7:af:b1:5d:f3:85:23:1f:15:
05:f6:db:77:5b:e7:9e:62:a8:31:ce:4d:12:d0:24:
68:e8:2c:54:63:af:dc:cb:40:20:f1:eb:3c:b4:08:
40:4b:20:00:0f:01:93:0f:82:ee:c4:c7:84:7f:bb:
67:1c:27:86:e8:5f:50:94:91:ad:0c:31:71:ee:a4:
18:3e:52:e0:65:4c:86:80:b6:96:63:b3:65:56:3f:
0f:57:6a:fa:8c:0b:95:c1:39:f2:18:47:8b:83:a2:
14:7b:1d:74:b4:1e:bf:24:97:39:c5:b9:64:6a:33:
32:41:1a:cc:c5:05:62:33:09:a2:68:3a:ce:4b:7f:
1e:15:18:49:39:99:74:aa:ff:14:91:74:c8:1a:ae:
e7:69:26:d0:fe:0b:58:0b:34:87:06:e5:90:bb:00:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EE:8A:B3:75:F6:AA:D6:1A:8A:51:74:96:34:82:D4:C1:48:FF:DB
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:16:94:20:f9:2e:0b:59:04:9e:9c:3f:da:b3:8b:fa:6c:93:
16:a4:f7:e9:5f:0b:3a:85:02:08:bb:23:ab:57:7f:79:eb:e7:
64:27:03:75:55:da:8e:20:77:d5:37:ce:26:d8:d7:98:ad:22:
61:8e:62:af:a4:c4:2a:59:58:a9:eb:11:df:5a:f6:08:20:09:
15:a2:37:c9:23:55:02:8b:4f:13:b1:47:5d:3e:6a:5d:2e:20:
70:9f:0a:19:fc:96:6e:e3:17:d7:33:33:18:6f:cd:33:fb:c5:
5c:b6:86:73:db:0e:ba:75:8f:4a:c4:2b:31:d4:a6:b0:2f:65:
8d:6b:98:26:c7:38:5e:16:e0:df:a1:3b:55:fe:30:95:c6:0b:
7d:7a:25:07:d0:06:71:13:8e:39:26:25:40:1b:87:fe:c7:ff:
0d:a2:19:a8:54:ee:b0:ab:b8:48:f1:0e:c1:3d:cd:06:54:b0:
74:95:bd:ec:de:2f:89:b1:5e:f1:ae:16:1f:6b:f7:38:5a:c3:
e1:47:ca:4f:d8:5c:90:31:24:67:c6:61:11:83:ba:f1:77:8a:
f9:26:93:34:a8:91:30:a3:a7:ab:36:ac:19:eb:1f:45:98:a2:
73:e8:20:69:4c:2b:58:6f:2c:f9:17:1c:02:fd:c2:a2:73:55:
0a:8c:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:40 2026 by rpki-client