
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File: 4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier: NV5tS+VSnE4KXcUxlCVsvk22x1Y8cHjuWnFaGvN4qaA=
Subject key identifier: 43:76:00:B7:E9:81:4F:18:61:DE:3B:7A:37:92:B7:43:4C:C5:A4:89
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019CA9EAD8EDB82A73144D655707CE857802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number: 1084
Signing time: Sun 01 Mar 2026 15:01:06 +0000
Manifest this update: Sun 01 Mar 2026 15:01:06 +0000
Manifest next update: Mon 02 Mar 2026 15:01:06 +0000
Files and hashes: 1: 0wJmdEsIc6piCPouXDNhCCpeSRQ.roa (hash: WR/b5AIQMqRHnWFbdkMYzAfrUMySKK0esBYcUMp0I1M=)
2: 1-vtr-ZbKFLqCrCL4n-xz6fooRVM.roa (hash: 8OGyoZSoVzNVbnBPq2Nr5h0HCBQam0szMSBgqEIT2F0=)
3: 3Od8fkiX1npNiDZbFwY_RwqIDb0.roa (hash: YkQ0Ohp5FtKM5KyAeZ1EG5zQjArcLpeRdP8tRQhDW5o=)
4: 3icWZ0l13CoXwoj1OeRHgYert90.roa (hash: wsyKBXi0gaGQCqdHDVQuBk8nFgShwbyQoPjf+Y1r3Qk=)
5: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: KwJTIO0BTx1Lp/BUrepVPKQMso+wRlcG1UZVUJBEyuo=)
6: B3yLGefLT397xZdjHJwz631sCBE.roa (hash: P6wNlsDfWCADEkpFOrgZZ2Ab/AJtAHaxxAaBB273BL4=)
7: CYqAHaNWukk-ByTGpHKXz3QjQas.roa (hash: wiU3rtjJU2K2wdSE2doiy1m3e5+T4eVxinx3u0FFHbQ=)
8: CjAdakK4jK3bzKfmCY1veFE0mhI.roa (hash: Z5oJMwQkoJMOahrr4QbJ28O5skdvLzLVhMGsjLOYb1g=)
9: DaL6DrQU6YvEd9tbw2QEDernfSo.roa (hash: PDFvGFyMPEFwoJ82KdbJF1LFRTBdlPDreWAzq7vqBvw=)
10: ElgFDiuFJ69k81EViaoKdimWii0.roa (hash: vH/Gl8FmnuQcMuHJNXm7DwH6UJxli5lPah4lngAmhDk=)
11: HbjKNiw4d3SEg0dTumigj0PGsTM.roa (hash: nW4tvMSwJMcIQf6OvnWLF1rZzRY1A2YzlXfxp1Y/+GE=)
12: KO3mbecsHziWft5oSlk1_j2d34M.roa (hash: f8pLS1dd6igj0miudYVCW/atCJnG106OYVdNd0IpsmE=)
13: LtoQvzCaMW0D-GhISv0hO8NnPOs.roa (hash: NcaX+GMamiFW/3NMIXtO3ttNk67Gbq5SGUiAVxBO82M=)
14: Mt4AQ66nGpX52iVTjG_QPgMc6j0.roa (hash: Nn/pGbRWzSFMrKeCQn+bGQau+a99ydSdqv5kVOvZ67Y=)
15: N1JKb0FFXQeFO056LNLZt0AcBTg.roa (hash: 9gdAbxSyKjz/FFsTkvgbz7Pc5fs2gWtqKE0xfMDTTMI=)
16: PGb3WfmNkg-vd7_bMLWrMI64YOo.roa (hash: 2T8TrrpJ5qPs1XJ1BBW0PIQrNd+77h/Qy7gmuuyjpQc=)
17: QihhibEPB5qBqDDL6gcnigScDv4.roa (hash: N2raya6LVsxTexeCuwvK4jCueOUDvTQXZAxYtw1gUJA=)
18: QkwhGPSuc7rlqlghZY18xAA7lM0.roa (hash: nAcfbt2ttDYq5SWZx/GAjI41TdBLCEtgGu5tjf8Jj2A=)
19: UETzsQ14kEiR9ZLBzc1Rs6TQ7y4.roa (hash: mJed5UC6Bhm9fWUs4Xbxi43CN/6iMd2evk2vhZxj36Q=)
20: UKBBl2CEsf7LASA1NJwQJHQzz9k.roa (hash: ab2nFWhFJ9hGPjgo6z6rHmRSN+V9cgkhljBpQZmUSxQ=)
21: VTvixWkQMb81xqq15q9rkLGzQns.roa (hash: ryhXeNesoIfEURs7jvSEodrx0dn3DmlePOw6kt2lyr8=)
22: XnT8EkhkZ4ckaqupDpvRmKmadIU.roa (hash: LOQvwDLJiJLfGtgfx8v+cSvzCjMCe4xzGPCXgXKQfOA=)
23: Z_dhLOch6TYTV9CL8O4Hm4DfmCk.roa (hash: DcqTrnDilb8Z9To81j5+j4/Q2r+QSmdq/GQFcIQwzfg=)
24: Zrsa450bIKbfMqfbbE0wrvaBwFw.roa (hash: gV8XetexIxC9mhduNSQKWVKTs+c7DiemkcjGYNaBiRo=)
25: c219QE8Kcog9UvMKST6A1X7Uzw4.roa (hash: a1rqIUue8AkZGET3xy9zr5OLEkOjTEfxL6rRJ8ZMXeY=)
26: cIdwaFMnaN_nODeJi4PVUhETURc.roa (hash: EsxYv3rUwNDmqkV+Qln5iDukLQEgXsjFwz/7NvltVAE=)
27: duHlauWDxyB55t783Auf0OjNQSo.roa (hash: Ir+MKAjO46cZx7B3mNkleV8ECfCdxsl+P9B/SC4lcqo=)
28: eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa (hash: BfuIVukiDtzihzfQ4gw6mZ6lR5/EYYRABfHkY7DcUFE=)
29: gHMPiXlYiR1x4sp7jOG4nP5jGK0.roa (hash: 5XQJ6M+b3MHT2W1uXJ+885106HdpcwsdlORrc/CZ+DA=)
30: iAuw5JQ3mAXjxY6QWG9RY3yTA-Q.roa (hash: UOg7kVgDqAJH5jfqy325Mwl+Vg9DYyHjwnI/jC5MC+Y=)
31: iBGEz-tej_FAq47hFEt3LXiPlAU.roa (hash: ZRiJC5SNia2u87xjZ0fDw27CPe3Mlgd/yd0/2xGYRfk=)
32: iYbozmAhuZXekfOxptVTlOnvYkY.roa (hash: /WhAE5gig6ZNzm82pZ7dm3ZCXNI4YTK2pP/V1Kuxu6Q=)
33: ikDfAfW-xsNgatn_b62wDmF7okY.roa (hash: bq2Bb+Lv2eW3TT7vk5HpQA8N5AAEROY0+VpdWIj88l0=)
34: ixlHNu2_mnzAJBGs42gMZOXVS-Q.roa (hash: 4ukNbla1Rh/IrJg9w1Y8a9K5puzNuFrwpCnA9N5ug2I=)
35: n7USEOktH5zuMAuITWQF7AXRczQ.roa (hash: ikLG4Fs9JJDgwb3XKOBoWhu8ubnMCzT/Buk9vuX9UaM=)
36: q1ZdG5coyImHf6ftDV_fJN05zN0.roa (hash: /FMVwyaiBz1KIIrw5ZuZxGbjVJzRieiWH5j+l/QSUDc=)
37: qQS_F_mT_BWgZgn64x2PrZ0b3x0.roa (hash: K0/dXe9UF+Om/KZSB0gVADYHMqhu4p7EFjTPAov2x7s=)
38: tL1Tl9zmF3hdb1BWPFCSKDcR1Go.roa (hash: QmuBppG53RYStdASLaqGl2PS2gbLglSq+UlA/UliIXg=)
39: u-R-koqCp8nRkuD0Y5r1BH5-lsw.roa (hash: 8g2tRV4JH7xDIu/08ND0MTZQHMbLS8qbUqp1ZK+nfA4=)
40: uzgAI7hlsT6K2Lvcaksi6ldtZag.roa (hash: dI/B0kk5Noti3Cu9uZ1OWU7GUEx5+dx7Iuukl1B+l+U=)
41: xIdot6FAjw7dfRg6u_ByXcj3lDM.roa (hash: 8+XjLrCilLhi21bpw8d0FOgL/oy8JtzB6AjiHlyT9fw=)
42: xXH0TOzedy66ElcG97fd78bjZKs.roa (hash: o+POX8ljapRUWPdy9GAdGv8frb0Y/VYtVrs0Cw6iNAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:d8:ed:b8:2a:73:14:4d:65:57:07:ce:85:78:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 1 15:01:06 2026 GMT
Not After : Mar 2 15:01:06 2026 GMT
Subject: CN=437600b7e9814f1861de3b7a3792b7434cc5a489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:df:a2:ec:88:a0:8f:69:01:f9:4a:a1:ad:
f3:57:7e:f2:6d:1f:35:f0:98:8e:6b:9a:f0:9c:d4:
96:19:f5:56:05:59:1b:ee:c2:43:bc:a0:70:05:ee:
40:07:1a:9d:16:00:21:6d:4d:98:f3:c0:0a:f2:8c:
b5:6b:1f:c1:7a:70:a1:1b:97:69:ff:f4:a7:5c:95:
44:f7:88:78:9d:32:ae:e4:74:7c:95:f1:42:25:0b:
25:1e:03:4e:10:55:61:71:3c:c1:c1:a2:15:64:40:
45:40:28:a7:11:97:2c:b7:14:8a:92:de:52:c9:ef:
49:21:1c:a3:f5:58:46:87:42:67:f4:2b:31:a6:40:
2c:4c:a0:fe:aa:3b:03:26:e1:f2:e9:5b:be:ff:fe:
83:1c:f5:91:b0:00:86:75:48:8e:56:cf:ac:25:00:
a4:93:f2:25:7e:42:47:74:84:77:03:b1:97:7c:95:
1d:dd:b2:d2:81:ed:a0:4e:61:a4:cc:9f:4a:a4:76:
50:76:57:4c:c0:40:83:a3:fb:05:b5:a6:20:30:e0:
51:66:b2:1c:91:f5:5e:dc:b7:1c:ff:99:19:43:57:
5c:d7:e6:99:b5:e0:97:5f:f9:ec:45:07:c6:9c:19:
1e:c2:70:43:69:2f:28:77:d4:7c:2e:f3:10:b7:79:
21:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:76:00:B7:E9:81:4F:18:61:DE:3B:7A:37:92:B7:43:4C:C5:A4:89
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1b:18:5d:99:71:26:a0:94:52:63:d2:69:cb:9b:44:c8:94:
98:d5:58:b4:fb:6d:7b:63:88:13:f1:18:31:b5:18:3d:e7:c9:
d2:ee:9f:6d:57:fd:32:f9:be:cf:36:8b:86:43:be:07:3b:99:
05:10:45:9a:87:08:d0:02:90:39:d8:62:36:0b:9b:10:c3:df:
04:8d:3e:59:48:58:43:bb:18:0c:f4:3f:0e:26:bb:1b:3f:94:
fc:23:74:86:36:be:64:62:2b:15:66:30:90:6b:8f:5c:90:bb:
1e:03:a5:3d:04:b3:63:b6:42:0f:e2:56:f2:7e:a8:d5:b1:38:
b9:c0:92:de:82:0a:5b:3b:88:e6:7e:54:54:69:57:8f:2f:b1:
bf:70:6c:d2:dd:33:72:af:8f:e2:fb:59:a6:d0:63:00:4f:0d:
4d:29:a4:b0:f2:96:03:a4:5d:a9:ce:ac:75:40:30:ed:73:a3:
1c:33:0b:31:fe:7d:0e:f6:e7:ee:f2:9d:dc:01:77:d9:df:e6:
b1:81:75:3c:85:dc:8a:63:ba:94:42:ff:1f:9d:bf:1d:86:34:
93:7e:69:60:3d:19:26:a8:7b:fe:03:f0:33:b3:6f:87:79:16:
c4:83:30:f4:24:64:19:ff:fc:97:ac:55:b8:5f:c9:6c:2c:56:
21:7b:97:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:05 2026 by rpki-client