
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json)
Hash identifier: sfz0xgr5tKzuwTTGbUI1+FBvQnpPMdp8hmfdkRY1X4w=
Subject key identifier: 96:3D:12:4D:A6:B7:2F:D7:FD:3D:92:5C:55:0C:08:94:3E:A2:06:96
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 019FA89A292695BDDEADE203F4AA9F9B51D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
Manifest number: 05AD
Signing time: Tue 28 Jul 2026 12:01:42 +0000
Manifest this update: Tue 28 Jul 2026 12:01:42 +0000
Manifest next update: Wed 29 Jul 2026 12:01:42 +0000
Files and hashes: 1: 0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa (hash: XeB6K6T8p6c7RwUL3urLh05fa1KeuyMXlU3sgTg6kwI=)
2: 1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa (hash: h7CqqSl2LQjJmhCLF1MeDbbfhgUi7N6nFb/MApYSj04=)
3: 3gai81UGgfLPbQftciy3jGMkOwI.roa (hash: kiaWDVp8FEgRP18QSL61NeSbPNIL/KFNeSuP3Gkl88Q=)
4: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: luTRVtLFHJOC4NEzhymYKUDCHW2jdCb/11CCCV/M0vY=)
5: C6uUnb-GcnQfqIvL7gX32SouFUA.roa (hash: W8gXCQVnHQZj4Fig+/xRtixgdI9dMwYVfKpFVE38sls=)
6: Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa (hash: qthe4k3qdM7snNafkTyRsJRCRgLD006FLSrfqpvtf/M=)
7: P2DOHQZk6uadyNsFYKTvp0Yljns.roa (hash: drWm8UAEyYp0gk5pD0pZZGlNfBy4kmJrj0xpKvuccbI=)
8: dUz1_BGuEwa1si0sC79DuRXSTMw.roa (hash: EggvRKKO8J9fQom0RkmSKJQOGfA94V2BXYRDmutG/IA=)
9: jG8u0DdMeVDnzAs9ajzk41GxjYI.roa (hash: 2i9+DbG6rnpNrbDbrTa+vcvNqwfsERMCoNQAt/YdO9A=)
10: pMSYP5P8y8eLfNyDEeXV3zc-nps.roa (hash: enJ6YCYyQ+/wl2mffuOqzFyRpZKc2xjCWdqck8SgcXI=)
11: pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa (hash: 2qg2UMxY9Ne99nZ+znUrMGap65SST+L3iSUILMH/2YQ=)
12: uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa (hash: 5GA0c289K1eM0975vFreXvBAvts4XCEq2R0BlZHe6C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:29:26:95:bd:de:ad:e2:03:f4:aa:9f:9b:51:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Jul 28 12:01:42 2026 GMT
Not After : Jul 29 12:01:42 2026 GMT
Subject: CN=963d124da6b72fd7fd3d925c550c08943ea20696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:09:01:30:72:13:a4:80:b9:da:9d:10:da:
5f:61:6a:01:b4:22:45:ac:bd:b3:40:71:5b:7c:ee:
2d:25:34:2e:42:fc:3c:ac:fe:c3:a3:ad:38:9e:26:
b8:cb:8f:ef:f4:a0:dd:35:8b:9b:e3:b2:d2:73:db:
ee:ed:35:91:03:35:bc:3e:28:94:e9:b5:b7:b5:c9:
c0:46:89:c0:d6:54:6c:1e:d6:76:16:de:db:47:80:
3c:be:d8:23:bd:a5:21:dd:6a:3c:04:64:0f:b0:8c:
74:45:54:5e:3d:91:b5:e9:a0:8a:b8:59:81:83:31:
55:7f:67:01:5c:81:8b:7d:a9:f9:6f:f1:cb:0c:6d:
c2:54:18:84:7e:9c:f0:10:e8:c0:2a:ca:0c:fd:3f:
98:30:ea:45:51:7c:88:f5:d9:93:c7:d2:46:18:26:
0b:8e:60:d2:30:54:48:23:74:e6:8a:3e:e7:14:81:
c9:89:3c:ba:26:84:cc:ac:99:45:43:89:a0:74:79:
ce:f0:26:a0:6f:15:5b:a8:40:23:72:b2:03:e3:75:
90:57:2a:d9:36:84:cc:bb:9f:f4:40:1d:93:ae:39:
15:40:72:0a:74:47:7b:93:7f:cd:16:7c:4f:b8:57:
d5:46:14:87:aa:e1:fc:92:85:12:c9:85:5d:af:33:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3D:12:4D:A6:B7:2F:D7:FD:3D:92:5C:55:0C:08:94:3E:A2:06:96
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:7f:1b:59:d5:a7:6a:2a:63:aa:34:c0:6d:23:26:54:fd:04:
cd:0f:97:d6:95:b4:21:5c:e4:0b:2d:5b:ee:b3:b0:c8:50:08:
ad:eb:86:2d:a9:a5:eb:1e:8b:81:ee:c3:2b:17:42:87:58:69:
84:38:ed:8f:8c:94:0b:13:69:21:1a:6b:77:93:4c:aa:ed:cf:
eb:1e:6e:90:e4:d6:13:8f:c4:d5:bb:e5:ae:2c:4e:b4:b2:e2:
88:b2:04:7f:91:67:de:89:23:f4:62:b4:31:42:d1:7e:32:25:
66:cf:fe:d4:5c:44:f6:08:f9:e0:2a:22:8a:64:2d:e1:70:05:
32:ac:3f:8b:f9:10:e4:46:15:37:fc:1d:8f:1e:1c:57:3c:4e:
04:4e:a4:f2:39:84:62:fd:c8:15:a8:0a:d9:5e:7d:60:8c:31:
80:58:a2:98:3d:4c:2e:47:01:31:b9:bc:39:51:4e:6d:e7:24:
d2:92:92:bb:68:db:37:9a:13:ab:9a:22:1b:01:11:49:96:fe:
5b:bb:21:9b:a8:1a:28:07:d2:cb:42:be:a8:c5:2b:8f:ed:1c:
70:70:20:4d:6a:9e:31:fe:37:d4:c4:bb:93:d7:9a:81:67:6a:
f0:3e:3f:e2:92:a3:cf:94:9b:cc:a5:ad:dd:ea:5e:f9:1b:78:
95:b0:24:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:30 2026 by rpki-client