
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File: 4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier: IovbxCqr1hE74R0hFZNyuP12/nk/Fc/D6Q7wkcwU5O0=
Subject key identifier: 0A:CD:5B:2C:1F:FC:58:37:BD:68:E6:68:89:1A:E3:3A:FA:86:A3:76
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01A1C4B1478183154DAA17CD019320BF8F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number: 1B1B
Signing time: Tue 10 Nov 2026 09:01:54 +0000
Manifest this update: Tue 10 Nov 2026 09:01:54 +0000
Manifest next update: Wed 11 Nov 2026 09:01:54 +0000
Files and hashes: 1: 253R_HjPAe_ULUSoVVCZut_DWoY.roa (hash: D4Z9WrfO5QDHXjS9ZWgcaTJ1VBuEVEWpyCuirpjL6iQ=)
2: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (hash: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE=)
3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: oHvKNnF+nsYTWMk3qvxcPM08k4QaNTIjgdfZ9RmQw1o=)
4: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (hash: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI=)
5: 7w4SlqD5_TJRCUYNtP45pq1RdHc.roa (hash: x5KSqzcfRNfCh39tqIYQzi+K7RIdwi2UYjNzfLXTpBE=)
6: ICLuLWUf8K-OPFkcJRYxqsBX-og.roa (hash: KNef4xAbXPZkefsWRYunbzCYlTuRbde30AOI76m0/d8=)
7: NRnc0MiLNgbuvfsNBN_chXpyQsY.roa (hash: C5qgrl3mdnbFvtHeaqRaus49s6OOOYlaRV1VkekoU7w=)
8: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (hash: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg=)
9: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (hash: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM=)
10: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (hash: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw=)
11: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (hash: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4=)
12: cU0PtialT7blBe0g9qAA9y45m3s.roa (hash: qQwsFpRRdUCSG6sBnp8cTf5HUrsZ8Vc8DYuoZkHY9Hk=)
13: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (hash: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU=)
14: irISjxv6hlEOs-X4Vplb5dPSU00.roa (hash: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs=)
15: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (hash: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng=)
16: kI6qZM_ZaitHrWvGolHhHlDVsrQ.roa (hash: Q3M/OMYn5lm9sKUydcSkDpIKl2s8dMnBBJUvs2+PkIA=)
17: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (hash: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA=)
18: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (hash: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo=)
19: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (hash: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo=)
20: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (hash: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ=)
21: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (hash: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:b1:47:81:83:15:4d:aa:17:cd:01:93:20:bf:8f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Nov 10 09:01:54 2026 GMT
Not After : Nov 11 09:01:54 2026 GMT
Subject: CN=0acd5b2c1ffc5837bd68e668891ae33afa86a376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5d:10:db:23:30:2f:7f:af:87:a5:46:c1:77:
9f:82:02:18:78:ed:79:9a:74:fa:4c:2d:4c:01:64:
d5:92:f1:9b:ab:a8:a1:d3:70:73:93:85:eb:4a:2a:
d3:60:0e:80:e9:ef:0f:62:cb:6e:d2:d2:a3:51:20:
18:4d:13:9b:2e:fd:d3:0b:ac:2e:05:45:53:24:85:
22:98:46:a2:bb:06:d3:1a:86:95:c1:4d:12:4d:e0:
aa:01:e6:6b:d9:b1:48:cb:88:e9:d2:63:7e:ea:5b:
b2:95:83:70:72:b8:f7:23:6d:d4:b2:28:cb:15:85:
11:a9:ad:ca:d6:3d:66:4a:50:05:b8:81:b3:c2:aa:
8f:69:05:20:f8:a7:8d:ef:19:b9:b3:25:a5:0c:00:
ce:7f:88:fb:3c:64:a8:e0:c2:fa:ec:7c:16:60:8d:
85:9b:18:44:bb:95:62:58:8e:52:43:05:59:ce:d3:
8b:09:71:54:8e:81:e0:82:6d:8c:04:39:64:09:e8:
26:7d:e9:9b:f4:41:27:6c:f1:6c:7c:cc:29:41:9b:
36:3a:9d:03:b6:8d:58:d1:65:17:6f:a2:4b:bb:99:
af:d4:b1:aa:73:d5:8e:a4:c2:c9:2c:e2:ac:38:da:
69:08:6e:a7:10:18:81:aa:1b:e4:02:e6:d8:00:90:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CD:5B:2C:1F:FC:58:37:BD:68:E6:68:89:1A:E3:3A:FA:86:A3:76
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ac:67:96:98:f0:45:38:9a:7c:a8:bb:a6:8c:7d:e5:eb:d9:
af:a1:69:5b:2a:4c:1c:2e:c6:40:59:c0:7f:5e:83:09:94:41:
e5:14:4c:b1:32:d5:ef:95:cc:e3:38:75:25:56:d5:49:49:fd:
08:9b:1a:04:1c:62:54:9e:8a:0f:2f:a0:61:5c:58:77:40:60:
db:f7:8f:39:dc:21:3f:a7:f3:b2:03:70:c3:53:7b:b9:29:19:
e1:21:fd:f5:97:43:85:7d:37:26:0a:51:c9:aa:05:9c:f6:27:
b1:35:c0:0f:ff:9c:a0:a1:b4:d8:02:c5:80:82:51:04:67:67:
44:d0:0c:c2:48:61:ce:f7:24:93:d3:72:87:45:6b:89:a7:98:
b1:0f:db:56:bf:59:58:1b:e5:6a:d0:32:c6:f3:a5:4b:5d:03:
59:29:fa:f0:f7:97:c3:3e:90:3a:aa:df:c2:0e:49:04:fe:a8:
32:97:07:54:35:c1:5d:e1:7c:7b:f4:cb:36:4b:81:7a:f1:1e:
5f:dd:f5:08:d1:2e:81:01:dd:52:7c:11:bf:8b:26:4b:f0:b0:
9c:84:58:b0:c5:d8:8f:61:51:2e:89:32:58:ce:92:28:ab:8c:
08:77:78:e1:cd:d6:fe:16:15:6f:b0:13:cb:d3:5a:4f:21:df:
24:b7:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:16:07 2026 by rpki-client