
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File: 4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier: BGUS/rOYZiFf9K8oDSxOvcI1/uJobMNjw3CbAlYnYzc=
Subject key identifier: A4:EF:B8:FB:92:55:08:C2:FF:19:A6:83:7D:51:ED:9A:A4:60:AF:9B
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 019CAAC72332A99F8E4FFB1DE904155C9291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number: 1874
Signing time: Sun 01 Mar 2026 19:01:43 +0000
Manifest this update: Sun 01 Mar 2026 19:01:43 +0000
Manifest next update: Mon 02 Mar 2026 19:01:43 +0000
Files and hashes: 1: 253R_HjPAe_ULUSoVVCZut_DWoY.roa (hash: D4Z9WrfO5QDHXjS9ZWgcaTJ1VBuEVEWpyCuirpjL6iQ=)
2: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (hash: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE=)
3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: pO+be26WbyNuO2qFOfGRRGyaCPrBxEccSh1H9P26wyo=)
4: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (hash: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI=)
5: 7w4SlqD5_TJRCUYNtP45pq1RdHc.roa (hash: x5KSqzcfRNfCh39tqIYQzi+K7RIdwi2UYjNzfLXTpBE=)
6: Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa (hash: yVvI0HdEf/H1QrUvDUpGVPHK9JSyS/y9MuhDAFTD8KE=)
7: NRnc0MiLNgbuvfsNBN_chXpyQsY.roa (hash: C5qgrl3mdnbFvtHeaqRaus49s6OOOYlaRV1VkekoU7w=)
8: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (hash: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg=)
9: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (hash: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM=)
10: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (hash: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw=)
11: TYy0_7J7KDgPFXIQznrWkATWKoo.roa (hash: S3jUpVJhOWtNPETQx6yVyRUSNY9H4HAxcLvNiQwtEuc=)
12: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (hash: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4=)
13: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (hash: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU=)
14: iLNpsH5sQgKCwekV5rgPGnMfzKE.roa (hash: RwjZuN1jrdzwn1SBSVFpZYYoKBswRMbYm4F6OicSmhU=)
15: irISjxv6hlEOs-X4Vplb5dPSU00.roa (hash: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs=)
16: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (hash: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng=)
17: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (hash: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA=)
18: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (hash: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo=)
19: pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa (hash: eZJlHsrZQ1146ReM9KzwDX7BATtaYNhY9J9MSAdbqxA=)
20: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (hash: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo=)
21: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (hash: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ=)
22: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (hash: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:23:32:a9:9f:8e:4f:fb:1d:e9:04:15:5c:92:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Mar 1 19:01:43 2026 GMT
Not After : Mar 2 19:01:43 2026 GMT
Subject: CN=a4efb8fb925508c2ff19a6837d51ed9aa460af9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:14:ec:cc:95:a7:bd:b4:1c:8d:28:66:c1:
83:ca:64:78:4c:8d:62:54:84:20:49:b4:37:64:4a:
4c:17:73:24:d9:d3:4b:25:08:42:aa:42:50:2b:5b:
da:47:ff:4c:28:f7:77:40:b8:f7:27:68:4b:1d:87:
6c:3b:55:b5:fa:50:86:3c:79:65:9f:f2:06:7d:de:
f3:d9:96:b0:51:0d:16:9e:03:b5:c9:95:fc:80:51:
ec:ea:09:98:39:02:9c:62:6c:ad:2a:77:b0:82:b5:
2f:91:d8:e6:01:9e:73:66:b5:b2:34:d3:9c:25:19:
27:c3:93:4c:b8:9a:d5:3e:05:49:b0:60:61:22:a7:
cc:df:d4:fe:bc:50:da:00:da:1c:74:d0:40:0f:f4:
77:8f:f3:bc:27:68:86:3e:e6:53:f2:a1:a0:8e:f9:
10:a1:22:99:ef:6b:ad:96:59:82:80:53:49:22:5e:
bd:cf:22:c6:54:b2:0f:63:e4:0b:6c:02:ed:43:b4:
a3:4e:65:91:6e:ed:a1:22:43:e3:46:69:90:c2:a9:
13:34:f8:32:88:f3:5a:35:bb:0b:e5:1b:b1:c3:60:
7d:1c:e9:9d:c2:59:b5:ec:4b:3a:2d:9f:2c:fc:3a:
09:f8:4b:1c:1c:c3:21:c4:ce:4a:53:f7:9c:a5:71:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EF:B8:FB:92:55:08:C2:FF:19:A6:83:7D:51:ED:9A:A4:60:AF:9B
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1b:40:1e:1d:69:1f:82:12:f9:03:6a:a9:f2:60:87:17:50:
8c:4e:a0:92:60:cb:86:6c:22:fd:0b:fe:96:bf:9c:73:85:fa:
a2:61:8b:50:78:3f:1a:37:d7:00:d5:c3:7f:47:33:a9:c3:4f:
21:91:a9:c3:6a:ce:4e:a8:04:9b:89:04:4b:6f:db:40:85:57:
ef:16:73:5d:f8:47:80:68:b7:15:bc:e4:9c:61:ec:a9:5f:20:
34:a7:46:93:97:b5:5a:9d:81:4a:02:df:d3:6e:d7:21:a3:6c:
aa:02:19:aa:b5:ad:81:d7:61:1e:54:5d:4e:01:e6:e2:34:b9:
74:c5:26:02:3a:e0:1d:9f:f4:ec:07:3a:5d:d8:4d:b4:0f:2e:
f8:29:c5:f9:d0:ee:1c:5b:e0:1a:d8:81:c1:a9:76:42:34:78:
a9:c8:a1:84:b0:87:5a:0d:81:c0:2f:27:79:11:ee:e4:64:3d:
d9:4e:ee:9e:3c:6f:82:49:28:19:65:59:4b:54:a6:c1:d1:f6:
42:27:c3:61:60:f5:f9:79:d0:75:ee:b7:d6:49:cc:88:19:24:
64:62:4f:c6:8b:16:f1:09:f2:d1:84:c0:dc:31:62:e2:37:28:
7f:cd:6c:dd:22:f8:32:7a:ba:db:2d:73:ce:79:07:d9:72:a4:
31:b9:20:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:03 2026 by rpki-client