
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: hiUCn2J6hxi9TfDKv8VC2gavqJNsHPkolLBYQRw2Mso=
Subject key identifier: 63:B3:BE:5B:26:04:2B:27:97:A4:92:42:D9:15:21:E8:A2:FC:0E:FE
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019FA89970AED023A13497BDDD7551D7F3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 1A51
Signing time: Tue 28 Jul 2026 12:00:55 +0000
Manifest this update: Tue 28 Jul 2026 12:00:55 +0000
Manifest next update: Wed 29 Jul 2026 12:00:55 +0000
Files and hashes: 1: 1--d0cnUCeMBBJAQCBol8GjOem0A.roa (hash: K1CkZ/qUDDNfccO9OiBBdc3yV0iu0FE3gUcsryaKkr0=)
2: 14gmHyQe4PBetMf4RzBQhNC2FOk.roa (hash: GGBNsYzCN+EF6PiC/qvnbnXzs5PIoYQwa6DEc9vP7DY=)
3: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: WcyDkDbU74U8jSRRqO6hztPkP8+zgZ9FYfSkuBDJras=)
4: 6DlgWAr1pze2xwhzVuH9SH83sUI.roa (hash: gbVO2/E/cSyLnCFbipnzOKJO3cIbi/OYiOvNNgSS+Wk=)
5: 8MxVvwEohbQmIikgrwper0uymEc.roa (hash: Xz+dhMsydC+qsZLDpjaa9cvEI5H7yFeVKoYAKozIz24=)
6: B6KVvgx5TM8VN3l8pwcEtXd1Zv0.roa (hash: 8nF8dktPdwqwoKApiZ3hvMdTDPbdz2wRKZCsJzWa0NI=)
7: EaIyfGeRC79erqoN_TV1V3pBgCI.roa (hash: fp/pHfcXfwK5Ba1oEm4wGvNYS46jMvtZK3LLVjXLYYE=)
8: H0kxSANgIFzJYh1HgidAJVrmV3A.roa (hash: NpCuBjNeagVZ61rXVGoQ4e37yykrFLHbhKwLm24ClZU=)
9: Kj0CSZRO7Ttjx8zTQ7TY2lYWk6U.roa (hash: 5ijTFRrYY4N4pS9N+fgT1g/tsE4VuTayoctiYwfJwSw=)
10: LhT4Mr7pBvmSebh_xpC6XvBDifs.roa (hash: /pqawyzvpLTnZE+ptaDtmcd+h9N5yx6aJ4Q7iNJd134=)
11: M7Qnaao-wDlPyDUa21pW7viJ6uU.roa (hash: Pb3KKeU2RFaohJ/loiF0Yw7/oOqNkzJemldZbia5xys=)
12: PBQ-z6lWkll5_xzrR2WCQOr2Qzk.roa (hash: /tL6eTwfwCwpcz2/AVK6n7Lt7RJFOtU3gDEp7Zh35Cs=)
13: QE7hnRKM-pIX463UZ_tra0EKYOg.roa (hash: fsT9JglSf+xfQNMVUetiVbQpKYSJUuYkpRqKMcd4NGU=)
14: Qgo-jNupET7F8UuDNqpiTrUhr_Q.roa (hash: v6myRWOIyHvBSB5K6wXjkQvrFI1AFI2YvdioGAkLuFI=)
15: T2NfzMdsMpViaAkLEjvuKknHJcA.roa (hash: o9QhHh2ECEBAp63dR2QCY67xVjrjcR7RnvJzXzoRqNQ=)
16: TwoQEmVWkVabFmL6zVszo7vMnUY.roa (hash: /LnMxaouyJTpcMVb8KiNbGv5/aFh1e/B9rqb2NOQWb8=)
17: UE4x2J_JjdAdXOITfo1JaB3GqZo.roa (hash: F8+2zT5bS88GS7Q+A9z996t58lNLXeHU3rrhcs+OftY=)
18: USXvFGnAypWHrQsUpHflyE7AkBw.roa (hash: leJb5YM9g0TdZzX8je+gHf/RsV+l7VFjkyGBSWLgWYo=)
19: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=)
20: Z4qJ0AuvFG9LwCUujh1SFAyCFEQ.roa (hash: L/2723303TsKIyZTz4LxjhNc7XDzNUykt0wbQqKmi1I=)
21: ZrPtSCJ532i12xugeZ1dO4rY230.roa (hash: dH4IWysW7Ys5TJ2lt17gZtfQSYeKivQxpHQG4qiY7zQ=)
22: cLWx9mOmhkJFiHX0vOhviqK5jPg.roa (hash: pz0fm9ldHmFbMZZys/irFjXMA+EOl7vaFP6O4HvjCBs=)
23: hEtZyqE_kfbZ2WGUYKSC0jBfrEI.roa (hash: CPA0tt0+lAYozU3bXwUoMHqEh8nMLbJsWqOdKpIaQuo=)
24: iPahdVFjnIMLFab7e1hz9AD8mnQ.roa (hash: X5DNApyaL3xMnN7g/7ZqxS0aZOIXDBxHJJjMjs9/8GE=)
25: w5ldQ0CjL0tGIL7RdlldMWQrpOA.roa (hash: QwbB2Dm20UEpXkRwmnRCF3k99p0EBKuROeuhoBVi3/8=)
26: x6TaUDjx_Xkt_2Lw0GlWR57EAlc.roa (hash: m5z3Yg3lZo67vrQykV72uJNnGiIVgvzyPCgBuqRvX2A=)
27: zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa (hash: ddUTwFfUFZpRc1ExRHE36LurAQIjxRiZ+75kFQEiqQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:70:ae:d0:23:a1:34:97:bd:dd:75:51:d7:f3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 28 12:00:55 2026 GMT
Not After : Jul 29 12:00:55 2026 GMT
Subject: CN=63b3be5b26042b2797a49242d91521e8a2fc0efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:91:d2:01:27:fb:98:74:7b:31:a0:a2:e3:
94:5b:d6:af:5e:5b:57:bb:60:c6:bd:1e:50:25:f5:
49:e6:ad:2b:b6:4b:bb:cc:03:a5:81:aa:16:09:80:
70:99:c2:21:d3:8b:62:b6:c8:fd:a1:a1:9f:96:36:
b3:9c:9d:71:e8:9d:81:ee:55:13:cf:50:71:e4:6b:
eb:c7:1b:67:54:48:2b:b4:d6:ff:9c:ed:4b:e5:31:
9d:f8:9a:53:cb:22:f8:40:46:9d:76:ea:91:53:f9:
bc:06:ae:ca:9b:d1:9d:ee:23:39:36:36:44:a2:e4:
0a:da:35:41:1e:6a:ec:86:36:25:f0:b2:93:de:d3:
f9:73:25:b1:b6:cb:0f:68:74:99:1e:ab:fe:3f:2f:
f4:8c:db:6a:47:d3:c9:c7:89:a4:f1:3d:5e:d2:77:
10:06:75:57:94:08:7e:a0:28:d7:11:e9:9c:b4:6b:
80:51:c1:46:ad:e6:e2:30:36:56:e5:fd:5b:8e:db:
80:75:92:32:d4:16:7a:0e:20:c1:6e:d7:e7:eb:19:
40:49:35:f0:b5:b1:3f:ad:bb:57:1a:e8:bf:41:ef:
d1:06:27:1b:a3:81:f6:99:83:8e:e1:4e:e7:d8:bf:
63:56:d2:41:ff:38:3d:7c:d8:26:39:29:a6:64:7d:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B3:BE:5B:26:04:2B:27:97:A4:92:42:D9:15:21:E8:A2:FC:0E:FE
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3d:31:e9:78:a4:fd:f2:8a:b5:7a:07:d6:4f:8a:c8:d1:a7:
f2:db:a4:47:e2:e7:75:8f:f4:78:65:35:bc:dc:f2:7a:2d:6d:
a2:d7:10:be:5d:31:9a:f6:26:07:62:9e:b0:2a:ac:6d:44:ed:
59:b0:b5:de:01:bc:b1:9b:ed:e6:41:88:20:3e:e8:99:a3:ba:
15:fc:53:d8:c2:00:0e:e7:4c:2e:fa:ee:bb:c1:0d:7d:62:a0:
7f:e5:19:2a:57:a2:6f:0b:1d:5c:3e:a1:7b:c0:43:df:92:d3:
23:93:76:d4:d6:b4:22:4b:e9:1e:f5:a6:68:4a:ca:65:78:09:
b0:48:d8:f1:7e:fa:30:c7:b8:dc:03:70:f1:74:6a:9e:d4:1d:
d7:1f:67:ee:05:e1:06:57:a7:00:c4:52:f8:7d:33:1d:4e:c5:
62:a6:82:af:96:cf:d1:3a:b8:0e:95:9e:04:9b:98:ba:0c:fb:
47:76:26:8c:19:e8:19:7f:30:87:66:21:7e:ed:5d:8a:50:26:
b6:21:44:50:93:41:4d:f7:ee:1e:bc:07:22:3e:44:c4:90:c2:
d7:5b:07:93:23:1c:75:4f:08:74:2b:60:a0:3e:a1:94:6b:fe:
18:79:da:cd:c6:fd:ce:aa:e5:32:72:13:a7:3e:83:f5:be:c9:
dc:b6:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:24 2026 by rpki-client