
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: 6/xngeaYUu+PXSm/+sseEp9nRAzGmC9zIfGphfhijAY=
Subject key identifier: EB:9C:2C:F0:8A:D3:8A:DE:D1:F0:59:6F:41:42:37:89:54:E8:F7:56
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019CAD59AB3F447004144111B426BD092456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 1897
Signing time: Mon 02 Mar 2026 07:01:00 +0000
Manifest this update: Mon 02 Mar 2026 07:01:00 +0000
Manifest next update: Tue 03 Mar 2026 07:01:00 +0000
Files and hashes: 1: 29Rv_UEl6-ilxixgPbwouEBeR9I.roa (hash: NqpV6epyV/V/BxqmnDQYUJhls660HR8Q3Pqa7VupQfg=)
2: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: ntnO23S2eIJL5SJlRCg8ijMo0dw7ds1JKQDVDTrucHA=)
3: AAWvDfwb2jQSUWa9BYHOOcjPqc8.roa (hash: TG2n+ec91o1/npZ11uH5oNK4E3sR3ZKcNMfWgBS+6WU=)
4: Ahsz-tNL3LF_YjxGflfsbWY2EXY.roa (hash: IDB823/zK/udBkADZfcrEWPlrqEtUTwrSKR6Szbuvag=)
5: B6KVvgx5TM8VN3l8pwcEtXd1Zv0.roa (hash: 8nF8dktPdwqwoKApiZ3hvMdTDPbdz2wRKZCsJzWa0NI=)
6: BOOJwgifZtRIWDuJkBxvnWoyiJ0.roa (hash: V/G6nvIlcZvYbQSr2QvCL0JgCDmAS2PVZl2IojBI82Y=)
7: JqRZJ3yZS2NGw3E4q9F77DlBVPU.roa (hash: UPvHDY+QZmptAo1aMBQZCt3JHBBqlqPm63jjsEBEq9k=)
8: PBQ-z6lWkll5_xzrR2WCQOr2Qzk.roa (hash: /tL6eTwfwCwpcz2/AVK6n7Lt7RJFOtU3gDEp7Zh35Cs=)
9: Ucca3RaZdjMWnn67R04BLea-ttU.roa (hash: CzJfRjlyJl7P43rMU8tIstGzfSxyVareresLUP4UMaU=)
10: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=)
11: aMYCwmkdSXX4ZfDKhC1rWAMOjYI.roa (hash: nmzakxTfwrDVurY8/As0jECtOIx0LqRTcRnAOJxRKNk=)
12: b5PQ0LP3dQvaroi8uqIK4qRY8fE.roa (hash: XUgOw13/DeGWuBII7wDdMVowQZGJyVYWSAsGuDpvOtw=)
13: dmSFnJG8tpUAWfzyfkfxeOXBvEw.roa (hash: 2mYA9QNq//dbjFbk3bWUMlFN1KuLEJxjVXMiQX0jL5Q=)
14: m7EcG31gk4Uw0te4eJF9ztt2Hng.roa (hash: gFwk97kClWvXn+FH8Ous9hr20EHIEHjhNxf5KUqro/8=)
15: vGXTEVlZEvvy_OO65LppPnLWzds.roa (hash: qVUACJdOYqZMXJXhZVtMk9bckrNCEf6pmzMIUiKZwR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ab:3f:44:70:04:14:41:11:b4:26:bd:09:24:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Mar 2 07:01:00 2026 GMT
Not After : Mar 3 07:01:00 2026 GMT
Subject: CN=eb9c2cf08ad38aded1f0596f4142378954e8f756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:1f:0d:6c:52:aa:f0:59:7c:a6:aa:62:df:
7a:3d:ce:43:49:65:03:99:77:92:d4:35:ec:5c:8f:
9c:15:23:25:f7:f6:92:f2:fa:19:6f:57:05:15:f0:
a5:6e:b8:56:9b:6d:ef:85:0c:c9:98:2d:9b:84:9c:
02:ed:79:b9:a1:9c:41:f0:b4:01:f9:44:e6:2b:61:
62:ff:93:dd:b7:e9:ef:0c:73:3e:ee:d8:1a:b5:1b:
97:06:8c:70:57:92:79:ce:ad:d6:c2:fb:59:ab:08:
f8:7f:ba:4d:c9:b3:2f:6a:31:b3:92:29:ba:69:e4:
a6:4c:1d:1c:70:3e:06:20:c0:39:ae:b4:ff:ee:0f:
21:a8:21:a0:a3:79:14:64:bc:02:0e:a8:49:81:ca:
04:70:5b:43:81:f7:bd:63:8d:64:24:b7:12:2a:88:
b4:b4:c9:fc:8b:f8:e4:b5:0a:84:0e:3b:f5:ec:d5:
1f:fc:96:5e:10:06:f1:64:64:71:6a:25:eb:a2:4e:
9f:a1:85:6f:40:ab:b6:13:21:a6:71:19:43:a4:24:
e9:f1:22:ff:67:1d:fd:e8:50:d0:33:98:ff:57:d2:
13:ab:95:f7:06:bb:b3:16:57:a9:f1:4d:c8:03:3b:
f6:21:26:e1:33:43:27:07:23:16:54:10:bc:e4:00:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9C:2C:F0:8A:D3:8A:DE:D1:F0:59:6F:41:42:37:89:54:E8:F7:56
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f5:a6:41:0f:bd:8b:5d:be:f2:d6:83:e0:c1:85:35:f1:17:
6b:b2:a6:fd:e0:e6:15:a5:73:b1:b2:f5:63:6e:30:4b:76:b8:
22:51:da:d4:3b:0a:ca:31:01:90:e9:a2:fd:dc:de:9d:26:41:
40:ab:90:0d:73:33:af:84:6f:64:d2:4d:bd:29:bb:6c:78:dd:
58:53:09:3f:1f:74:d7:af:fe:65:9f:45:c7:12:e7:dc:f3:47:
8b:b9:00:7f:38:95:60:47:e2:97:56:43:48:3c:8a:2f:65:93:
85:37:41:b9:95:ea:ff:de:5b:96:78:10:c6:5b:5e:58:b4:ad:
14:ec:54:be:ab:d7:9a:eb:f6:85:3d:f3:0b:cb:a2:06:4a:8f:
7b:d8:cc:dc:11:6c:af:d4:16:48:62:71:0f:86:8c:ef:0c:08:
e1:e0:c6:47:6e:86:a6:5b:18:ea:0c:59:48:90:d5:24:6f:68:
20:f4:fb:c7:cf:23:99:bf:b2:b6:81:4b:23:af:fe:10:b7:db:
91:09:13:fd:12:a8:e5:ef:dd:17:39:bc:34:59:79:c6:8e:71:
30:0b:b8:22:9f:47:ab:25:44:d4:9c:e9:0d:2f:aa:6c:f0:fe:
90:41:ba:cb:78:bb:99:aa:c0:65:42:8d:06:67:b4:37:bb:a1:
07:6d:eb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:38 2026 by rpki-client