
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: oDRiWtTpNGex2WGu0Jdbb4xNv951vkTuBuvZjl2O37c=
Subject key identifier: 5D:00:D9:AF:FF:C9:5D:1A:82:69:BF:0B:0B:2D:7F:51:14:89:2F:06
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A0C2563CDFCFDBF092541E783628CB7E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 1B2B
Signing time: Mon 21 Sep 2026 05:00:26 +0000
Manifest this update: Mon 21 Sep 2026 05:00:26 +0000
Manifest next update: Tue 22 Sep 2026 05:00:26 +0000
Files and hashes: 1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: j8gg6hv290Dn6MxSZCk+MZ1Nv2Cbspvw8hIiMY6XKAc=)
2: 6DlgWAr1pze2xwhzVuH9SH83sUI.roa (hash: gbVO2/E/cSyLnCFbipnzOKJO3cIbi/OYiOvNNgSS+Wk=)
3: 9-Pohzrk-GfEO26UigGLQdLJ5LM.roa (hash: EPYycU2WAxzj+yLpGaTsCA1/RIi1UbCCCRWYLB4Q/h0=)
4: BKrXZmCPzjDJeoMATTIUCly8RMI.roa (hash: 0jP41FvG8z+VmpVhR+SHdcHSIxObtE+cEfVhbqGGTzs=)
5: CFccTSuCEIxalR4ALqPdkAzUO7M.roa (hash: kaoUX+bTmXS7CQqlA/MKZqDGlkdoafsR1N6tmoItSeo=)
6: DIoNrmpQjSgOtSSDaoVlE1M8a74.roa (hash: 8EDhoGEvZWxcOl5QR8SMI35B2oKzz+sS9FfHtqdv38c=)
7: Dvm1ivM5p4ePpgysDtLtoLHwJ5w.roa (hash: QPVOPL6nSnWbsKxxKr4oQ5BFOYUcMw/3uW2oYvYKLmo=)
8: IcS9gzH0eVbJZYVzF-ivAp7O2rU.roa (hash: 0hau0OArhlXEWJAb5CUvyK22h+wU1rPbDc4uf9VrqFg=)
9: Kj0CSZRO7Ttjx8zTQ7TY2lYWk6U.roa (hash: 5ijTFRrYY4N4pS9N+fgT1g/tsE4VuTayoctiYwfJwSw=)
10: M7Qnaao-wDlPyDUa21pW7viJ6uU.roa (hash: Pb3KKeU2RFaohJ/loiF0Yw7/oOqNkzJemldZbia5xys=)
11: NYIUKgptziTmjTuzB89rR5OoJ3w.roa (hash: vBhk29CF4pjp5Kwvmdk02ywPzzfme1nc1O7+7goRrqs=)
12: Q8CsEAtSTanzJY3I7fvSE-uMeuU.roa (hash: AbxzldFhMYObOkio0+jbvaPCEAk722DareoqH/SdcdU=)
13: T2NfzMdsMpViaAkLEjvuKknHJcA.roa (hash: o9QhHh2ECEBAp63dR2QCY67xVjrjcR7RnvJzXzoRqNQ=)
14: TZaomzmIodYFdWS4xPASiRih7SU.roa (hash: DGb2GTBIONw507iw5JiwGCh82nK9eqmR5vddiYtWS24=)
15: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=)
16: VSAqL3uYvPnHYbEbZZ_xRkDkbLs.roa (hash: PJJ/NludIQbq1BPXLL1xXP43tupoRdcznnHVwxJEOeU=)
17: Z4qJ0AuvFG9LwCUujh1SFAyCFEQ.roa (hash: L/2723303TsKIyZTz4LxjhNc7XDzNUykt0wbQqKmi1I=)
18: aVgebze3DGF-KEsMnZC5Ko2CIfY.roa (hash: NfZpKGjWtpW8R47mtlOQxNS8rkEPFNCDlcl++B9KFvk=)
19: g2mq5fXw0aZ88BSIIPCaVM6cI9s.roa (hash: HTPkfWurE/QkJy0L1mUBje2pSgdAEd5QgAQCEntV908=)
20: hvrECtRtxVPUHDXzjKdAlcyRjog.roa (hash: d5snX7+Hc4RUYD6A+fmRwRD4YilkH7XfRNO8PBtC+DY=)
21: iPahdVFjnIMLFab7e1hz9AD8mnQ.roa (hash: X5DNApyaL3xMnN7g/7ZqxS0aZOIXDBxHJJjMjs9/8GE=)
22: sfD_I9hBRYkOn_cay96ab4iJ7OI.roa (hash: ulc2pO09BnmdKiTvj11ZGcEPXuzLVftL+Jw2RoVDtsk=)
23: w5ldQ0CjL0tGIL7RdlldMWQrpOA.roa (hash: QwbB2Dm20UEpXkRwmnRCF3k99p0EBKuROeuhoBVi3/8=)
24: wnan_W7zCPprToqepPHW7EUykg0.roa (hash: eqswj0sa1030vJf6t6fs8wRbb8GrMkLO8GUWPgVpPBQ=)
25: x6TaUDjx_Xkt_2Lw0GlWR57EAlc.roa (hash: m5z3Yg3lZo67vrQykV72uJNnGiIVgvzyPCgBuqRvX2A=)
26: xKKgMBYggYrOzddWnjoXfABzYtI.roa (hash: CRfn67QEd4oVTEk3kHUBSolPZ3Du9hm6IXw4Z34egdI=)
27: zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa (hash: ddUTwFfUFZpRc1ExRHE36LurAQIjxRiZ+75kFQEiqQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:3c:df:cf:db:f0:92:54:1e:78:36:28:cb:7e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 21 05:00:26 2026 GMT
Not After : Sep 22 05:00:26 2026 GMT
Subject: CN=5d00d9afffc95d1a8269bf0b0b2d7f5114892f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:e6:7a:e7:7f:0c:53:d8:8a:99:44:1d:c7:
93:7c:82:2c:df:80:c6:3b:ef:f1:7b:6b:01:a6:ca:
01:ac:d7:6b:2a:d7:8d:e0:7d:51:a5:74:b2:52:0f:
ab:71:d4:99:e0:7f:a4:2f:01:7d:81:8f:11:da:80:
22:7d:9c:89:61:69:c0:09:0d:fe:a5:05:1e:9f:b5:
26:70:17:d7:28:1c:ac:34:e9:6e:96:6c:3d:0e:f8:
de:e8:3c:83:42:e6:8b:f4:ec:e1:92:6f:c1:05:d3:
46:ed:0b:dc:d2:53:78:1d:94:b8:2f:6f:65:10:1a:
c2:1a:7a:f5:aa:0d:47:6e:d2:0b:ad:6a:7c:47:9c:
5c:4b:70:6f:f6:8d:fc:ed:06:78:be:f9:71:9a:1a:
f1:51:03:35:2e:57:13:b9:e6:c4:98:94:af:1c:9b:
7c:d6:3a:e8:eb:4d:74:57:b8:35:5a:20:15:35:b8:
68:a5:8a:8e:03:68:b2:03:a3:99:d3:cd:74:71:29:
1d:21:97:64:28:0b:e6:86:05:0c:de:8a:9b:98:0b:
ab:83:44:53:7c:6c:3e:19:24:e2:35:f1:55:39:a2:
60:ce:fb:74:90:3e:54:48:ce:90:6a:af:d5:28:5f:
95:b1:0b:86:c3:71:a3:d7:4a:2b:d9:d6:69:0b:6a:
69:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:00:D9:AF:FF:C9:5D:1A:82:69:BF:0B:0B:2D:7F:51:14:89:2F:06
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:36:9f:79:ec:f5:96:04:86:11:01:44:89:a7:a9:e5:b5:7b:
2a:89:c4:c7:b0:12:6c:0a:95:8c:ed:00:b9:fb:97:fa:40:16:
fc:d3:e1:61:98:2a:20:b6:0c:82:40:4d:98:10:7d:1a:87:22:
af:eb:8a:66:3d:75:b0:61:f2:30:a7:1f:60:09:f5:bf:b1:ca:
ab:80:81:ee:2e:2d:a2:15:26:0e:ba:87:90:21:5c:8d:98:d0:
66:17:bc:77:42:a6:ec:c6:9c:93:3b:dd:8c:98:7d:b2:57:3c:
cd:a0:e1:39:e2:88:89:79:84:14:79:9f:2d:03:cf:1a:c4:74:
c5:86:27:c5:81:c2:a7:57:60:34:27:47:fa:0f:dc:ee:32:df:
22:12:aa:ea:56:be:9e:ea:f1:48:03:9a:25:65:5f:8b:85:ef:
73:88:e3:aa:54:57:14:38:f4:89:2a:dc:36:1c:86:ca:0d:9b:
b7:57:01:64:8e:8b:53:f2:e2:72:73:98:6e:52:a9:04:01:af:
60:a9:0c:63:24:7a:bd:78:31:27:18:a4:cd:1d:27:58:20:86:
d9:50:cf:d4:ef:3d:24:cf:ef:53:2c:d4:f8:ba:00:a3:33:39:
3e:4a:ea:4d:20:78:f3:77:b9:f0:43:0c:d7:c8:9e:a0:e6:18:
1c:d3:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:36:56 2026 by rpki-client