
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json)
Hash identifier: c4Oej+qsTUS8LsOeDokVIqhs+j37VtnfAFYqqGxF04U=
Subject key identifier: D7:0B:6F:65:1C:FE:AB:4B:A2:ED:83:EC:CC:A6:5E:77:1F:FF:B9:B9
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019D9998E6C2099275DBF3638D25BF1210C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
Manifest number: 1482
Signing time: Fri 17 Apr 2026 04:00:27 +0000
Manifest this update: Fri 17 Apr 2026 04:00:27 +0000
Manifest next update: Sat 18 Apr 2026 04:00:27 +0000
Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=)
2: 18Szc_NOHV7yuL-RPwFFVIdly00.roa (hash: ld/2o13pONoCjqn2WT6haOPdokqq4iF1vU3cu4RZBY4=)
3: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=)
4: 7lXBjbngAvV9gHuyOcicow6UdVo.roa (hash: BQCTu2EQ42JTon6DFlUxY4dueGNRFijDWqRTzuT0vfE=)
5: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=)
6: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=)
7: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=)
8: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=)
9: iYmfX-Xr2WV-ryyeYGg2faUJK3c.roa (hash: 42KCUZzyT040surN1C17Y5tix8TWbmapzOCWog8iRSA=)
10: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=)
11: oSKHmVNGFh3OpJke3WnxdXvCjgc.roa (hash: Jbe/LRuw53xo+FdeFOv1OWeqAR3sX4SCDTXs5bJaUEE=)
12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: 1SIv0CJKrWIe+8+1WTsAfPodekRcOMGUmu5McHSw5/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:e6:c2:09:92:75:db:f3:63:8d:25:bf:12:10:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Apr 17 04:00:27 2026 GMT
Not After : Apr 18 04:00:27 2026 GMT
Subject: CN=d70b6f651cfeab4ba2ed83eccca65e771fffb9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:d1:04:85:30:9f:9d:d7:05:ea:d7:56:75:
de:8a:10:0f:45:38:2f:85:69:33:79:7d:9b:e3:46:
59:a0:f5:fb:76:da:28:6c:0a:a6:1f:7d:09:f7:91:
92:a4:d6:df:d0:95:6f:70:e1:b2:9e:4c:86:21:ad:
95:2f:dd:c1:2f:17:f5:f3:38:27:02:fc:cc:62:31:
ba:57:8a:49:90:1e:34:15:eb:ff:09:d3:32:41:d2:
2f:82:6b:ad:65:c9:4d:39:42:2b:3a:1c:26:95:9b:
29:1e:b9:c8:76:bf:fe:60:8b:d8:51:20:66:73:29:
84:6d:49:86:7b:21:b2:91:a1:35:ef:c0:3e:ef:db:
d4:8a:83:96:65:7c:3e:24:08:2d:f2:a0:7e:d7:ef:
21:b7:24:9a:3b:06:40:ce:16:ff:e6:91:4c:1b:d4:
66:37:74:f7:f3:84:b9:74:6d:7f:c4:fe:1b:87:b3:
6b:79:e6:32:2b:1f:f4:8f:39:30:5f:20:67:32:d0:
ab:67:4a:81:7e:7e:35:cf:98:51:7b:03:0d:4b:db:
30:aa:5c:24:b1:c5:02:67:be:0e:6c:22:70:3e:42:
69:2c:97:78:72:2e:4c:07:d5:dc:c1:0b:c4:f1:4f:
74:84:6e:77:21:70:1f:aa:1b:b2:41:05:86:43:a1:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0B:6F:65:1C:FE:AB:4B:A2:ED:83:EC:CC:A6:5E:77:1F:FF:B9:B9
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e7:35:c1:2c:ad:38:d2:86:22:8b:31:e6:3e:1d:56:92:b3:
8c:87:68:0f:02:bf:cb:fa:9b:5e:28:96:b5:23:ba:5f:3f:d7:
6c:40:68:28:9c:00:6b:34:86:15:d3:f2:31:30:d2:35:d6:72:
ad:da:b6:8f:64:4b:eb:53:d0:40:88:6b:55:22:ac:ac:27:c3:
8b:10:5a:59:9c:f1:59:7a:cd:31:79:71:2e:1b:97:39:d9:05:
d7:53:ec:f2:87:82:d7:18:16:9f:1a:42:c4:96:01:eb:e9:5f:
8a:8d:a2:db:4a:fd:46:06:ab:a7:8e:74:0a:55:f5:94:45:4a:
e5:9e:b4:74:ab:87:52:a4:31:70:8f:7c:0b:cf:b7:43:96:e1:
0a:3d:45:ec:c5:b4:2d:5e:ed:68:7d:65:02:fa:9e:2a:b4:8d:
8c:28:70:3e:b6:63:53:2c:f1:2b:03:c3:bd:39:23:9f:ea:8f:
c3:04:fd:41:8a:ef:28:64:75:0a:c7:1c:30:2d:7e:7b:e3:24:
9e:71:9e:86:e8:75:c2:28:2c:57:bc:c6:f4:73:18:eb:b2:82:
72:b2:08:1b:b8:61:3a:60:90:e8:c0:b5:c8:1d:5d:31:7d:e0:
61:84:78:20:e2:6c:56:2a:87:93:bf:f8:20:b7:9b:46:98:8e:
14:b5:72:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:16 2026 by rpki-client