
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File: T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier: pG9waN0kvFH3u7N0/94wh7VOHQAqU8FKE4cIm7C4vsg=
Subject key identifier: 67:64:9F:B1:D8:F0:88:18:5E:7C:E7:3D:2E:0C:92:92:B8:44:26:EA
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 019D9AABC7B1ED1207FA40C482FBEAF4F994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number: 1969
Signing time: Fri 17 Apr 2026 09:00:42 +0000
Manifest this update: Fri 17 Apr 2026 09:00:42 +0000
Manifest next update: Sat 18 Apr 2026 09:00:42 +0000
Files and hashes: 1: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (hash: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8=)
2: 4BT3ESnzNjCT2x59JVbAAXxSXAY.roa (hash: O8CcngTVUlHleqwd4kGt0w16qDAwdr4oH0nwRI5FfLI=)
3: 67Hu1VCqZOSeOiCM6FEEFd3iXlE.roa (hash: Him9pl9KpdgeG8GWKYKiLJdFav7i0xf6FzUlhcxDHRg=)
4: DFqAchiwJnzlSG4eyo-vOSeRNeI.roa (hash: N2RIPmZbJ5fy1derB4IMwjZbzNeDMo48frV/EdBPTzc=)
5: E77-yFQRh84D0qTULRJEF0OTucM.roa (hash: jEZp2gqKhSoyIk5JyO1cabqqkVlR2zTup+Or6BPEgXU=)
6: Ezkbpw5h6Yu188ximBXledMTyHY.roa (hash: EUfk52t0TP+il+Ji1SToM3ssr1h7ZowDd/it1ELPNV0=)
7: M96SaOtXf2BYyJPHvAneKZXSlX4.roa (hash: Fjx5Jib6Xzn9dBAanulC/6wjKgvgmy9B+Oq0M30jiGo=)
8: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (hash: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc=)
9: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (hash: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8=)
10: Np-SgsMbvNtUeV1Q78-Ul_LgtAI.roa (hash: FpZOxRp9m2d8Wj5Wy6a90uOf4hQ5Liav+WcFTy+XdBk=)
11: OjY3C6L-EuPc2t0Qn-e-3bjWy-0.roa (hash: OthyvAnziDLpR9g+pkOT+1ZzWC7VC/seTw30st0/H/s=)
12: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: KF5nzFwBPNhIX+W03I3kQ1W9Us0c2cEF0t9cP4bZCz0=)
13: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (hash: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M=)
14: VEwNY5P1vuA23oPruHvqJ6HFtjs.roa (hash: eZpyIVZzTVU8RDs8Mn5Dvw3csgwI8cTA6KbGalIl4hA=)
15: ZrACWZQMbi6NxGaCnX9YMBCOCN8.roa (hash: OlqjwKoWnqX+XWjymWXMgysC4FA6tYi6yFNdSVG5cWA=)
16: iGAec5WLgxQuZO87yGrv6vRcxNk.roa (hash: qbtBIjuoPTdaV1pke2Rgv7Qz00a7lyCwRwSyFcFeCb8=)
17: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (hash: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ=)
18: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (hash: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ=)
19: okpXovGo8Qws_PPRtlsVVUmZZzA.roa (hash: 4oR/V429uTC5kWQN94QEJqxEv4CSp9VQuHnF9qGLwmM=)
20: qyFRBJyuib1PnIx-vXa3UO6rHbk.roa (hash: ttUZYHflFlcNbkH75tZXAFD7K0f4LBSVLHQuKhH+hJo=)
21: rAV_y4-NevcPXbza-t6ZOR9FvHc.roa (hash: 5pvfB3nTTbHi/Ny0ZoNFS5BiI3yuVYiNAtvSGsVUR/Y=)
22: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (hash: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0=)
23: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (hash: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY=)
24: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (hash: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c7:b1:ed:12:07:fa:40:c4:82:fb:ea:f4:f9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Apr 17 09:00:42 2026 GMT
Not After : Apr 18 09:00:42 2026 GMT
Subject: CN=67649fb1d8f088185e7ce73d2e0c9292b84426ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d4:e2:1c:1c:b3:4d:9a:75:75:a7:74:ff:70:
b4:34:f4:89:65:24:f0:d4:70:30:6c:1e:64:63:8b:
75:8c:a9:a3:b5:8c:21:18:4f:a5:11:0b:6e:19:88:
ee:cf:90:5c:e3:8d:aa:52:c5:68:33:e6:f0:45:c2:
6f:1e:fc:fc:de:7a:75:80:10:2b:67:b0:e3:70:5e:
a2:2f:d1:dc:d1:d2:ce:64:a6:c0:cb:d4:34:aa:46:
d8:32:27:24:2d:e9:77:7e:29:04:7b:70:b4:35:c0:
24:26:33:21:58:ee:57:20:40:ff:67:98:f0:ac:7a:
14:53:a8:4c:53:89:d4:17:21:2b:c1:2d:59:c6:39:
1b:9d:93:1a:53:e6:e8:ec:d2:2f:23:44:39:a0:08:
11:7f:8a:92:ca:d5:b2:d3:9a:0a:81:76:9b:84:53:
61:fa:3e:33:0c:28:ad:61:cc:55:e6:b1:72:74:50:
07:63:ba:46:79:1e:75:7b:99:a8:a8:52:89:d9:e6:
24:69:70:d8:3b:8e:bd:5c:70:82:0f:94:b2:18:88:
9f:51:4b:49:d3:e2:c3:80:8a:b5:87:49:b1:1f:b7:
f2:b7:ea:e8:ba:f3:ab:51:95:00:71:64:35:7d:fd:
8d:b0:41:03:0e:12:f3:4d:36:4e:f0:9e:7b:61:1a:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:64:9F:B1:D8:F0:88:18:5E:7C:E7:3D:2E:0C:92:92:B8:44:26:EA
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2e:56:f5:6d:4b:23:49:1f:48:cf:41:f7:71:01:5d:6d:94:
23:07:13:e8:32:fc:b1:43:31:80:d1:34:ce:61:00:39:c0:06:
7c:e0:ac:80:83:d3:f5:3a:e9:a7:65:b6:fa:21:c5:9b:3b:83:
b3:6f:d0:41:d2:33:a5:ed:d9:bc:f1:2a:59:f8:f7:42:f9:ac:
d3:d4:1a:7a:b9:83:24:33:a7:95:d5:68:f7:23:38:d1:b7:32:
29:bf:b5:f2:03:a3:1a:15:48:54:56:5f:b9:18:23:a9:84:56:
40:e4:0c:d8:34:2b:a3:08:5c:db:86:c0:87:55:ce:a4:c5:fb:
a1:3f:19:da:01:70:3c:cf:d0:e9:ad:87:6e:e3:32:37:59:bb:
b1:60:cb:11:98:44:46:8a:0e:10:ca:c2:51:59:aa:0f:5a:3d:
fc:8d:17:cc:9b:19:a0:35:e3:da:f5:4b:02:9b:17:2e:dc:25:
52:75:86:c7:8a:3a:15:31:eb:5c:35:22:20:b9:62:de:bc:ea:
e1:fd:f8:7a:1a:df:dc:72:3b:82:a7:25:ca:ae:55:0f:ac:ed:
00:7a:b3:37:72:81:77:6e:97:61:29:64:b9:73:d5:dd:fe:a4:
21:38:43:87:eb:93:92:54:6c:c5:6a:bf:9d:91:92:09:c9:1a:
69:c5:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:15:10 2026 by rpki-client