
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File: T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier: josCxCCQgKs5Yc/9v3OvzpTti/UaznnBTqfiPvNh7xc=
Subject key identifier: 3C:D8:0C:00:B4:F3:36:07:F6:88:B4:11:8A:F1:A7:09:37:1E:37:38
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 019CAA5865E44DCDD0D125C5E39D800B0BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number: 18E5
Signing time: Sun 01 Mar 2026 17:00:45 +0000
Manifest this update: Sun 01 Mar 2026 17:00:45 +0000
Manifest next update: Mon 02 Mar 2026 17:00:45 +0000
Files and hashes: 1: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (hash: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8=)
2: 3DKyG4yqxD-RCxqPWmT7N7olh-A.roa (hash: PJ5W+9gaDI7CdrxxRKkNpvIJyqlsEgvjqhtTWlW7+xo=)
3: 4BT3ESnzNjCT2x59JVbAAXxSXAY.roa (hash: O8CcngTVUlHleqwd4kGt0w16qDAwdr4oH0nwRI5FfLI=)
4: 67Hu1VCqZOSeOiCM6FEEFd3iXlE.roa (hash: Him9pl9KpdgeG8GWKYKiLJdFav7i0xf6FzUlhcxDHRg=)
5: AQd6696DS58WSqKOJB3_PgGA6ww.roa (hash: LGXodTKuNu4kXpvG5ujn8tNfaAjmgD5yZwsMvUZmhpE=)
6: DFqAchiwJnzlSG4eyo-vOSeRNeI.roa (hash: N2RIPmZbJ5fy1derB4IMwjZbzNeDMo48frV/EdBPTzc=)
7: Ezkbpw5h6Yu188ximBXledMTyHY.roa (hash: EUfk52t0TP+il+Ji1SToM3ssr1h7ZowDd/it1ELPNV0=)
8: M96SaOtXf2BYyJPHvAneKZXSlX4.roa (hash: Fjx5Jib6Xzn9dBAanulC/6wjKgvgmy9B+Oq0M30jiGo=)
9: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (hash: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc=)
10: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (hash: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8=)
11: Np-SgsMbvNtUeV1Q78-Ul_LgtAI.roa (hash: FpZOxRp9m2d8Wj5Wy6a90uOf4hQ5Liav+WcFTy+XdBk=)
12: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: rNP/boa/hPPgZ5FBtBtnELdaykmXrnwZDxeAdZy4vkw=)
13: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (hash: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M=)
14: ZrACWZQMbi6NxGaCnX9YMBCOCN8.roa (hash: OlqjwKoWnqX+XWjymWXMgysC4FA6tYi6yFNdSVG5cWA=)
15: fEr16b1lvokT-7p2GF-BJ0nwjqw.roa (hash: 4kMeEbpMFnB2cA2N94f/QrIzzEsMpOa1QK/37ueLqzY=)
16: iGAec5WLgxQuZO87yGrv6vRcxNk.roa (hash: qbtBIjuoPTdaV1pke2Rgv7Qz00a7lyCwRwSyFcFeCb8=)
17: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (hash: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ=)
18: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (hash: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ=)
19: okpXovGo8Qws_PPRtlsVVUmZZzA.roa (hash: 4oR/V429uTC5kWQN94QEJqxEv4CSp9VQuHnF9qGLwmM=)
20: qyFRBJyuib1PnIx-vXa3UO6rHbk.roa (hash: ttUZYHflFlcNbkH75tZXAFD7K0f4LBSVLHQuKhH+hJo=)
21: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (hash: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0=)
22: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (hash: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY=)
23: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (hash: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:65:e4:4d:cd:d0:d1:25:c5:e3:9d:80:0b:0b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Mar 1 17:00:45 2026 GMT
Not After : Mar 2 17:00:45 2026 GMT
Subject: CN=3cd80c00b4f33607f688b4118af1a709371e3738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:4e:b3:25:af:e7:6a:7a:1a:cf:e1:46:e5:
00:66:41:63:19:1b:85:c6:80:c9:f3:4b:bc:b2:c2:
62:9c:b8:94:e8:e1:a1:38:23:0a:e4:3f:9d:a4:01:
8d:2a:d6:88:d9:d7:35:1b:91:56:59:04:02:5a:58:
19:a8:c8:85:1a:47:d9:98:c4:63:6f:45:83:ce:f3:
94:15:a0:8e:00:c7:52:1e:6a:dd:79:6e:47:58:77:
08:46:37:fb:24:59:36:c6:89:83:51:59:a8:b2:fa:
22:30:a9:83:e0:29:d9:f6:5b:11:24:3a:f1:dc:c0:
cb:a7:74:2b:71:db:57:0c:75:a1:bf:29:a3:e6:99:
00:05:27:bd:43:b1:50:05:a5:30:8b:15:63:3a:39:
9f:a5:d9:8a:bb:26:69:22:61:f3:db:29:50:3c:bc:
d4:c4:22:49:87:c0:f0:5e:c8:d6:f1:b8:98:28:91:
15:5b:44:7f:10:a3:5c:7b:39:be:45:9b:b8:75:34:
22:6c:87:20:d1:a1:ef:7a:d8:57:47:51:10:aa:21:
94:b5:e4:88:d9:35:74:fd:41:4a:55:3d:b3:66:31:
1a:2d:57:92:cc:9d:7b:ea:df:fe:f4:ef:9f:a3:69:
98:cd:71:05:59:8d:49:43:08:7d:1a:9a:13:88:30:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D8:0C:00:B4:F3:36:07:F6:88:B4:11:8A:F1:A7:09:37:1E:37:38
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:15:c2:99:69:e8:e8:45:5b:58:f5:72:2f:60:2c:2c:d2:04:
6a:c3:37:e1:f1:a7:f9:20:a4:2a:e3:60:c4:ab:2d:9d:1a:24:
1f:7e:c0:92:dc:8f:a7:55:8e:b1:8e:f2:4f:5f:69:9b:94:3a:
c5:1d:d1:7a:07:99:5d:22:6a:57:8d:c6:5c:42:1a:46:dc:07:
9c:79:87:66:71:17:b0:f3:b6:f2:0e:b1:31:3c:af:9c:96:a3:
28:69:01:4b:48:1c:39:23:01:a0:a2:15:f0:1e:60:3e:bc:80:
6b:a3:ba:84:c3:e6:dc:1d:15:0e:3e:a3:b5:f9:5d:ca:e3:bd:
9e:66:3b:09:3b:db:41:ad:ad:ee:fb:f2:e7:e0:66:54:ae:c0:
f6:f1:85:72:37:69:a5:b6:a9:80:38:fb:18:77:65:5e:94:90:
9a:0b:50:a2:13:f9:6f:45:c6:44:91:10:05:8b:55:72:d3:a2:
be:c4:e7:ce:c7:7a:76:b3:b1:79:06:ce:6c:21:a1:9f:a3:77:
61:eb:81:33:2e:84:dc:14:f6:5b:64:b1:d9:f4:84:ad:32:6d:
68:5f:b1:5b:d5:e9:7c:f4:28:78:09:e6:9e:18:ec:f1:0a:15:
66:fa:fa:70:94:09:e2:6e:44:1f:4c:22:a7:e0:40:de:d2:e7:
42:a3:b2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:21 2026 by rpki-client