
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File: T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier: 7szVx58FkzzJfxDQinRfO5xXEXHtTj3SwuasSOV1wY0=
Subject key identifier: 45:B1:BC:D2:D5:6F:8F:10:32:81:14:67:21:3E:23:2F:51:95:EE:86
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 019FA7F4F5D9A04F1FE15E1BDCAE2724F765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number: 1A7B
Signing time: Tue 28 Jul 2026 09:01:16 +0000
Manifest this update: Tue 28 Jul 2026 09:01:16 +0000
Manifest next update: Wed 29 Jul 2026 09:01:16 +0000
Files and hashes: 1: 1-aRoA0WhlYlJc8wz6ycex6Zo2ac.roa (hash: sdFqzlSJZoMBZXBYF/7sSNH10IFmTEtJ+BqqB3vKvsU=)
2: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (hash: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8=)
3: 4BT3ESnzNjCT2x59JVbAAXxSXAY.roa (hash: O8CcngTVUlHleqwd4kGt0w16qDAwdr4oH0nwRI5FfLI=)
4: 67Hu1VCqZOSeOiCM6FEEFd3iXlE.roa (hash: Him9pl9KpdgeG8GWKYKiLJdFav7i0xf6FzUlhcxDHRg=)
5: 7ZTyX9adnTNDDr2DkH9w3SeIE7Q.roa (hash: TDggRWtskV5FNrfGL200t0vlFEUm+QOeNFcEHwtHFss=)
6: DFqAchiwJnzlSG4eyo-vOSeRNeI.roa (hash: N2RIPmZbJ5fy1derB4IMwjZbzNeDMo48frV/EdBPTzc=)
7: Ezkbpw5h6Yu188ximBXledMTyHY.roa (hash: EUfk52t0TP+il+Ji1SToM3ssr1h7ZowDd/it1ELPNV0=)
8: FuaYYjgBfEQcCzdt3IfIOZHBF18.roa (hash: lZIUFdAbzhx1VS24I+2a5RfR2Jz8EjNumHCTBfayC3U=)
9: M96SaOtXf2BYyJPHvAneKZXSlX4.roa (hash: Fjx5Jib6Xzn9dBAanulC/6wjKgvgmy9B+Oq0M30jiGo=)
10: MpedeZnqqfWdHaUYwzO5l8FT3pM.roa (hash: 75NfuiTmUQjPMCKkuZLw9T7cDXANU8tWdyz9AlGaZ6s=)
11: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (hash: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc=)
12: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (hash: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8=)
13: OjY3C6L-EuPc2t0Qn-e-3bjWy-0.roa (hash: OthyvAnziDLpR9g+pkOT+1ZzWC7VC/seTw30st0/H/s=)
14: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: x+LujM1Cw+27HF/E7loVLXnVaO8zhybMFTxhdsonJ60=)
15: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (hash: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M=)
16: VEwNY5P1vuA23oPruHvqJ6HFtjs.roa (hash: eZpyIVZzTVU8RDs8Mn5Dvw3csgwI8cTA6KbGalIl4hA=)
17: iGAec5WLgxQuZO87yGrv6vRcxNk.roa (hash: qbtBIjuoPTdaV1pke2Rgv7Qz00a7lyCwRwSyFcFeCb8=)
18: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (hash: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ=)
19: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (hash: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ=)
20: okpXovGo8Qws_PPRtlsVVUmZZzA.roa (hash: 4oR/V429uTC5kWQN94QEJqxEv4CSp9VQuHnF9qGLwmM=)
21: qyFRBJyuib1PnIx-vXa3UO6rHbk.roa (hash: ttUZYHflFlcNbkH75tZXAFD7K0f4LBSVLHQuKhH+hJo=)
22: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (hash: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0=)
23: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (hash: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY=)
24: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (hash: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:f5:d9:a0:4f:1f:e1:5e:1b:dc:ae:27:24:f7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jul 28 09:01:16 2026 GMT
Not After : Jul 29 09:01:16 2026 GMT
Subject: CN=45b1bcd2d56f8f1032811467213e232f5195ee86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b1:7e:c4:80:b2:95:50:f6:d7:3a:36:ec:48:
58:86:0e:20:83:17:e2:4e:51:4c:e2:47:c9:32:f5:
b1:b0:10:fc:16:86:2f:9c:1b:90:9d:3f:a2:81:1b:
35:8f:ff:2b:ea:89:f7:0b:ce:aa:94:12:42:1f:2d:
58:ff:6d:55:d8:c3:31:e1:9e:8b:5a:1c:e1:bc:04:
34:08:ed:53:70:6f:fd:16:06:ea:8a:03:af:dc:81:
b6:fa:a9:d7:1d:bf:95:be:f9:7b:f2:6e:a7:14:50:
55:7e:ed:10:ec:16:9e:b6:1e:33:54:5b:aa:47:66:
09:cd:e5:99:d7:ac:96:48:84:5c:64:22:fd:47:18:
7e:56:da:1c:fc:7a:b4:1a:b9:57:35:fc:bc:39:d0:
9a:0d:9e:ac:d1:98:e4:41:cb:9c:8e:ae:a5:96:e8:
86:67:1a:63:cb:42:b4:fc:a6:eb:ba:80:29:11:0e:
bd:c4:64:64:58:4f:85:5b:0e:f4:bf:58:1a:69:b4:
60:e6:98:f2:51:7d:ab:d9:d3:1c:86:54:24:fe:1e:
17:71:e9:b3:6b:fc:c5:0d:e7:ab:86:33:de:a1:0a:
b5:4d:6b:bc:78:df:8a:f2:3a:5f:0f:3a:3c:fc:d2:
8d:fa:17:df:47:37:18:91:bd:52:cb:9a:18:ff:6c:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B1:BC:D2:D5:6F:8F:10:32:81:14:67:21:3E:23:2F:51:95:EE:86
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cd:50:b2:e0:fa:19:64:e5:43:ac:c2:cb:f1:0c:03:08:20:
f0:e2:7a:70:25:df:e0:b4:7b:03:c2:6d:79:41:b7:ce:28:4a:
fc:ef:f1:be:3f:ae:2d:e4:40:30:e4:c3:22:7a:5d:58:b5:44:
76:3f:4f:f3:08:2e:1b:3b:44:96:c7:c0:da:0b:f1:82:b3:58:
e4:59:23:d3:a8:9e:f2:dd:cd:b5:6d:68:06:97:07:85:26:9c:
62:e3:02:5d:dc:b6:56:0a:6b:0e:e1:77:f6:9e:c0:ce:c4:9b:
01:61:ce:53:f7:37:51:55:4f:38:0b:06:e3:19:48:0a:6e:5f:
78:c1:16:dc:ad:63:73:b4:9f:59:56:a7:c3:63:81:b9:ed:a1:
b0:41:f7:ff:97:0c:e2:07:01:bc:f7:ac:dc:6e:75:60:68:e5:
0d:71:26:6c:0a:22:0d:af:bb:31:f9:d9:fe:dc:59:0e:94:99:
0f:c4:93:50:a3:9f:e1:a5:c6:52:7f:92:f2:16:78:56:87:6a:
ae:f2:e4:8f:04:77:50:99:60:38:5c:32:5b:03:fd:8f:6c:73:
ce:2f:17:29:65:42:f0:ad:6c:ab:60:c3:25:cf:9e:f2:30:0e:
ea:b8:3f:86:72:da:3b:ba:b8:19:d1:bc:93:66:9f:6b:15:20:
cf:85:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:22 2026 by rpki-client