
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier: 3BBAyFwztrRYQpfvuGQmwoTkMtT0KTOAwYKKzXD+kGM=
Subject key identifier: C9:BE:8A:F7:2F:B1:73:B7:3F:F7:0E:A5:5A:72:32:31:2E:15:DD:D7
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 019D98F45006A581DDF362EC1726492CD6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number: 18E7
Signing time: Fri 17 Apr 2026 01:00:41 +0000
Manifest this update: Fri 17 Apr 2026 01:00:41 +0000
Manifest next update: Sat 18 Apr 2026 01:00:41 +0000
Files and hashes: 1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=)
2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: CFxYa1qJc1MULHUiWFpSdHhatdWEenvgTzaUu1Ibyro=)
3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=)
4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=)
5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=)
6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=)
7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=)
8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=)
9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=)
10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=)
11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=)
12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:50:06:a5:81:dd:f3:62:ec:17:26:49:2c:d6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Apr 17 01:00:41 2026 GMT
Not After : Apr 18 01:00:41 2026 GMT
Subject: CN=c9be8af72fb173b73ff70ea55a7232312e15ddd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:47:e3:28:d9:14:9c:fd:9d:55:b0:db:8e:
47:9d:71:3e:3c:b2:bf:c8:87:cb:b7:4c:66:78:05:
a2:25:36:49:fa:a9:8e:6f:2d:e5:0a:e5:1c:bb:ba:
c1:76:45:b8:cb:07:4b:ca:35:eb:fe:ee:0e:16:0b:
a7:11:23:d7:cf:e4:06:c3:d5:54:8b:53:21:a9:2e:
e8:5a:c2:11:95:46:7c:b1:e0:df:93:4d:59:82:fb:
19:68:ec:99:88:cf:0d:c6:41:9c:6c:bc:50:36:20:
e0:4b:1b:4d:13:83:66:3a:59:74:00:f5:43:4b:15:
1a:44:3c:8a:50:0f:b5:43:bd:07:a0:e6:79:0f:3d:
5c:f6:1a:8b:18:e9:02:2d:79:ad:83:0d:1b:9c:a5:
34:00:10:4b:75:f5:cc:c6:19:0c:1c:e8:44:e0:35:
27:6a:ee:e4:1e:d3:97:a5:55:9a:e6:c2:d2:68:56:
6a:a8:c2:ec:bd:69:e4:5a:17:19:7a:21:6d:fd:c5:
11:14:24:d8:aa:f4:97:f0:d9:33:cc:a2:c1:7a:05:
de:4a:27:93:50:29:9d:5e:71:8c:b7:24:02:93:f1:
22:4b:14:e3:8f:75:e0:74:00:ea:21:1f:df:4a:80:
36:c0:c0:4d:0f:b1:a5:f7:e3:d9:93:e5:1c:56:e3:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BE:8A:F7:2F:B1:73:B7:3F:F7:0E:A5:5A:72:32:31:2E:15:DD:D7
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:36:9d:20:a3:38:91:2e:91:99:90:c5:55:81:d2:ee:53:76:
8f:42:cb:0f:ab:01:c1:c6:26:43:55:cd:e8:10:57:78:d5:50:
7a:74:80:df:c6:99:ff:db:f4:53:13:fc:0c:21:3a:c8:58:8a:
ee:03:1f:7b:9b:c9:5c:4f:53:ed:b0:a6:3a:07:0e:e0:7c:ff:
c2:c8:41:5e:f7:7a:8a:1e:5c:c3:df:ca:84:02:5f:e4:cf:97:
ef:2a:60:38:ee:cf:ac:50:ca:5e:e2:84:2d:1d:ec:92:61:3b:
9a:ac:2f:3a:4f:04:0c:33:96:c6:e3:41:77:06:3b:87:f1:f6:
9a:be:4a:d1:fa:4e:3a:7e:11:d3:e0:56:ee:2f:38:cb:57:1e:
8a:f5:87:f1:63:43:da:e4:ef:fe:43:d7:fe:70:75:cd:68:7f:
0a:59:87:6b:b3:8c:5a:d2:a3:91:7f:fb:d7:33:d5:e9:31:fd:
4c:37:f0:c1:ef:0d:e5:fb:34:fd:2e:52:bd:cb:6d:52:79:97:
f7:67:cd:0d:bb:4b:26:61:30:0e:c9:35:38:1b:12:f7:ea:7d:
55:d0:45:bd:1a:aa:05:c8:6b:e8:1e:40:db:46:a4:44:7d:88:
98:f8:8d:59:20:70:41:bd:ff:98:cb:c9:a1:8b:9e:c0:5e:e6:
e9:9e:80:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9FAGpYHd82LsFyZJLNbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw
MGIwNTEwHhcNMjYwNDE3MDEwMDQxWhcNMjYwNDE4MDEwMDQxWjAzMTEwLwYDVQQD
EyhjOWJlOGFmNzJmYjE3M2I3M2ZmNzBlYTU1YTcyMzIzMTJlMTVkZGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWFH4yjZFJz9nVWw245HnXE+PLK/
yIfLt0xmeAWiJTZJ+qmOby3lCuUcu7rBdkW4ywdLyjXr/u4OFgunESPXz+QGw9VU
i1MhqS7oWsIRlUZ8seDfk01ZgvsZaOyZiM8NxkGcbLxQNiDgSxtNE4NmOll0APVD
SxUaRDyKUA+1Q70HoOZ5Dz1c9hqLGOkCLXmtgw0bnKU0ABBLdfXMxhkMHOhE4DUn
au7kHtOXpVWa5sLSaFZqqMLsvWnkWhcZeiFt/cURFCTYqvSX8NkzzKLBegXeSieT
UCmdXnGMtyQCk/EiSxTjj3XgdADqIR/fSoA2wMBND7Gl9+PZk+UcVuNWewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMm+ivcvsXO3P/cOpVpyMjEuFd3XMB8GA1UdIwQY
MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt
YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0
LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzadIKM4
kS6RmZDFVYHS7lN2j0LLD6sBwcYmQ1XN6BBXeNVQenSA38aZ/9v0UxP8DCE6yFiK
7gMfe5vJXE9T7bCmOgcO4Hz/wshBXvd6ih5cw9/KhAJf5M+X7ypgOO7PrFDKXuKE
LR3skmE7mqwvOk8EDDOWxuNBdwY7h/H2mr5K0fpOOn4R0+BW7i84y1ceivWH8WND
2uTv/kPX/nB1zWh/ClmHa7OMWtKjkX/71zPV6TH9TDfwwe8N5fs0/S5SvcttUnmX
92fNDbtLJmEwDsk1OBsS9+p9VdBFvRqqBchr6B5A20akRH2ImPiNWSBwQb3/mMvJ
oYuewF7m6Z6AZg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:05 2026 by rpki-client