
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier: 54mX3M6K9ci2tPf9JXOq4R3QMv9r+tzvDEWVcFoaLyU=
Subject key identifier: 75:B4:43:92:54:B3:52:AD:29:2D:3E:DE:79:7E:60:37:61:A4:E1:67
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 019DA48B67D50AD80E5605FA77F42134A17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number: 18ED
Signing time: Sun 19 Apr 2026 07:01:32 +0000
Manifest this update: Sun 19 Apr 2026 07:01:32 +0000
Manifest next update: Mon 20 Apr 2026 07:01:32 +0000
Files and hashes: 1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=)
2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: RmnQXnKx8Bui9H0QsbljlOd7xF02ZEIZwCssao9OT5A=)
3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=)
4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=)
5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=)
6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=)
7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=)
8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=)
9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=)
10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=)
11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=)
12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:67:d5:0a:d8:0e:56:05:fa:77:f4:21:34:a1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Apr 19 07:01:32 2026 GMT
Not After : Apr 20 07:01:32 2026 GMT
Subject: CN=75b4439254b352ad292d3ede797e603761a4e167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:6c:57:8d:56:06:34:18:07:03:35:01:41:
1a:42:d0:00:cd:8d:9f:9a:eb:17:30:12:67:b8:c1:
2f:05:94:c2:40:01:8c:e9:3a:f9:23:02:dd:73:c0:
c7:7e:47:f9:34:af:79:bb:2d:c1:70:63:d7:62:ba:
df:ac:ad:d5:3e:7a:d8:e5:ff:74:b6:ed:34:fb:95:
17:c6:3c:0d:54:dc:b3:ff:71:ea:62:4a:2f:9e:52:
22:1b:be:15:4d:1e:5e:5d:9f:25:e2:b6:e0:00:b4:
cd:e4:9f:28:f7:1d:fd:a2:23:d7:a2:d3:66:6b:94:
3d:d3:a2:a1:8e:41:2f:e0:10:34:48:56:b9:c7:30:
15:6d:3e:27:d8:ef:fb:cc:25:66:c8:ef:2e:6b:ef:
30:67:07:92:62:9c:b3:e2:cb:3b:0d:d8:df:9b:2c:
ca:ff:fd:21:20:f9:1a:b1:20:5f:16:4e:88:f7:2b:
6c:b9:ca:cc:08:6d:df:28:ca:c8:28:a2:cd:28:78:
03:50:48:30:18:74:4d:ba:96:4d:50:b1:1a:fa:5f:
8d:ac:2f:35:dc:0d:71:ba:ec:77:cf:16:91:44:69:
8c:1b:5b:65:20:aa:0f:23:74:be:85:0a:a7:0e:4f:
fc:8a:a3:06:27:3a:c1:81:85:64:2e:74:51:67:f1:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B4:43:92:54:B3:52:AD:29:2D:3E:DE:79:7E:60:37:61:A4:E1:67
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:97:22:8f:2a:70:14:5d:d2:61:f7:00:83:c0:76:c8:96:e5:
34:d2:96:d5:ef:aa:71:3f:c0:20:b1:4f:f6:a5:9c:2e:d9:62:
99:8c:d9:95:a2:bc:67:c2:b9:46:02:36:64:b2:2a:31:f7:f2:
05:e2:27:25:8d:e6:e1:aa:08:dc:03:fc:a4:8f:ae:d5:b8:f7:
27:bb:47:91:a8:d8:51:63:78:e2:ab:cb:1b:02:f3:26:19:ca:
0a:a7:92:b4:72:9c:8c:44:49:aa:44:e8:de:c7:ab:f2:71:ed:
0a:d8:84:11:ea:f8:b4:82:bd:04:38:60:bf:f1:72:53:60:81:
cb:cc:3e:b0:4e:28:7c:ba:4c:ea:3b:cb:71:28:45:40:74:59:
0f:78:62:ae:8f:e5:37:7c:17:78:17:0e:e9:6f:3c:58:3a:46:
ee:6b:ad:e4:6a:e4:19:56:0c:24:43:b6:b0:9f:3b:58:75:02:
d6:be:9a:8a:e0:db:ae:3e:66:8b:f3:ae:f3:c4:a9:a8:e4:d1:
18:10:61:dd:a3:36:1c:36:04:dd:c6:f1:29:eb:ca:15:e6:de:
ad:70:2c:d7:65:43:e3:95:7c:9b:57:65:09:6b:2c:92:e5:ed:
1e:72:42:8f:11:f0:e0:c2:21:65:22:20:75:53:3e:1b:12:04:
93:8f:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:04:52 2026 by rpki-client