
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier: IyhVgsJuF6hyvowmKB4obHk0tlplLqHcqCBoaJoIc2E=
Subject key identifier: 0D:CE:C6:67:72:7A:17:13:55:25:9C:26:D2:24:AB:8E:B4:99:39:21
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 01A1ABCCC17721375C9DC1A913FFED8F136C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number: 1B03
Signing time: Thu 05 Nov 2026 13:01:25 +0000
Manifest this update: Thu 05 Nov 2026 13:01:25 +0000
Manifest next update: Fri 06 Nov 2026 13:01:25 +0000
Files and hashes: 1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=)
2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: v2tH0317AMa+VoarS1N9ix6h/ityu2DOsH906N492No=)
3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=)
4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=)
5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=)
6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=)
7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=)
8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=)
9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=)
10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=)
11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=)
12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:cc:c1:77:21:37:5c:9d:c1:a9:13:ff:ed:8f:13:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Nov 5 13:01:25 2026 GMT
Not After : Nov 6 13:01:25 2026 GMT
Subject: CN=0dcec667727a171355259c26d224ab8eb4993921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:34:53:5d:a1:17:e3:08:90:12:a8:ef:09:
81:87:47:79:e0:08:d4:5d:67:9f:b6:66:6c:1b:08:
c4:63:50:24:8f:75:b4:51:ff:d4:10:73:9a:ff:3a:
da:20:86:91:02:29:cb:dc:a4:26:cf:a4:94:c7:f8:
24:02:f8:a8:05:a6:27:0c:43:40:f4:7f:98:1a:45:
d8:e6:cd:10:40:df:49:19:7f:b7:bd:67:c2:5f:f4:
8c:2d:09:13:86:5b:89:ea:8d:0d:e0:a4:08:a2:fe:
00:9f:88:0b:6b:34:2c:23:0c:ce:22:19:4e:4b:be:
5c:9f:b3:46:57:d0:e4:5b:2c:b8:ab:02:b3:4e:c5:
31:a7:06:82:ce:d4:d2:3f:43:ee:d6:c0:1a:b4:62:
98:c7:57:61:dd:c3:13:ee:43:53:96:17:0a:36:f3:
d2:d2:20:01:74:18:93:63:eb:5e:a9:fe:5e:fc:64:
d3:9b:76:13:ca:12:d5:02:73:e9:7d:8c:f1:61:55:
fa:50:67:2d:1e:60:3c:9b:e1:94:76:58:6c:6a:d0:
82:1e:7e:68:a1:61:0b:84:9c:3b:13:cf:ab:c1:50:
93:d7:58:34:c3:e0:33:22:2d:68:f2:e9:82:83:3c:
93:1d:d8:6b:c9:38:a3:f0:b5:0c:ff:54:c3:1d:74:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:C6:67:72:7A:17:13:55:25:9C:26:D2:24:AB:8E:B4:99:39:21
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c0:d0:3b:d8:3c:fd:ae:47:ef:bf:fe:31:c0:9f:2f:e0:2e:
52:ac:d6:eb:2c:42:1c:df:89:1c:9a:6d:3e:e6:d1:49:f1:9c:
a8:fc:cf:35:11:91:fe:48:99:a2:31:0f:81:85:15:38:22:d2:
97:9f:08:63:d2:3e:81:37:4a:0f:65:d2:a3:fb:0c:be:db:68:
32:5c:f2:ad:41:eb:9e:5e:6b:3e:23:ac:d6:31:8c:e6:ed:f2:
b0:21:d7:0b:4d:c3:30:96:d9:b3:12:57:11:ab:d4:9a:75:ac:
44:88:35:66:28:70:97:39:7d:28:4b:c6:8b:fa:64:4e:07:0a:
77:39:2f:19:75:ad:63:ff:c7:f9:e6:2e:d6:9d:9f:06:38:ef:
f6:f3:1f:3c:86:d7:1c:d2:5b:02:20:76:b1:0f:e2:38:ed:9d:
9b:3f:2f:57:59:32:9e:54:50:a1:a5:ac:ac:19:f7:ef:d7:10:
47:93:f4:57:a8:c9:95:4f:46:36:11:57:05:50:57:0b:d9:22:
2c:6e:3f:b4:e8:b9:31:a6:c3:51:78:ad:84:fd:69:b2:95:e8:
b6:de:3b:a5:8d:20:c8:f6:bc:0d:77:86:eb:b5:07:b4:7c:79:
e0:62:32:b9:a9:3d:99:d6:4c:18:bc:70:d3:94:0e:53:25:f0:
c4:29:81:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:55:32 2026 by rpki-client