
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json)
Hash identifier: uZGLPFbtJ1v/YtoO9T173oMBwsUft4pTOiTxFm8iJIA=
Subject key identifier: 4B:9B:40:23:EA:22:29:E9:DE:30:98:25:F6:2E:8C:2A:4C:8E:EE:6B
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 58BB30E7D66D4B27FD116C40F9C846F7AD7361D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
Manifest number: 04DA
Signing time: Sat 13 Jun 2026 00:12:37 +0000
Manifest this update: Sat 13 Jun 2026 00:07:37 +0000
Manifest next update: Sun 14 Jun 2026 00:15:37 +0000
Files and hashes: 1: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: 2E2zMal9yW/4bKhMOpMwDsUxdwb+r9tYbc5oXigCgVU=)
2: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=)
3: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=)
4: 3138352e31332e3232342e302f32342d3234203d3e20313337323335.roa (hash: jnZiGfbEu8z6NlJ5TJoew5fxaWLyymqCZpmvsdzl5qs=)
5: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: COjiihfGoQusS2tdYaiH54XY2TSXbsu6hBU0g5l+1eA=)
6: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: QEPaU87rScrkjf8nQ5MhnZTNjfaHj2qzC8r1G7AoEIs=)
7: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: TqaGaeIMEAvs/WTyCQmUWp+DQtl6DU4XoEhBsVKyqRs=)
8: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: JtG4bGqngMfE8O320eBz6O9EBwgWNp5pkU9qHk7R/PY=)
9: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=)
10: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=)
11: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:bb:30:e7:d6:6d:4b:27:fd:11:6c:40:f9:c8:46:f7:ad:73:61:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Jun 13 00:07:37 2026 GMT
Not After : Jun 14 00:15:37 2026 GMT
Subject: CN=4B9B4023EA2229E9DE309825F62E8C2A4C8EEE6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:ae:96:7a:ac:a3:57:3c:d0:ab:56:a2:f9:
01:75:27:9a:90:06:37:ff:ac:b8:82:fb:d2:70:b9:
de:a2:02:53:d7:51:b4:8a:58:78:43:46:7e:10:4a:
94:f4:f2:42:60:96:35:b2:60:ea:76:b1:09:4f:b1:
6e:e1:2d:28:39:69:a3:84:4a:49:40:9f:63:2f:f8:
c7:08:13:d0:2b:8d:a6:6a:dc:73:6e:fc:69:1e:47:
d9:06:38:cd:ee:0e:26:36:38:34:b5:53:2e:89:b7:
28:47:7e:de:2b:e2:3e:fb:3d:2d:00:45:11:13:ec:
fd:a0:d6:1e:d2:7f:c6:f1:99:ad:35:7d:69:e8:fa:
2a:f5:4b:8c:e5:fc:26:77:48:96:b0:8f:1c:50:f0:
e6:8c:a7:63:86:93:68:de:46:7b:82:e3:37:d4:ef:
fb:47:0c:2c:f4:2d:88:8c:65:a5:ae:7d:4e:47:d6:
91:70:45:1b:6f:be:d4:2e:7a:5e:bf:1c:06:70:46:
69:46:3d:39:05:ca:9d:2e:95:e3:27:cb:ce:b0:df:
5b:0c:3b:19:9a:6b:66:96:bf:e9:ea:f6:bf:39:e0:
df:7e:9c:5b:19:28:a3:fc:e5:03:9d:b3:da:25:86:
b9:29:c1:7e:3e:2e:d2:83:5d:69:24:f2:5d:38:97:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9B:40:23:EA:22:29:E9:DE:30:98:25:F6:2E:8C:2A:4C:8E:EE:6B
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9f:7f:af:48:4d:27:cd:04:17:7c:9f:15:35:f4:47:55:d5:
0f:a2:9c:d9:19:d6:a9:fe:a6:9a:aa:5e:4b:07:85:09:de:39:
f2:85:d0:de:98:a2:23:62:4e:ce:db:17:40:08:e7:33:88:93:
ef:bf:47:10:aa:2b:27:5e:ab:c1:51:48:c2:ec:ce:43:66:70:
79:1b:e8:a0:20:21:51:19:4f:ed:c7:82:99:c4:7f:b2:c9:68:
19:40:aa:d5:fa:a8:65:a3:83:e8:98:53:9d:40:c6:5e:a2:39:
16:23:5b:30:8d:79:5c:97:60:ce:22:a3:f1:2f:40:71:f7:e6:
e7:d0:d4:67:9d:4e:93:bc:aa:da:d0:64:01:c5:ed:2a:ad:8b:
bf:af:5d:09:6d:72:a1:57:41:57:d2:12:25:b9:01:d1:28:c9:
ff:71:be:a8:74:26:04:fa:50:2a:c0:05:bb:46:7a:64:69:53:
5a:d2:90:28:47:25:db:81:dd:15:f3:a5:7e:7f:7f:c5:98:c8:
77:59:82:35:27:78:33:12:eb:37:d9:57:0a:8e:d5:28:b8:89:
8a:de:8c:24:1c:74:cc:a0:d3:0d:83:ec:b5:3b:c3:5d:3c:8c:
5b:60:12:2c:47:2d:89:de:b6:cb:24:dd:14:04:c0:27:44:cc:
e9:b2:3c:34
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWLsw59ZtSyf9EWxA+chG961zYdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi
NjJiYTc4NTAeFw0yNjA2MTMwMDA3MzdaFw0yNjA2MTQwMDE1MzdaMDMxMTAvBgNV
BAMTKDRCOUI0MDIzRUEyMjI5RTlERTMwOTgyNUY2MkU4QzJBNEM4RUVFNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf566WeqyjVzzQq1ai+QF1J5qQ
Bjf/rLiC+9Jwud6iAlPXUbSKWHhDRn4QSpT08kJgljWyYOp2sQlPsW7hLSg5aaOE
SklAn2Mv+McIE9ArjaZq3HNu/GkeR9kGOM3uDiY2ODS1Uy6JtyhHft4r4j77PS0A
RRET7P2g1h7Sf8bxma01fWno+ir1S4zl/CZ3SJawjxxQ8OaMp2OGk2jeRnuC4zfU
7/tHDCz0LYiMZaWufU5H1pFwRRtvvtQuel6/HAZwRmlGPTkFyp0uleMny86w31sM
Oxmaa2aWv+nq9r854N9+nFsZKKP85QOds9olhrkpwX4+LtKDXWkk8l04lwgrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUS5tAI+oiKeneMJgl9i6MKkyO7mswHwYDVR0j
BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk
ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ
cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z
MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz
RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdp9/r0hNJ80EF3yfFTX0
R1XVD6Kc2RnWqf6mmqpeSweFCd458oXQ3piiI2JOztsXQAjnM4iT779HEKorJ16r
wVFIwuzOQ2ZweRvooCAhURlP7ceCmcR/ssloGUCq1fqoZaOD6JhTnUDGXqI5FiNb
MI15XJdgziKj8S9Acffm59DUZ51Ok7yq2tBkAcXtKq2Lv69dCW1yoVdBV9ISJbkB
0SjJ/3G+qHQmBPpQKsAFu0Z6ZGlTWtKQKEcl24HdFfOlfn9/xZjId1mCNSd4MxLr
N9lXCo7VKLiJit6MJBx0zKDTDYPstTvDXTyMW2ASLEctid62yyTdFATAJ0TM6bI8
NA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:36 2026 by rpki-client