
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
File: f4_zrPyu0gPpbekasIxu-2QDGmM.mft (raw, json)
Hash identifier: xUGZ+mKvMejch9QYejnwgMDbnIpxkj920b5rF8d9rPY=
Subject key identifier: 00:82:20:AF:47:2B:B3:C6:0F:6B:07:E9:1A:AC:12:21:28:D6:DB:68
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 01A1716F0B212E822CD62644BEA44F6968FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
Manifest number: 0181
Signing time: Sun 25 Oct 2026 05:01:05 +0000
Manifest this update: Sun 25 Oct 2026 05:01:05 +0000
Manifest next update: Mon 26 Oct 2026 05:01:05 +0000
Files and hashes: 1: 1chukKiBeqKubLtwP0rGk210lgU.roa (hash: cN1FHXnQyu4jURF/hMvOqKc+36+mh5q51SMzdcXq+P0=)
2: 2iJZrWnUX6sYPNWVC4jhvrs_wCo.roa (hash: ywT5tAEbmT6fgEmvUHylpSZqrWzDDHqYU96pzjuMhAA=)
3: 4612gzdi-UH5Qjg22ZZ5_BiHxKc.roa (hash: OzLPJHDp/NYCIQmCmr+HzbM8GW1ho6gfEdKVXLtwW1A=)
4: 7fk57_HwzNfUnEITZan_hvVciUY.roa (hash: gFa8G5IzJJPNkg0SG8tZWI1w/ioWq7x/wbxBGV8WaoM=)
5: BiBb5pd42JGuxEA2_36VWez9To4.roa (hash: ZmHy8hNEbi1UkgU4SvnNHfdKIst6HJZZ63T7U6bHPjU=)
6: DmAQPdW8nsvi__nFBR2Nzfz4tKE.roa (hash: SxYJFQpriEWdQfpUNT7KGc85ANx5ZL3x1vLN53tDOww=)
7: EZUD2mqntHLdvbqrtHkZp_Kr8VE.roa (hash: w2ZrecaPRiS9avpPbQAXkEmzP6mL7yB7QAgS25ijT4g=)
8: R0eSj6KFHdu_wIdzGE7vkbEd8OI.roa (hash: yh764ftoQVKn593twpZy0eLx7oJrAhvTTG7Tln4EsSw=)
9: VaU9YvaUB5TCM_3yRYn4qKgOc-A.roa (hash: /DWNnf1KxTi1H/eUMarwjJt9uGkIKtjJF5ONtnvVCJs=)
10: djMRtN4n-vW3YMUBEBvNiIfj40I.roa (hash: ltFpunT0BizmulOUlJUDwwLOMBG9WmZoGqBwiKtC7gU=)
11: f4_zrPyu0gPpbekasIxu-2QDGmM.crl (hash: S1DjOHjTMlJr9ee/1IA2mPZ3+5Hzs4zb9kKfUlLZV6k=)
12: lClW6W-_UDpwFCHyVPUl6653A-U.roa (hash: gWRH2Rti6+BzsrBzzg3BJY6kPa3jXIK6hVANddqZWuM=)
13: tLSoRnsaxIHNEgZyINO1VZfHTX8.roa (hash: FoMCkLuYR4fq0Z+xEe+9BgJXWIzu0e0lOvSu3/OWVKk=)
14: uq6flifS-8MNzYK-SKKeptPpQnc.roa (hash: piRUP02rnBiBGnKCZ85TJpIMx3kcAqk32wn6KoOR8Oo=)
15: yLl9hut5-79pC7adyuGSTuX_5sU.asa (hash: 61Xj0gQa/Th7F++DmhWcMRLvfxIvqCNmmXnO1BzHxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:6f:0b:21:2e:82:2c:d6:26:44:be:a4:4f:69:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Oct 25 05:01:05 2026 GMT
Not After : Oct 26 05:01:05 2026 GMT
Subject: CN=008220af472bb3c60f6b07e91aac122128d6db68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:58:67:6b:ea:2e:bc:99:53:6d:ae:dd:56:
f9:68:33:1e:c2:d5:53:94:1b:c3:8c:2a:e5:b4:65:
c8:3a:c4:80:a0:c3:e0:bc:42:d6:42:a1:0a:35:67:
a1:81:67:43:a2:9d:11:1e:f0:a9:b0:aa:b1:11:33:
b0:e7:8d:78:95:83:fd:83:97:be:61:fa:3b:ea:f5:
dd:8a:5c:17:69:5d:b2:17:48:da:96:e6:73:ef:e1:
60:b6:e6:16:7e:2c:74:44:8d:c9:bd:fe:ee:68:61:
4f:3e:30:20:7b:41:33:80:11:bb:04:77:05:84:08:
88:c8:d6:2d:32:b9:69:11:10:ca:6f:73:f2:20:66:
4b:08:a3:f1:84:07:93:fb:45:d7:1d:f4:13:9d:69:
e1:91:fd:4f:cb:07:d1:69:1c:00:22:6e:1c:4a:8a:
2f:3d:22:78:5e:40:c7:19:00:20:2a:d5:08:88:d2:
80:a5:26:34:34:04:f2:34:b1:e0:59:21:cb:c5:89:
45:30:13:b2:73:25:8c:1e:85:8e:0d:cf:67:c8:c4:
a4:d7:b6:44:9e:f4:24:59:66:c0:1b:e6:5e:c1:6a:
30:6c:11:09:2b:11:54:fd:53:c7:79:b1:45:56:e7:
1e:cf:e3:39:4a:45:03:86:13:a9:e4:08:14:33:65:
a6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:82:20:AF:47:2B:B3:C6:0F:6B:07:E9:1A:AC:12:21:28:D6:DB:68
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:24:db:e2:ce:47:1a:87:f4:81:bb:11:f2:34:25:99:f6:a6:
cb:0a:a9:38:f6:81:3d:f5:b3:65:07:02:08:73:85:bd:4e:48:
97:fb:24:b4:1f:e5:8e:bf:c4:22:3e:ea:67:c4:c8:14:03:17:
9b:3e:bd:2a:59:f8:bc:ca:6f:e8:d4:c5:44:43:54:64:e1:04:
33:e6:3e:1e:88:3d:0c:f2:9d:09:8e:c4:fb:17:73:69:b6:7f:
0d:80:e8:05:41:93:ba:3f:88:56:b3:96:99:ad:c9:21:5a:cf:
4a:f1:cb:4b:52:3e:35:23:59:73:66:3e:f8:80:c8:12:1d:99:
90:ca:c6:60:8e:74:a5:f5:eb:84:97:7f:95:bd:22:6d:0a:b0:
5d:85:c7:33:a8:ec:f8:c4:9d:c6:12:4c:5f:c3:67:fb:14:cf:
ad:04:6a:4a:f9:d3:fd:00:cb:f9:0b:4a:26:a0:fa:be:e7:ac:
cf:e2:93:68:d1:2a:36:f7:76:6c:7b:78:51:18:19:6a:81:4a:
f3:1c:1a:a1:d4:34:fe:bd:20:df:26:e7:2d:40:ea:eb:4a:91:
83:b1:e4:45:76:7a:0c:57:09:84:e0:46:23:26:cb:3a:a6:2b:
6f:be:61:96:eb:dc:ec:32:f2:51:e3:d2:f7:96:3c:af:c4:76:
94:b3:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 10:44:03 2026 by rpki-client