
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json)
Hash identifier: 5w5rHt5RwYGh4PiBiUShPYR3pzfbSYEF/NoasZXINUk=
Subject key identifier: D5:C2:20:C1:77:0E:83:37:4D:F2:06:EB:41:FA:4A:AD:14:38:E9:82
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 019F559016C85832AD7469B40FD0D7C7CD0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
Manifest number: 0582
Signing time: Sun 12 Jul 2026 09:02:14 +0000
Manifest this update: Sun 12 Jul 2026 09:02:14 +0000
Manifest next update: Mon 13 Jul 2026 09:02:14 +0000
Files and hashes: 1: 0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa (hash: XeB6K6T8p6c7RwUL3urLh05fa1KeuyMXlU3sgTg6kwI=)
2: 1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa (hash: h7CqqSl2LQjJmhCLF1MeDbbfhgUi7N6nFb/MApYSj04=)
3: 3gai81UGgfLPbQftciy3jGMkOwI.roa (hash: kiaWDVp8FEgRP18QSL61NeSbPNIL/KFNeSuP3Gkl88Q=)
4: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: wuAhzUQIgLYGYiHwlvXDy2/toGbWlQituFue/fRlWzQ=)
5: C6uUnb-GcnQfqIvL7gX32SouFUA.roa (hash: W8gXCQVnHQZj4Fig+/xRtixgdI9dMwYVfKpFVE38sls=)
6: Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa (hash: qthe4k3qdM7snNafkTyRsJRCRgLD006FLSrfqpvtf/M=)
7: P2DOHQZk6uadyNsFYKTvp0Yljns.roa (hash: drWm8UAEyYp0gk5pD0pZZGlNfBy4kmJrj0xpKvuccbI=)
8: dUz1_BGuEwa1si0sC79DuRXSTMw.roa (hash: EggvRKKO8J9fQom0RkmSKJQOGfA94V2BXYRDmutG/IA=)
9: jG8u0DdMeVDnzAs9ajzk41GxjYI.roa (hash: 2i9+DbG6rnpNrbDbrTa+vcvNqwfsERMCoNQAt/YdO9A=)
10: pMSYP5P8y8eLfNyDEeXV3zc-nps.roa (hash: enJ6YCYyQ+/wl2mffuOqzFyRpZKc2xjCWdqck8SgcXI=)
11: pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa (hash: 2qg2UMxY9Ne99nZ+znUrMGap65SST+L3iSUILMH/2YQ=)
12: uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa (hash: 5GA0c289K1eM0975vFreXvBAvts4XCEq2R0BlZHe6C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:90:16:c8:58:32:ad:74:69:b4:0f:d0:d7:c7:cd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Jul 12 09:02:14 2026 GMT
Not After : Jul 13 09:02:14 2026 GMT
Subject: CN=d5c220c1770e83374df206eb41fa4aad1438e982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:f0:b4:c2:8c:47:09:ec:bc:ba:54:40:e1:
5f:e8:d7:9b:79:d1:25:48:00:3f:f3:8b:fc:97:b0:
7c:64:43:1a:d1:98:0f:3c:16:5a:09:30:44:65:68:
8b:07:71:15:a1:c9:1f:1f:81:44:5d:3b:b8:72:58:
2e:53:35:6e:80:0f:83:3f:c2:e2:6e:fe:53:dd:99:
55:a2:dc:bc:d5:b0:ef:2e:51:25:2c:36:c5:5e:2d:
e2:d5:4c:62:39:55:bf:47:4b:d6:0d:64:39:a0:57:
2e:be:49:7b:76:0b:81:d4:ca:35:4a:e2:d9:28:ee:
22:79:e2:20:82:55:fd:4e:eb:af:4b:32:29:2e:f8:
8f:a1:8d:f3:13:a4:ba:ee:5f:d0:c2:79:80:91:ea:
34:86:95:44:b9:08:0d:cc:e0:96:fa:de:3e:4c:be:
73:c8:90:2a:63:11:cf:b0:9e:bd:6a:a0:ce:3d:84:
c6:ac:07:59:9b:c5:25:e0:95:78:e8:39:d8:3c:70:
ea:de:37:c1:f1:7a:56:98:62:e8:ad:d2:0d:b7:d6:
a6:ce:cd:b1:78:50:81:6c:f7:12:48:f6:c1:f5:16:
49:b5:a0:ff:c9:d0:58:3b:5e:ac:3e:e5:40:ad:4b:
7d:4b:60:cf:ed:03:64:ac:1e:ae:dc:64:2e:1b:57:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C2:20:C1:77:0E:83:37:4D:F2:06:EB:41:FA:4A:AD:14:38:E9:82
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f8:04:73:1f:51:42:a1:63:df:75:02:4c:88:8f:76:6c:54:
9d:c2:17:22:7c:75:60:f3:d9:ea:13:a5:62:e2:a0:34:2d:90:
ee:99:25:69:68:35:e8:a4:7c:a7:1a:6d:4e:87:f9:db:51:2f:
a7:5d:c4:03:65:e3:2e:74:59:1b:bf:4e:1c:f6:77:56:46:c5:
65:9f:66:f0:56:42:da:3c:d0:eb:9c:22:3e:10:00:fd:4f:f6:
1c:1b:a0:76:a3:4f:de:2d:6b:46:98:07:28:88:ce:54:1d:81:
63:77:4e:84:65:45:f8:5b:f6:4e:2f:77:31:30:ff:51:60:fa:
74:18:34:14:6e:8f:37:6e:3a:ba:d0:0f:95:b2:2f:8c:02:70:
92:ea:2e:c5:59:5d:61:27:a2:c9:80:cc:bb:1d:ba:55:6f:ce:
ae:22:cd:52:e4:22:8e:09:a1:61:9c:d8:a3:6e:40:e7:e0:02:
e2:50:36:38:78:a3:0b:d5:d1:48:a0:9d:c9:e4:bb:89:5a:e6:
8a:6f:a7:ce:51:a2:c1:a7:78:4b:02:68:0e:b3:8f:ac:b7:a0:
45:91:cd:ee:e1:18:a6:df:45:c0:bb:28:f3:1d:38:b5:c3:9d:
23:55:8e:18:a8:53:2f:42:76:b3:f1:a0:c2:63:c2:b3:e1:f0:
4f:3b:db:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 12:05:26 2026 by rpki-client