
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json)
Hash identifier: EGxJhoCeXcU5GuwyusfXqmrrMRdvi566lpoN5bHtIaU=
Subject key identifier: 21:1D:D1:5D:19:D7:1F:B0:29:25:B0:D3:AC:D9:EE:33:85:A3:95:8B
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 01A0A93BA91CFAA541C930F6861AB903E514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
Manifest number: 1A86
Signing time: Wed 16 Sep 2026 08:00:54 +0000
Manifest this update: Wed 16 Sep 2026 08:00:54 +0000
Manifest next update: Thu 17 Sep 2026 08:00:54 +0000
Files and hashes: 1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: YXC5qYH5R/IWqPinqufzTHPxtQJCrtJEtW4XpFrQyhE=)
2: 6tTmYQwXOKfIx8EFjvxOkACOgVE.asa (hash: B+RAPGXA/BvL3QEc86FbnID2OOj7wYJWGGhX0NgqKgw=)
3: H6apiE0r9rOHvwzUANUDplSJSTM.roa (hash: cqjpgcUWiCJ8i4KpFtLhuI6KYkP0u+mdUggey1II1u8=)
4: HO--5wVYjTks1d4pGuEUndfhIc8.roa (hash: PSZ01mmnd3IXqRjRDT7Afa21Y0Y9+VVQ6A0uP0yE5t4=)
5: MW9IWiMaMbGWFIKAeGiIeFNoSuk.roa (hash: WXFlau1tw1wJE2NKxIsomrLjPJJN929dyuhMW8ngWzA=)
6: MdU1TDg6gPzzC5Jls0YI4g9dlJY.roa (hash: j2NCQtDtoHkREqMeNzVs0PKFMT/ogTJaPYMRxR3JZtM=)
7: T-DUSJ-O8JuK2PTgLk1errJO3_0.roa (hash: gJp14x3RVojW4Suzi+mnaQxUdouo4FmMOXfOj5Yct9k=)
8: ZHbHMoVLkFBwhZlfsyeyMo-r1YI.roa (hash: uDFD5MRDq12e9FrZ9TcR4muF3bF0UyIZh3ZvvCBU2ko=)
9: ZxZQikqsaz0OBgAuk40P1B9mOf4.roa (hash: +lV4F2CcosnXBXnETAHYkbM6uZLP9AqAiX7Djks3Lcg=)
10: iEeEp42GZdk24J_XhsWfZczs8bI.roa (hash: Es9r36V7+YULS9141hzfnZoXbLZeW7YOudDWcJDuqPo=)
11: iFaMxfToISMhuIOtnklJbKH8sU0.roa (hash: kU5eLBTCsLrlHtahyO4pMWGlPVbZxhPgtGU2m2KhHJU=)
12: kivoHyrrTapcSTu_dcsRevtd1qU.roa (hash: vlUy1Pp06OgEmxAK5wPWEB8oYerqdlsGZx57sDlsb/I=)
13: knMCjsMKq8boFlcM4TD-NB1mee0.roa (hash: 5pXrohpLzHpy5wR5NL0Pk7xascagMMWfyt+Jyy021+I=)
14: nBm950xJAm9pONVZhHt0wVFEq7Y.roa (hash: ZyCH9JBRPWP0WR4LL51Jbb1msIvVHDWA7bezxMkIVWY=)
15: orZjZ-bLi4QKzxMYS8aOyD5DwHw.roa (hash: j0NxewdNRbQ+iT6xBmN+n5xKVYa/xRMyvSC57UkHgro=)
16: wGxMkOKwYRGUeVwmL4uEg4oCpRQ.roa (hash: nnLs9+jHXNnt9wq/cQKewcR5GdgxSXwPrxibYjjofOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:3b:a9:1c:fa:a5:41:c9:30:f6:86:1a:b9:03:e5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Sep 16 08:00:54 2026 GMT
Not After : Sep 17 08:00:54 2026 GMT
Subject: CN=211dd15d19d71fb02925b0d3acd9ee3385a3958b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:a0:1b:1c:c6:93:54:fd:b2:62:a9:1c:3b:
2f:12:c2:64:27:86:a2:b9:58:53:ad:d9:b5:45:78:
23:f6:53:7a:cd:c6:a7:b3:b9:01:2e:c7:d4:63:d4:
e4:d9:ea:54:58:61:35:8d:8c:85:bd:21:26:82:04:
12:cd:3c:b5:21:99:e4:00:21:ca:20:37:d0:b9:99:
19:02:ae:5d:da:2c:08:e2:7a:f0:e6:0b:26:25:b1:
c9:a6:55:2f:20:2c:1c:17:9a:f3:b3:ed:a6:a3:bf:
06:4d:77:a3:e2:96:4c:be:7d:0a:77:ea:f2:69:08:
74:e9:15:58:2d:d0:72:ba:0f:d8:d2:42:b6:ab:f5:
9a:50:7e:f1:cc:a7:0b:af:6e:34:e6:79:0e:8e:a0:
25:c4:aa:ad:a0:7f:5e:20:9d:1a:35:00:d7:68:45:
55:53:60:6c:84:60:b2:e9:89:75:0a:6c:e5:23:25:
08:5f:a6:46:08:8a:54:a2:d6:6a:00:ab:ac:fb:0b:
1e:ad:a1:39:3b:e9:75:2d:c7:67:d8:16:4b:fa:a8:
b5:76:24:03:de:f5:46:65:1f:00:dc:46:05:3b:89:
c2:0e:68:6e:98:d6:2e:70:82:c9:1c:ac:6b:be:2f:
dc:d4:00:42:df:49:34:4a:ac:96:b0:af:73:db:c5:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1D:D1:5D:19:D7:1F:B0:29:25:B0:D3:AC:D9:EE:33:85:A3:95:8B
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a4:12:ef:6d:36:bb:74:90:01:06:11:81:1a:fa:c9:5a:cc:
fd:f2:8c:ac:68:74:74:c3:66:e7:43:c5:66:41:47:86:68:dd:
ef:1e:c6:9e:46:a3:cb:c8:d7:4e:d5:da:7c:a1:40:cf:bb:f4:
b4:dc:29:19:02:8c:6f:fb:6a:84:79:ae:cd:d9:09:ad:75:6b:
3d:b3:e5:ec:22:77:ce:69:8c:b4:49:71:0f:78:6f:6b:e4:28:
01:8d:c6:14:3b:b6:3a:23:bf:ac:4f:2a:55:a5:f8:da:56:d2:
d3:45:f5:f4:b8:be:8d:6e:5e:d2:34:cf:ec:21:8d:3a:e0:e2:
e9:77:b2:d9:cd:10:ad:d2:a2:34:46:88:f8:67:45:ac:2c:76:
ad:ce:39:b6:bd:b5:0a:bb:7d:c6:67:13:05:76:cd:d3:e5:ac:
59:64:cc:96:d1:d9:2c:20:63:84:8d:d5:0a:06:bd:8b:cb:2a:
18:eb:b7:c7:bb:f8:fe:53:7e:d7:b2:d9:9f:5d:04:a9:d4:2e:
54:72:2f:7b:ef:cb:81:ec:79:78:ec:a1:8d:df:61:33:4c:8c:
8f:6d:25:7c:e2:9a:e3:f6:0c:a5:5e:69:53:8a:90:6c:40:69:
54:83:60:bc:db:1b:18:ec:59:62:a5:b5:36:ec:a6:02:bc:45:
52:c7:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 12:45:23 2026 by rpki-client