
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json)
Hash identifier: +4PDg2VXTcyI2kfbWvGJoIbUoqv07eINmAC5Jjy9cEQ=
Subject key identifier: 67:EE:59:09:9C:15:28:D8:85:04:7C:C6:61:E4:BA:53:C7:BF:A0:92
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 019DFE73B899E8BC4711A8214F17DA90E709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
Manifest number: 1915
Signing time: Wed 06 May 2026 18:01:29 +0000
Manifest this update: Wed 06 May 2026 18:01:29 +0000
Manifest next update: Thu 07 May 2026 18:01:29 +0000
Files and hashes: 1: 0dMJhsxjgnbAU5WFa10AoRaFilA.roa (hash: NPvcwvLEK2kbpEIl+DIrK18I+jAsrx0zSuGH2P9GkC8=)
2: 4KJ_GXRCZJ3i3re64jPbmY6CJmw.roa (hash: 6+nSknm5d3GJFxravLBFWrmCmG8ueiV1lwzdyLMLzvU=)
3: 4lIeViGYyAArH6xFgAXuF1KY8oo.roa (hash: 3sNxRj68ViMu808j4OAwb7vp2hEV9aYGZZ0Iae+xOYY=)
4: 6B2lYvT2dR81hzkQQELDn_duJcs.roa (hash: iYcBuEVmeXmfUIJkWbTRCIrfpwO2+UiKD6lHoQfEoI8=)
5: 8JeUl0gwKBaZ43vH7iblm5PR0rs.roa (hash: 1jsQ41jOwm0SLnU0Qv592bRuhGGbd2WMpr/SEYaEF9o=)
6: AxjWYbGGpT5pCJ414siHagIrYv0.roa (hash: Les+tBn+kJ+j2Lvoi/D4UE+2fwFt8YnrHjntjr+jnck=)
7: P7tnseevFfgmSuKuIWR7T1-giX0.roa (hash: ojvJdnjtgDrfvRMQCYPhOeHhRoL/uCyx9OSh7NhorVA=)
8: WlvzyTdODs1w5g16wAD9se0N5yc.roa (hash: ktIjwIA9pXx7a9RtBAHAvE+KFHxUcF6PaLm5AvCzXO4=)
9: X-pw--7v-eVKOMCYhEoBqMvv5i0.roa (hash: IUeZVsSUCXBqLM3lYzGREGoTqzMuBKPxlh2jySadCOY=)
10: ZYdv2S3m7eXPESVok8yxYTapz-4.roa (hash: hWVgkj4Hxb1fm9VqiSs0akAtvRlafZPuNGm7c0XMuPM=)
11: c4gKUGJIMgEyuId7ul08tWyPN-I.roa (hash: chucr3d4TvCMayMn3vPGpeF00MZgFV7fyC/x5QhhCZQ=)
12: mlVDqzsr0onFPunz8cRb0CxctTw.roa (hash: FmoWfiTgv6hVPqkJlMC8O0NyKtvBDx0DatsEpxV/8NY=)
13: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: kkJVVE+gaGMzcd/CqIkndd08qXxZi/0FyXAW39L5Ww8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:73:b8:99:e8:bc:47:11:a8:21:4f:17:da:90:e7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: May 6 18:01:29 2026 GMT
Not After : May 7 18:01:29 2026 GMT
Subject: CN=67ee59099c1528d885047cc661e4ba53c7bfa092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:fb:2e:1a:d9:fb:70:da:46:54:58:e3:cb:
5d:4e:0e:12:03:30:e5:6c:87:ee:f8:12:66:73:dc:
36:e5:f1:c3:16:fd:cf:e8:ac:b1:a7:bd:05:94:57:
a7:b1:35:a7:ff:22:92:52:0b:07:fd:41:29:d9:30:
e1:ba:0c:5c:6d:2d:44:d7:e1:9a:c6:b2:69:06:92:
50:16:ce:05:51:7e:4d:8d:48:c4:45:6d:d7:12:f2:
99:52:51:84:72:d5:8f:55:91:83:8d:6e:ea:a3:8f:
b8:5b:46:d9:20:35:ea:90:e3:cd:31:6f:df:c0:a3:
3e:58:f9:9f:11:e0:dd:c8:a8:54:c7:3a:1d:18:7a:
f9:d1:df:e7:9e:65:c4:2e:e7:e1:3d:a2:2a:07:00:
40:58:3b:a5:cc:86:80:4f:a1:60:f6:e6:fd:84:3d:
dd:c7:f9:ec:4c:ad:8c:19:eb:20:3e:94:6b:ba:91:
2d:9a:8d:1b:56:3e:15:51:9c:6a:b9:64:7c:70:35:
e3:be:3c:57:d5:b2:dd:4e:bf:eb:e7:07:f8:4c:33:
b8:96:fb:37:a0:77:7f:42:bf:ea:ef:59:1a:48:14:
8b:7e:f8:70:8f:ac:22:99:ef:1b:b7:ee:80:0f:10:
96:ea:47:5d:d0:9b:0d:ac:3f:ef:11:52:18:56:e3:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EE:59:09:9C:15:28:D8:85:04:7C:C6:61:E4:BA:53:C7:BF:A0:92
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5c:00:b7:b6:64:27:82:eb:c9:b8:b9:ad:e1:eb:65:37:5f:
c0:c0:f7:b5:88:7c:48:3c:ee:e3:4c:75:78:47:14:39:36:2c:
ca:51:b2:24:d8:1a:01:78:ca:17:35:6c:25:9b:8f:bb:be:e6:
da:bd:89:b1:7e:3c:b9:2a:43:65:b9:1d:09:9f:ef:53:6d:7b:
bb:e2:a9:7c:7f:64:b9:f6:29:da:49:e4:c9:cd:d4:4a:62:cd:
3e:6e:65:01:a1:85:e3:86:0c:18:e1:f6:95:31:27:4a:b8:b5:
f6:1a:c9:cb:7d:49:c1:54:64:6f:85:bc:2e:38:e2:5d:e5:32:
a5:2c:04:84:14:6f:f5:5a:80:73:e7:2c:33:c3:da:80:87:7b:
7e:4c:23:01:a3:4e:ac:2d:32:ef:2a:61:48:4a:23:9d:2e:1b:
64:4d:9e:2c:ed:af:fe:be:5d:3c:1b:78:92:ef:1b:3a:b1:48:
44:bb:fc:d7:6f:30:f4:53:34:62:c0:96:1c:da:f8:e4:2f:0e:
13:5f:04:a2:43:e8:64:ef:bd:9c:23:80:16:92:79:49:06:0d:
22:04:cd:9a:12:bc:fe:81:59:92:a3:64:32:6e:e7:68:95:4c:
2f:aa:c8:d5:7b:1b:bf:dc:c5:af:f3:3f:61:73:2a:17:c2:e9:
b2:92:ef:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:56:48 2026 by rpki-client