
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json)
Hash identifier: yunfUk+OO8nmFIxYqSi7p+MD/F02Oyw6aDhPV4jvzQ8=
Subject key identifier: 78:74:E9:96:20:0F:BE:08:6E:C7:DE:CA:F0:85:7B:81:C3:A4:96:0F
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 019D0E57741D3E2AFB39A971684737065674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
Manifest number: 1845
Signing time: Sat 21 Mar 2026 03:01:45 +0000
Manifest this update: Sat 21 Mar 2026 03:01:45 +0000
Manifest next update: Sun 22 Mar 2026 03:01:45 +0000
Files and hashes: 1: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: rGZOlwfjdhOSPu1pr6cOdkFtCav2L/TX8LLcb4WkJcw=)
2: 5mhLXZz9uaLrxRXezZSHWsxyd-w.roa (hash: L8zJBOmGnGLdAhL8uK2yDENjhkyNLKbL3TEmcXLA584=)
3: 6RiDdnednlszc5nfc-ANOJUv2-o.roa (hash: jp3uEswNG4RA6H4G2MDNF+CFUPavRhXT4rfyfKyq6LE=)
4: Ckff1S9rQwDmb1fYOy6uaMvBYaQ.roa (hash: po3/SD3l27xL71DpVgMNbKKZYbb+hPc9NcBH/9yqqcs=)
5: Nu_9r8H3m3GpfJQaXI9Z_gksBSE.roa (hash: A0MtvPieujf5jUqev3piW+xmWcpxjiKiXWnP9KoZX/U=)
6: ObexSGVy696Wkd2DRhwt2_VaBs8.roa (hash: Ly1Ec9X97SiqjYPYhofzign3IKjIwUM2uHbt0VCXmE4=)
7: ObzqjXT5GtzebuI8BcIwPsXaLb8.roa (hash: CxduJ99uKrCwZPdYUZzvhflelo5OchrVkeFU+IICnVU=)
8: Y236QjVhGrl24C2bEpBZTpmsO9g.roa (hash: roo618zomZv/80bpPa5A4SKzRxktEgno100+FqWeWZU=)
9: teSjGmrvY_tu6RkdG_34GiE8KM0.roa (hash: yc8bd5ePK4M8XX+rsAFOZYDdIrq94apPIscjQGUl9lw=)
10: ugVQrwIOiOMJPcA4zFZm9kWmY04.roa (hash: Q8pDB3SA4JzJaHb+up2jkC0do3Kit4mBYGTJ7TNXFRI=)
11: yWZ-5OdaSQI1LPfjNeNs7tCX608.roa (hash: esuWPq3Xg5U/Su3ABpCWC8pkIxvEw4LQCmVfV8WC2QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:57:74:1d:3e:2a:fb:39:a9:71:68:47:37:06:56:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Mar 21 03:01:45 2026 GMT
Not After : Mar 22 03:01:45 2026 GMT
Subject: CN=7874e996200fbe086ec7decaf0857b81c3a4960f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:9f:ec:ef:ff:54:32:e0:d9:ab:7f:83:d2:
65:ee:82:c3:4d:9b:7f:bf:83:be:19:7b:5c:e2:64:
27:c4:2f:e6:fb:e4:c2:85:9c:0d:e4:4c:43:8e:e7:
eb:50:1a:63:4b:dc:b9:8d:8f:22:1e:fa:95:de:e7:
60:54:52:79:3f:bf:26:ae:b2:2b:29:5c:9f:6d:0b:
2b:1d:af:83:83:2d:51:dd:62:c5:c1:09:2d:e4:ab:
18:b3:81:ee:19:11:89:aa:76:63:7e:a1:47:9e:5e:
31:bd:02:cc:10:30:1d:a4:1c:72:88:a2:09:21:34:
b9:7b:a0:18:fc:fc:58:eb:68:70:12:f0:d1:f1:9f:
13:40:47:b2:9f:e3:32:08:f6:b2:e7:06:ca:6d:8a:
b0:89:c4:d7:e4:d9:7a:48:d7:19:b2:ec:c4:bf:c7:
b8:92:ac:ab:43:3e:f1:12:de:85:6d:33:22:aa:d4:
57:d7:a8:8f:39:17:98:88:42:11:60:72:08:c9:cc:
26:4f:d6:00:ac:dd:fa:5e:dc:87:5c:7b:a1:a7:17:
58:0f:de:bb:60:aa:ea:19:af:cf:8b:97:59:86:86:
ca:13:da:1a:2a:38:7f:e8:29:12:c5:24:51:0a:b6:
52:2e:05:1e:7d:a1:8e:96:d3:f6:c0:e4:ea:ad:5e:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:74:E9:96:20:0F:BE:08:6E:C7:DE:CA:F0:85:7B:81:C3:A4:96:0F
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6d:6d:9a:a4:ec:3d:62:37:85:0b:16:73:9e:35:10:0d:8b:
0b:c0:b5:f4:57:07:7b:ea:43:40:fd:48:27:ab:d7:c7:da:cd:
e0:90:7f:8a:34:c8:cc:f9:2a:73:69:8b:51:1e:65:ac:2b:3c:
e5:50:cf:6f:21:a9:03:8a:66:d9:fb:fd:9a:1b:c0:75:96:59:
c9:7e:53:b9:01:30:83:8f:f2:03:68:bd:12:d8:c0:bc:78:22:
68:4b:aa:d7:16:bd:c8:e5:f6:74:3e:b7:79:47:c6:54:1c:3b:
99:f6:2f:4e:4b:b0:6e:ce:de:71:30:30:3c:1c:9e:10:62:4d:
14:ef:13:89:6d:cf:72:0a:56:91:3d:db:44:1f:47:ce:d8:73:
76:0e:6a:9c:5f:c2:ce:54:e6:3e:47:e1:e2:f2:f6:b7:4e:5b:
da:e0:99:05:f7:87:68:75:7c:e8:c3:d8:01:44:a7:d9:41:85:
28:f8:28:68:59:0a:fe:28:cc:10:25:7e:46:f4:53:a9:06:7a:
94:85:eb:40:1a:c5:bb:52:6b:4b:19:a9:18:fa:e6:d4:50:da:
bb:0c:1d:53:dc:d3:b6:08:b8:16:ed:05:7d:69:a6:f2:28:66:
34:ad:86:9d:5d:f5:8d:03:a9:c2:a4:c3:18:6d:55:7d:1c:00:
48:30:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:05:25 2026 by rpki-client