
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json)
Hash identifier: RD5R1OffJfz9XKT5pkPOWiHLPIiA8dMPYzNAhnnsHDc=
Subject key identifier: E0:03:22:67:B1:CE:83:DE:9D:B4:98:33:EA:3C:5B:F3:E5:85:A1:3C
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01A0B4D16B851655F23A9000A59C18413263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
Manifest number: 1A2A
Signing time: Fri 18 Sep 2026 14:00:18 +0000
Manifest this update: Fri 18 Sep 2026 14:00:18 +0000
Manifest next update: Sat 19 Sep 2026 14:00:18 +0000
Files and hashes: 1: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: 6vfxPZ+cT2hTV4CmoHMNufUIrSK52BRYp9mxiuFOQhw=)
2: 6RiDdnednlszc5nfc-ANOJUv2-o.roa (hash: jp3uEswNG4RA6H4G2MDNF+CFUPavRhXT4rfyfKyq6LE=)
3: HdDV5YwMNyFB8k-B_X4MU9-30nM.roa (hash: luVRxl/FnQsj5OM+H4x3yTlX1ppJM10PIPO1RpHN79g=)
4: Nu_9r8H3m3GpfJQaXI9Z_gksBSE.roa (hash: A0MtvPieujf5jUqev3piW+xmWcpxjiKiXWnP9KoZX/U=)
5: ObexSGVy696Wkd2DRhwt2_VaBs8.roa (hash: Ly1Ec9X97SiqjYPYhofzign3IKjIwUM2uHbt0VCXmE4=)
6: ObzqjXT5GtzebuI8BcIwPsXaLb8.roa (hash: CxduJ99uKrCwZPdYUZzvhflelo5OchrVkeFU+IICnVU=)
7: XJkwKQw1uwsNaMGPHoEZmHJ7ln0.roa (hash: 4mMJPUkmp2WBHWIYLKvvJ35kZmLlEY53pxDsemE3rMA=)
8: Y236QjVhGrl24C2bEpBZTpmsO9g.roa (hash: roo618zomZv/80bpPa5A4SKzRxktEgno100+FqWeWZU=)
9: teSjGmrvY_tu6RkdG_34GiE8KM0.roa (hash: yc8bd5ePK4M8XX+rsAFOZYDdIrq94apPIscjQGUl9lw=)
10: ugVQrwIOiOMJPcA4zFZm9kWmY04.roa (hash: Q8pDB3SA4JzJaHb+up2jkC0do3Kit4mBYGTJ7TNXFRI=)
11: yWZ-5OdaSQI1LPfjNeNs7tCX608.roa (hash: esuWPq3Xg5U/Su3ABpCWC8pkIxvEw4LQCmVfV8WC2QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:d1:6b:85:16:55:f2:3a:90:00:a5:9c:18:41:32:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Sep 18 14:00:18 2026 GMT
Not After : Sep 19 14:00:18 2026 GMT
Subject: CN=e0032267b1ce83de9db49833ea3c5bf3e585a13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:d1:11:fd:14:f2:bd:6d:f5:18:83:3e:f9:
37:34:62:06:aa:d5:08:19:d3:de:73:b8:f6:e2:b0:
1a:ed:6f:98:9d:ec:18:a0:db:c9:ed:58:c2:e5:13:
d7:f5:73:2c:9a:a4:37:ac:48:ab:08:77:d6:15:cc:
4a:12:13:4a:bb:a7:86:85:9a:91:ef:7e:66:f7:d7:
5f:78:1b:fc:c3:42:6a:90:21:d9:ef:ff:d1:43:98:
1c:51:29:78:d1:c0:45:87:91:ce:2f:73:72:c4:38:
e2:c6:46:b0:d8:9a:aa:25:a5:f7:81:1d:e0:ed:ca:
c2:2d:21:7e:c7:24:c9:ab:2f:05:fe:68:30:76:09:
e7:d2:92:10:57:d6:f0:be:cc:85:2f:a3:55:17:dc:
81:fd:46:93:dd:3e:8d:81:f8:e0:33:cd:e3:cc:48:
b1:b5:54:f1:94:4b:96:96:20:35:f1:71:33:8b:bd:
af:6a:b7:df:c8:dd:d3:b5:b4:ae:64:aa:68:a1:7d:
08:c7:dc:52:2d:a1:03:67:77:e1:97:cc:6d:0c:1c:
29:79:8c:32:e7:59:54:ef:6f:d5:06:cb:bf:92:9a:
b2:1d:7c:a0:d3:11:15:ca:ef:8c:ee:09:64:ec:e2:
32:f5:f0:73:d1:84:ec:4a:b2:e8:b3:37:a3:fa:4a:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:03:22:67:B1:CE:83:DE:9D:B4:98:33:EA:3C:5B:F3:E5:85:A1:3C
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:29:5c:86:ac:89:d5:b4:e1:a4:c3:ce:5c:bf:54:3f:37:63:
dc:4f:8a:55:36:53:00:02:a6:97:a1:4b:65:bc:86:c0:2c:f1:
f1:e0:e2:8d:71:57:18:01:63:8f:c5:9e:ab:a9:af:b3:92:64:
66:22:b4:45:3e:3c:c6:3f:49:6f:be:3c:df:3a:10:04:b4:fc:
c3:39:81:53:bf:21:49:b4:77:0f:52:7c:08:30:12:dc:22:3e:
fb:f4:fa:15:12:86:63:4c:36:66:2f:b0:30:ea:5f:ad:b3:ed:
3d:7f:bd:2c:e4:2f:74:9b:de:20:5f:56:e4:a2:b8:45:ea:d4:
c8:8e:59:19:72:5b:93:a7:6f:06:d4:d5:9a:11:98:7a:94:f5:
68:91:c8:35:51:20:04:e2:bf:97:54:bd:32:0a:b3:e6:d3:02:
b3:69:5d:d0:34:7d:c0:66:5b:4f:36:57:ae:1a:77:d7:be:d0:
99:25:c6:ff:d6:b5:60:71:5d:79:76:46:76:eb:91:d4:18:23:
fa:2e:b7:47:a8:50:87:22:9c:90:9e:31:20:f6:37:3c:91:23:
38:0b:a3:45:ab:b4:56:d6:e5:da:03:de:cf:e8:34:de:a3:01:
79:c4:7c:2e:f1:2e:30:ad:ec:4c:a4:81:24:2e:20:7f:5e:32:
3c:11:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 17:07:31 2026 by rpki-client