
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json)
Hash identifier: pUIV4ecvvrL+pzaS+1KhUB65PI8aVVhB7i/mbr6Eajw=
Subject key identifier: A3:B3:5C:15:DF:21:79:16:EA:4F:24:BE:D3:5A:C2:25:02:09:85:E6
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 019DF9BA5F4AFABA475DF6CCB5D063F4D589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
Manifest number: 18C0
Signing time: Tue 05 May 2026 20:00:33 +0000
Manifest this update: Tue 05 May 2026 20:00:33 +0000
Manifest next update: Wed 06 May 2026 20:00:33 +0000
Files and hashes: 1: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: +t2gDwxpt5gSVWEBYYKNoRunxt+vFtPP8ClRAqsLASE=)
2: 6RiDdnednlszc5nfc-ANOJUv2-o.roa (hash: jp3uEswNG4RA6H4G2MDNF+CFUPavRhXT4rfyfKyq6LE=)
3: HdDV5YwMNyFB8k-B_X4MU9-30nM.roa (hash: luVRxl/FnQsj5OM+H4x3yTlX1ppJM10PIPO1RpHN79g=)
4: Nu_9r8H3m3GpfJQaXI9Z_gksBSE.roa (hash: A0MtvPieujf5jUqev3piW+xmWcpxjiKiXWnP9KoZX/U=)
5: ObexSGVy696Wkd2DRhwt2_VaBs8.roa (hash: Ly1Ec9X97SiqjYPYhofzign3IKjIwUM2uHbt0VCXmE4=)
6: ObzqjXT5GtzebuI8BcIwPsXaLb8.roa (hash: CxduJ99uKrCwZPdYUZzvhflelo5OchrVkeFU+IICnVU=)
7: XJkwKQw1uwsNaMGPHoEZmHJ7ln0.roa (hash: 4mMJPUkmp2WBHWIYLKvvJ35kZmLlEY53pxDsemE3rMA=)
8: Y236QjVhGrl24C2bEpBZTpmsO9g.roa (hash: roo618zomZv/80bpPa5A4SKzRxktEgno100+FqWeWZU=)
9: teSjGmrvY_tu6RkdG_34GiE8KM0.roa (hash: yc8bd5ePK4M8XX+rsAFOZYDdIrq94apPIscjQGUl9lw=)
10: ugVQrwIOiOMJPcA4zFZm9kWmY04.roa (hash: Q8pDB3SA4JzJaHb+up2jkC0do3Kit4mBYGTJ7TNXFRI=)
11: yWZ-5OdaSQI1LPfjNeNs7tCX608.roa (hash: esuWPq3Xg5U/Su3ABpCWC8pkIxvEw4LQCmVfV8WC2QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:ba:5f:4a:fa:ba:47:5d:f6:cc:b5:d0:63:f4:d5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: May 5 20:00:33 2026 GMT
Not After : May 6 20:00:33 2026 GMT
Subject: CN=a3b35c15df217916ea4f24bed35ac225020985e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:ba:80:5b:c1:60:59:a1:f0:8d:d3:58:44:
fc:e9:56:aa:2a:1a:48:88:fc:04:91:b5:89:5f:9f:
08:24:37:f5:94:7a:43:f4:fe:01:0e:2c:6f:da:b5:
c8:5e:ae:6a:73:16:4b:59:64:cc:29:84:27:22:ee:
de:e1:75:bf:0b:b4:53:84:6a:d0:d4:f2:09:e5:da:
3d:15:90:f9:fe:3c:8a:61:0b:8a:da:ba:fd:b5:6d:
92:74:0e:ba:df:11:dd:0b:f9:51:2e:1d:05:2d:e8:
96:da:a1:de:cd:9c:24:51:e2:b8:48:93:19:23:f8:
62:00:83:f4:e5:6e:c8:9e:f4:0d:08:3a:0c:9b:c2:
78:cb:ae:1c:e6:81:6c:b6:13:20:3a:69:d0:00:ee:
ee:1a:a4:21:28:07:2a:ab:d1:91:44:4b:ea:6f:7b:
f0:d4:8a:70:54:de:b0:1b:fd:70:71:5e:c6:fb:62:
fc:ec:67:5c:61:2e:09:6f:58:e4:b3:8e:c3:61:68:
5c:ff:9d:2c:f2:dc:a8:f1:3f:36:97:3a:d4:c6:10:
33:fe:6f:34:a1:d4:b1:5e:00:c6:d6:54:a8:db:11:
f8:b4:13:a3:9d:7d:56:ff:7a:09:8a:91:d5:e6:3c:
18:7f:39:45:44:2e:c0:7e:59:e2:fd:c7:81:f9:01:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B3:5C:15:DF:21:79:16:EA:4F:24:BE:D3:5A:C2:25:02:09:85:E6
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c2:6d:00:02:97:2b:ec:52:9e:62:b8:15:e3:05:77:0f:98:
ea:6e:84:0c:50:eb:3f:4a:e1:38:28:43:39:5b:67:44:5a:12:
ef:ce:80:07:96:45:bc:2b:67:6b:ca:50:fc:b2:cc:a9:32:ae:
35:0c:34:a1:89:25:58:24:50:fa:7c:c5:28:33:f7:ef:0c:e4:
7a:8d:ff:71:e3:b8:19:85:f7:3f:15:27:a8:dd:2c:fa:86:c8:
90:a8:97:c3:59:88:1b:ce:78:a8:4c:03:e5:6b:9c:f3:08:5a:
af:54:f0:f3:cf:4b:35:50:d0:ed:1a:0b:69:f4:81:1e:0e:90:
b8:db:4b:1f:0b:33:44:4f:53:97:ea:51:b6:3c:d6:16:35:88:
12:c8:2e:6c:65:6c:d8:cf:07:04:3a:12:03:8b:9d:19:e0:c0:
fd:d8:3e:bb:fa:4a:74:54:73:13:c8:86:6d:12:5f:00:00:f8:
d0:56:f9:8b:06:92:74:db:ea:9c:32:10:04:5f:e2:8a:34:48:
5c:b4:0c:99:04:30:3c:d9:9d:8d:e4:8d:8c:65:2b:68:3c:cd:
99:ba:be:02:95:5f:47:9a:ee:5d:a6:0e:d7:43:bd:b4:f4:ba:
c4:7e:08:7e:5a:fa:c8:35:e4:e0:55:0f:0e:60:a0:1f:d7:cc:
07:0b:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:41 2026 by rpki-client