
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json)
Hash identifier: OQT7WQSCdkBeMRLDdxTvJcVjHodIktRDVr9JXuF1OLw=
Subject key identifier: 10:19:2C:16:2B:5C:8E:B0:1E:35:C0:82:9E:6B:C7:BC:65:18:52:10
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 019DCAF3D61D87E734DFB30DF56E1EC2DD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
Manifest number: 1910
Signing time: Sun 26 Apr 2026 18:01:10 +0000
Manifest this update: Sun 26 Apr 2026 18:01:10 +0000
Manifest next update: Mon 27 Apr 2026 18:01:10 +0000
Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=)
2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: HxzsqXzAD+qPHPv1SulyVQ/7IWYwxctnac48Tg8a9aw=)
3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=)
4: 6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa (hash: Lpm2qdKvSHv1n64+iddb1tvoxMF6Y4LQAfrzqafISLM=)
5: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=)
6: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=)
7: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=)
8: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=)
9: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=)
10: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=)
11: _zgHSNgwAnxGvAKMk5omum7rI60.roa (hash: 1Jz0MZ9os9Ya4CaMGO/CHJzjBQRQzLAYl4B2MjOsxFw=)
12: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ca:f3:d6:1d:87:e7:34:df:b3:0d:f5:6e:1e:c2:dd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Apr 26 18:01:10 2026 GMT
Not After : Apr 27 18:01:10 2026 GMT
Subject: CN=10192c162b5c8eb01e35c0829e6bc7bc65185210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:42:9d:96:69:d1:35:7e:39:0b:65:5f:f9:
4c:f9:4b:44:72:13:fc:f6:55:ef:94:77:d5:3d:9d:
6b:83:5f:f7:f5:17:cc:d4:43:30:95:2b:14:17:68:
bb:0e:7b:14:b2:cf:84:c9:4d:84:8f:8f:df:6c:7e:
96:3e:1a:32:0c:c0:c8:e7:55:87:b1:f2:fb:c0:2b:
aa:9f:ee:67:cc:33:35:51:ab:0d:01:1f:05:c8:c9:
b9:3f:9d:87:fe:10:72:1a:18:64:30:48:d4:c8:80:
e2:11:71:52:0a:c7:20:8c:14:1c:dc:bc:63:f4:be:
4a:59:04:ed:1d:ad:cd:74:d2:c5:4a:14:85:0c:a7:
f2:86:1e:bc:49:29:bd:89:63:00:c6:37:54:dc:ff:
3f:bd:b5:f7:84:3b:c1:2a:38:b9:68:45:e1:d8:81:
1d:f0:61:6f:8f:9e:83:7e:0d:c5:b5:7d:0c:a0:e5:
bf:40:27:e0:88:0f:32:26:db:00:b9:5d:44:75:73:
23:84:0c:8f:e3:32:59:fc:73:c5:2a:ec:a6:92:de:
56:a0:13:83:61:37:f1:c5:94:5d:13:1c:17:4b:f9:
6a:6e:b0:24:ee:8c:e7:12:c7:25:c5:49:ec:88:1c:
93:3e:7a:f4:a4:95:2e:15:0b:bc:c0:a4:dc:97:f6:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:19:2C:16:2B:5C:8E:B0:1E:35:C0:82:9E:6B:C7:BC:65:18:52:10
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cf:07:43:c9:41:c2:d5:af:2b:45:d9:16:cd:23:a3:d6:6c:
ab:4e:47:89:77:d2:eb:07:8b:6c:55:b0:c7:2e:33:e2:e6:a5:
e2:0f:77:dd:99:a2:3d:4c:ec:d6:8f:7d:9f:c4:d2:b7:f9:95:
0c:82:8b:d1:90:af:28:51:cc:97:a8:fa:ae:87:28:33:a3:24:
6c:e8:8e:4f:d0:3c:ca:02:fb:d7:e5:5e:80:05:bb:7f:29:f5:
3b:3a:1b:4d:ec:2a:b1:43:74:2f:ab:d4:33:b1:f9:f9:9e:81:
d8:32:d6:74:92:44:36:ce:d9:97:18:b8:85:75:b5:0c:8c:91:
ea:7f:4b:42:45:b2:22:f2:74:45:58:0d:43:82:cd:16:12:72:
0b:a7:1d:ee:73:25:ba:b3:b6:d7:25:8b:d9:ef:24:5f:6a:19:
39:52:73:14:05:15:e1:fd:ff:d5:10:83:1b:a7:74:0f:38:90:
6d:93:8a:a0:61:59:43:03:b6:3e:fc:4b:b3:63:88:e6:fc:6c:
0c:0c:35:7e:2c:58:d1:b5:93:bf:fe:31:92:c7:3b:e0:ea:a9:
c3:4b:25:e7:af:96:be:2c:04:6e:a0:5f:2e:3b:df:33:95:9b:
79:0d:d7:a9:f4:ab:61:00:f1:64:68:24:01:0d:01:07:c1:c2:
0f:50:8a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:11:14 2026 by rpki-client