
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json)
Hash identifier: GML+cqnJJRHWTBJNFVhHlnRPmy8BPrZJ7cPaFrQAVe0=
Subject key identifier: 25:DC:24:56:20:CF:F1:F0:9A:17:5F:E5:06:FD:7B:1B:B3:B5:D2:F5
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 019EB57BEF67E6CD28894069E5823BDE4E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
Manifest number: 1991
Signing time: Thu 11 Jun 2026 07:00:58 +0000
Manifest this update: Thu 11 Jun 2026 07:00:58 +0000
Manifest next update: Fri 12 Jun 2026 07:00:58 +0000
Files and hashes: 1: 30puVpgFRN4YwWi8xzX_Z-3HoMc.roa (hash: o5oIpcyar+M+5831YpDbcIJBS5S/FPLnrUPDm/0y3l0=)
2: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: 8vzGKV8te/grE5AUTlpTvLer5lKdw0pxL0lWPlVNpOI=)
3: 5FnusIit9uaVrldhOS_f_neDWgs.roa (hash: Ipdoz4T//FSaZhmjoZKN6wB6EyXA0tHqJzEOkgjKWOo=)
4: 6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa (hash: Lpm2qdKvSHv1n64+iddb1tvoxMF6Y4LQAfrzqafISLM=)
5: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (hash: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs=)
6: Jmz4FnP7cL-QtALX1djqMHOUM6o.roa (hash: Eo0kFSBPojZrMatbz2kLZgOLTkqJ3viplyIKQqqpV8Q=)
7: QpckzCGCQYLYhpr74LAr4qnTXpU.roa (hash: KyNF1FltPbO/mXuIELm3YgjGIsFSe1HCrIqcFEBwYhc=)
8: V7fO1Dal8JtSLG0LOzVUcF80K-w.asa (hash: ValZt6XlRECidgMBG0dXrQbkDvp8n06Hk4Hd3QapbrA=)
9: ZRTAVRMhZT6cxxsi8He5NfGJ2zQ.roa (hash: puVDaYvy8bu1rAUQ7RQ/VHw6qx5cv46U9IaFuh15FHs=)
10: _43Htt9dzLi8msDz8qcZCkhm86k.roa (hash: YaFteb2dAn9Qn0to17VMsejQKPfSuGZrfXxllZGOY8A=)
11: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (hash: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA=)
12: tldfbdi2KX3t4BcCVx6VGGK3iyo.roa (hash: Fi4d+ISfAotrj39E0racwhFRU+l4o+QEW3BSrZlvaV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:7b:ef:67:e6:cd:28:89:40:69:e5:82:3b:de:4e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jun 11 07:00:58 2026 GMT
Not After : Jun 12 07:00:58 2026 GMT
Subject: CN=25dc245620cff1f09a175fe506fd7b1bb3b5d2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:5c:dd:c9:69:b2:48:64:5e:56:a8:4f:7e:
65:f1:f6:10:05:ae:07:52:e3:b9:6a:a6:6b:5c:2c:
40:6c:40:40:0a:7f:8b:fc:1f:83:2b:b9:be:0b:3f:
eb:a7:8e:24:76:ac:b9:2c:4f:ae:de:b1:89:35:35:
f7:51:4c:e5:50:d3:6d:1a:8a:e7:30:78:8a:62:ce:
fb:49:2e:bd:b2:74:83:84:03:e5:2a:71:cd:b4:e5:
bd:53:ba:bf:5b:70:46:b5:5b:21:c8:02:e7:cf:ea:
7d:7d:b0:03:4f:10:8f:ce:5d:e0:f5:6e:18:54:ed:
eb:91:52:ab:f3:7d:6b:65:d9:ef:94:83:76:d0:88:
da:cc:67:f6:67:cb:6f:77:09:c6:a4:6d:bc:7e:b9:
a6:48:b4:b9:8a:0e:c1:ad:83:d7:61:d4:81:f3:1c:
d6:5b:d6:53:7d:f8:ec:c4:87:98:3e:22:ac:22:33:
2d:4d:ec:76:2c:b5:43:6c:c3:2d:e9:e9:cb:75:06:
ed:89:9c:62:76:35:ec:95:e8:f8:9d:1a:c6:ce:5a:
ce:ee:df:8b:3a:2b:23:45:81:23:e2:d6:92:c6:bd:
78:df:5e:5a:a8:67:e7:7e:38:42:e9:f8:95:73:4f:
b8:21:05:81:dd:38:1d:30:95:f9:7a:41:2d:05:3c:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DC:24:56:20:CF:F1:F0:9A:17:5F:E5:06:FD:7B:1B:B3:B5:D2:F5
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ec:3f:4b:35:67:a8:15:da:69:dd:d1:f1:fd:ce:ce:da:01:
fb:21:e6:61:66:73:43:d0:cb:0d:8d:d3:6c:9f:ff:68:1f:1d:
75:f3:3c:02:a3:7f:78:1c:6f:7a:8d:b2:7b:6c:c5:81:97:f0:
b3:9b:3b:92:e7:8e:8f:25:d7:a0:f9:e9:5e:a0:66:52:ab:17:
d7:34:47:a8:33:5e:b4:8b:88:d8:df:ae:74:f2:a9:d5:fd:e4:
32:c1:10:5f:95:ac:72:83:45:83:78:c1:49:b8:bc:f7:1d:d7:
8a:9f:f1:88:71:7c:8b:a1:69:e8:00:5f:46:8f:91:90:d5:c2:
62:4a:c2:0f:f5:0d:9b:37:31:40:72:fb:26:26:04:7b:93:18:
92:43:5a:20:31:c0:09:58:28:02:d6:b8:59:65:3b:4a:49:89:
34:71:57:d5:6b:70:a5:a2:b3:05:2e:74:d1:43:40:ed:26:f7:
98:98:cc:f9:ce:71:06:9a:20:1b:90:b3:33:0d:a1:40:c0:af:
d8:9b:5c:00:16:90:c7:5d:95:1a:72:c3:6d:88:10:b2:42:1f:
47:7e:e1:fd:b1:62:ba:b1:bc:9a:2a:a6:fa:1b:b7:bc:fe:a8:
a0:04:36:6f:26:88:b4:df:64:48:6a:50:aa:7b:91:e8:a4:a8:
db:63:6b:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ61e+9n5s0oiUBp5YI73k59MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj
YjJiNzMwHhcNMjYwNjExMDcwMDU4WhcNMjYwNjEyMDcwMDU4WjAzMTEwLwYDVQQD
EygyNWRjMjQ1NjIwY2ZmMWYwOWExNzVmZTUwNmZkN2IxYmIzYjVkMmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAFc3clpskhkXlaoT35l8fYQBa4H
UuO5aqZrXCxAbEBACn+L/B+DK7m+Cz/rp44kdqy5LE+u3rGJNTX3UUzlUNNtGorn
MHiKYs77SS69snSDhAPlKnHNtOW9U7q/W3BGtVshyALnz+p9fbADTxCPzl3g9W4Y
VO3rkVKr831rZdnvlIN20IjazGf2Z8tvdwnGpG28frmmSLS5ig7BrYPXYdSB8xzW
W9ZTffjsxIeYPiKsIjMtTex2LLVDbMMt6enLdQbtiZxidjXslej4nRrGzlrO7t+L
OisjRYEj4taSxr14315aqGfnfjhC6fiVc0+4IQWB3TgdMJX5ekEtBTxqTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXcJFYgz/Hwmhdf5Qb9exuztdL1MB8GA1UdIwQY
MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt
MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi
LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuw/SzVn
qBXaad3R8f3OztoB+yHmYWZzQ9DLDY3TbJ//aB8ddfM8AqN/eBxveo2ye2zFgZfw
s5s7kueOjyXXoPnpXqBmUqsX1zRHqDNetIuI2N+udPKp1f3kMsEQX5WscoNFg3jB
Sbi89x3Xip/xiHF8i6Fp6ABfRo+RkNXCYkrCD/UNmzcxQHL7JiYEe5MYkkNaIDHA
CVgoAta4WWU7SkmJNHFX1WtwpaKzBS500UNA7Sb3mJjM+c5xBpogG5CzMw2hQMCv
2JtcABaQx12VGnLDbYgQskIfR37h/bFiurG8miqm+hu3vP6ooAQ2byaItN9kSGpQ
qnuR6KSo22Nrag==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:33:13 2026 by rpki-client