
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
File: 4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json)
Hash identifier: LA9z+mehxBSWfVLd99OLde/U+PHGQ5PY9Va3wmDfIIU=
Subject key identifier: 59:13:A5:92:51:94:E7:16:EE:36:AE:E8:8E:3C:BB:DA:46:F6:B1:01
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019CBF296E078CC179914CD6B93423F4D2F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
Manifest number: 108F
Signing time: Thu 05 Mar 2026 18:01:29 +0000
Manifest this update: Thu 05 Mar 2026 18:01:29 +0000
Manifest next update: Fri 06 Mar 2026 18:01:29 +0000
Files and hashes: 1: 0wJmdEsIc6piCPouXDNhCCpeSRQ.roa (hash: WR/b5AIQMqRHnWFbdkMYzAfrUMySKK0esBYcUMp0I1M=)
2: 1-vtr-ZbKFLqCrCL4n-xz6fooRVM.roa (hash: 8OGyoZSoVzNVbnBPq2Nr5h0HCBQam0szMSBgqEIT2F0=)
3: 3Od8fkiX1npNiDZbFwY_RwqIDb0.roa (hash: YkQ0Ohp5FtKM5KyAeZ1EG5zQjArcLpeRdP8tRQhDW5o=)
4: 3icWZ0l13CoXwoj1OeRHgYert90.roa (hash: wsyKBXi0gaGQCqdHDVQuBk8nFgShwbyQoPjf+Y1r3Qk=)
5: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: 1Gkwa2hBb19no3OjSohW61oG277EusTSyuy2a4pO+IM=)
6: B3yLGefLT397xZdjHJwz631sCBE.roa (hash: P6wNlsDfWCADEkpFOrgZZ2Ab/AJtAHaxxAaBB273BL4=)
7: CYqAHaNWukk-ByTGpHKXz3QjQas.roa (hash: wiU3rtjJU2K2wdSE2doiy1m3e5+T4eVxinx3u0FFHbQ=)
8: CjAdakK4jK3bzKfmCY1veFE0mhI.roa (hash: Z5oJMwQkoJMOahrr4QbJ28O5skdvLzLVhMGsjLOYb1g=)
9: DaL6DrQU6YvEd9tbw2QEDernfSo.roa (hash: PDFvGFyMPEFwoJ82KdbJF1LFRTBdlPDreWAzq7vqBvw=)
10: ElgFDiuFJ69k81EViaoKdimWii0.roa (hash: vH/Gl8FmnuQcMuHJNXm7DwH6UJxli5lPah4lngAmhDk=)
11: HbjKNiw4d3SEg0dTumigj0PGsTM.roa (hash: nW4tvMSwJMcIQf6OvnWLF1rZzRY1A2YzlXfxp1Y/+GE=)
12: KO3mbecsHziWft5oSlk1_j2d34M.roa (hash: f8pLS1dd6igj0miudYVCW/atCJnG106OYVdNd0IpsmE=)
13: LtoQvzCaMW0D-GhISv0hO8NnPOs.roa (hash: NcaX+GMamiFW/3NMIXtO3ttNk67Gbq5SGUiAVxBO82M=)
14: Mt4AQ66nGpX52iVTjG_QPgMc6j0.roa (hash: Nn/pGbRWzSFMrKeCQn+bGQau+a99ydSdqv5kVOvZ67Y=)
15: N1JKb0FFXQeFO056LNLZt0AcBTg.roa (hash: 9gdAbxSyKjz/FFsTkvgbz7Pc5fs2gWtqKE0xfMDTTMI=)
16: PGb3WfmNkg-vd7_bMLWrMI64YOo.roa (hash: 2T8TrrpJ5qPs1XJ1BBW0PIQrNd+77h/Qy7gmuuyjpQc=)
17: QihhibEPB5qBqDDL6gcnigScDv4.roa (hash: N2raya6LVsxTexeCuwvK4jCueOUDvTQXZAxYtw1gUJA=)
18: QkwhGPSuc7rlqlghZY18xAA7lM0.roa (hash: nAcfbt2ttDYq5SWZx/GAjI41TdBLCEtgGu5tjf8Jj2A=)
19: UETzsQ14kEiR9ZLBzc1Rs6TQ7y4.roa (hash: mJed5UC6Bhm9fWUs4Xbxi43CN/6iMd2evk2vhZxj36Q=)
20: UKBBl2CEsf7LASA1NJwQJHQzz9k.roa (hash: ab2nFWhFJ9hGPjgo6z6rHmRSN+V9cgkhljBpQZmUSxQ=)
21: VTvixWkQMb81xqq15q9rkLGzQns.roa (hash: ryhXeNesoIfEURs7jvSEodrx0dn3DmlePOw6kt2lyr8=)
22: XnT8EkhkZ4ckaqupDpvRmKmadIU.roa (hash: LOQvwDLJiJLfGtgfx8v+cSvzCjMCe4xzGPCXgXKQfOA=)
23: Z_dhLOch6TYTV9CL8O4Hm4DfmCk.roa (hash: DcqTrnDilb8Z9To81j5+j4/Q2r+QSmdq/GQFcIQwzfg=)
24: Zrsa450bIKbfMqfbbE0wrvaBwFw.roa (hash: gV8XetexIxC9mhduNSQKWVKTs+c7DiemkcjGYNaBiRo=)
25: c219QE8Kcog9UvMKST6A1X7Uzw4.roa (hash: a1rqIUue8AkZGET3xy9zr5OLEkOjTEfxL6rRJ8ZMXeY=)
26: cIdwaFMnaN_nODeJi4PVUhETURc.roa (hash: EsxYv3rUwNDmqkV+Qln5iDukLQEgXsjFwz/7NvltVAE=)
27: duHlauWDxyB55t783Auf0OjNQSo.roa (hash: Ir+MKAjO46cZx7B3mNkleV8ECfCdxsl+P9B/SC4lcqo=)
28: eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa (hash: BfuIVukiDtzihzfQ4gw6mZ6lR5/EYYRABfHkY7DcUFE=)
29: gHMPiXlYiR1x4sp7jOG4nP5jGK0.roa (hash: 5XQJ6M+b3MHT2W1uXJ+885106HdpcwsdlORrc/CZ+DA=)
30: iAuw5JQ3mAXjxY6QWG9RY3yTA-Q.roa (hash: UOg7kVgDqAJH5jfqy325Mwl+Vg9DYyHjwnI/jC5MC+Y=)
31: iBGEz-tej_FAq47hFEt3LXiPlAU.roa (hash: ZRiJC5SNia2u87xjZ0fDw27CPe3Mlgd/yd0/2xGYRfk=)
32: iYbozmAhuZXekfOxptVTlOnvYkY.roa (hash: /WhAE5gig6ZNzm82pZ7dm3ZCXNI4YTK2pP/V1Kuxu6Q=)
33: ikDfAfW-xsNgatn_b62wDmF7okY.roa (hash: bq2Bb+Lv2eW3TT7vk5HpQA8N5AAEROY0+VpdWIj88l0=)
34: ixlHNu2_mnzAJBGs42gMZOXVS-Q.roa (hash: 4ukNbla1Rh/IrJg9w1Y8a9K5puzNuFrwpCnA9N5ug2I=)
35: n7USEOktH5zuMAuITWQF7AXRczQ.roa (hash: ikLG4Fs9JJDgwb3XKOBoWhu8ubnMCzT/Buk9vuX9UaM=)
36: q1ZdG5coyImHf6ftDV_fJN05zN0.roa (hash: /FMVwyaiBz1KIIrw5ZuZxGbjVJzRieiWH5j+l/QSUDc=)
37: qQS_F_mT_BWgZgn64x2PrZ0b3x0.roa (hash: K0/dXe9UF+Om/KZSB0gVADYHMqhu4p7EFjTPAov2x7s=)
38: tL1Tl9zmF3hdb1BWPFCSKDcR1Go.roa (hash: QmuBppG53RYStdASLaqGl2PS2gbLglSq+UlA/UliIXg=)
39: u-R-koqCp8nRkuD0Y5r1BH5-lsw.roa (hash: 8g2tRV4JH7xDIu/08ND0MTZQHMbLS8qbUqp1ZK+nfA4=)
40: uzgAI7hlsT6K2Lvcaksi6ldtZag.roa (hash: dI/B0kk5Noti3Cu9uZ1OWU7GUEx5+dx7Iuukl1B+l+U=)
41: xIdot6FAjw7dfRg6u_ByXcj3lDM.roa (hash: 8+XjLrCilLhi21bpw8d0FOgL/oy8JtzB6AjiHlyT9fw=)
42: xXH0TOzedy66ElcG97fd78bjZKs.roa (hash: o+POX8ljapRUWPdy9GAdGv8frb0Y/VYtVrs0Cw6iNAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:29:6e:07:8c:c1:79:91:4c:d6:b9:34:23:f4:d2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 5 18:01:29 2026 GMT
Not After : Mar 6 18:01:29 2026 GMT
Subject: CN=5913a5925194e716ee36aee88e3cbbda46f6b101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:33:f9:50:43:ab:83:ae:14:46:23:96:e9:91:
d9:d7:2e:65:12:4e:84:35:98:41:72:b2:35:90:0c:
fb:84:f8:8a:50:48:7a:bb:be:be:85:52:6c:e8:99:
da:cd:f7:02:99:ec:1a:86:f5:65:fe:e3:3f:72:bc:
a8:c4:08:8a:42:97:5c:5b:fb:48:05:8c:b0:41:77:
1b:5b:e1:9d:69:c8:fd:b7:fc:46:f3:20:9a:43:97:
b6:e4:0f:f8:e9:03:ff:3d:f9:e6:8f:46:f4:61:a1:
75:37:0a:80:16:6c:77:c9:35:cf:15:e1:64:33:31:
a9:64:2d:ca:9e:5c:76:1d:3f:02:3b:42:e1:e3:60:
bf:03:b9:34:82:fa:04:e8:a4:0b:c9:22:2c:da:f7:
3f:ed:8a:98:ea:33:ab:51:50:71:ed:05:f3:67:2b:
4e:0d:25:12:14:c1:68:d5:37:7f:41:03:35:d7:93:
c0:03:ae:a1:b2:0f:05:a6:5d:52:5e:4d:04:8e:95:
19:0e:39:01:db:ec:ea:82:8d:fd:7d:f9:b3:74:9f:
df:8e:60:62:3d:17:fe:fb:52:4d:d0:d5:31:9a:b6:
20:7f:43:10:83:62:91:34:59:d9:82:7f:49:28:c6:
c8:b7:f2:08:a2:56:bb:1f:71:9c:9e:07:77:86:8c:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:A5:92:51:94:E7:16:EE:36:AE:E8:8E:3C:BB:DA:46:F6:B1:01
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6d:e0:64:a0:cd:93:51:15:64:37:58:76:90:3a:b8:fc:e5:
d2:34:e8:0d:5f:2a:ef:d9:8c:c2:f5:2d:5f:f6:25:68:f4:a3:
0f:7f:b2:d1:cc:79:9d:79:69:51:f3:1f:45:c6:81:1a:76:ba:
6b:93:4a:d1:a3:e5:8d:e5:cb:d0:cb:93:f5:0d:23:41:78:80:
9f:1f:7f:95:9e:3c:d6:05:66:c4:36:15:f3:cb:26:23:01:77:
11:55:84:49:b1:c5:12:e8:a4:38:35:65:34:f8:0b:96:bc:b4:
70:5d:54:19:26:27:28:c0:41:dc:1a:d4:7f:42:7e:10:6e:9b:
16:4f:b7:c4:2c:7c:3d:04:2d:d5:ba:09:8a:63:12:db:e5:b2:
1f:b9:90:5c:8b:30:f0:db:5a:ba:97:3f:c5:f3:fc:6c:94:c5:
5d:62:4a:b0:47:7e:ef:8d:3f:9a:6c:2f:58:cf:0b:28:44:56:
6d:7b:00:e3:15:63:f1:05:3c:3f:cd:ca:a1:9f:c5:79:59:14:
ca:2f:e0:47:2a:87:31:e8:9a:83:cc:6b:3b:94:67:4f:7f:80:
d0:7f:e0:c6:0c:85:c1:b1:d5:73:e4:69:05:b0:6a:dc:6e:11:
b8:29:5f:b1:9f:c1:fd:94:c3:fb:b2:ae:d9:dc:dd:b7:66:60:
2f:f7:b7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:59:18 2026 by rpki-client