
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
File: rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft (raw, json)
Hash identifier: Q2PAjYkWmB0RlL9hWwUyQY+kS8yT9dkYLBr42LccR58=
Subject key identifier: 60:35:06:8A:00:C5:3D:E9:70:7B:08:C1:68:40:CF:B6:68:28:9E:05
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019D3752A278A03266B3550CA752B64BB6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
Manifest number: 18BA
Signing time: Sun 29 Mar 2026 02:00:55 +0000
Manifest this update: Sun 29 Mar 2026 02:00:55 +0000
Manifest next update: Mon 30 Mar 2026 02:00:55 +0000
Files and hashes: 1: 3a7_WjUjHvmaDKMR_0n-V2J4S48.roa (hash: HAXb7MwMLIlHkvY0JciFwEcWW+cBxNegwhoL5MEj+Y4=)
2: 4GnNaMU7ozZwZhW2J2112doh_tw.roa (hash: WMA3aYgk7G+X7flrtEOgH24fD1TLzYLGipLG5KR0H5o=)
3: 5a_1BXh6OJ5EsqB5H5lDXNwNoec.roa (hash: RJ3VX8HghkzCma3QJ9QJO8+1DyrcpupoHfpYlwCMq0M=)
4: 7zF9eGGNAAfvZXhKrfV2IrWDGzM.roa (hash: 7ShADED+6ABWdUZq+N0c2d9qFBvXvIfuwCNn0VPe6D8=)
5: 93sTot__pOvELS3ZJJ_0IKYI80A.roa (hash: cd3DiMi4zFZH02Z5vN9iUfleyfgwEhyhgnSYBKXSIqA=)
6: AVErlpP2VhysTwGtrB64czf3NqI.roa (hash: UMyN7o51qi8PMB0e1ciRLYkKAE3KUtpoBs5v/wpa8yo=)
7: CILl_zyXusNg3CeT5TPh9rVx7SE.roa (hash: FdMkKAGOUUSgyKvsP1F6/x5+Yu144fskvlYf4TyAXN0=)
8: G_n5RA6W3ZkloaFthEn-Fh-sCzM.roa (hash: c9qFmEiCdxto7E6131yKqNFNOUJFon6l2MhL2xlVtPs=)
9: IPJjNe_cB3zjIZyONYjGoBmmxrw.roa (hash: g27Ahx8NQ/P8ycHloD1dj7SU+EOwFLKNLXOaBXz5Lxw=)
10: JowNFbKi_vYoTRs26ptdtrIOuaM.roa (hash: TJWkhhs28sV5YlSQhf17WgqKXSfgnNIE8e2Aaqdz+vY=)
11: L5CGhyyEcuDPtwlMoB7T0ykBOW0.roa (hash: KmUkqVbBWAmW4Wsgbx+66HRsHh83JXR5eCNYk4qTJ3c=)
12: MInmjTvW1jbn8HVs4d7pziBXvog.roa (hash: sqeC1+d5oRvHYURRaJApXOy7p3KmwZMMfOX3s+0N5no=)
13: NE2GOUp8VIyuS7uEVlhZkJthz3Q.roa (hash: cCvYyHI6VXA2SHqtxY6FdqOa8OINU3B57RbzyCoIYmY=)
14: UAqIdWPIqmUVSwMzA6hXTX0Ailo.roa (hash: C2S4KpTLma+Nr0C/LgZeLhVTXWrhyD4esp1prszfICc=)
15: UQs_v6zqbOmXSl8dyqIq5u6i-_o.roa (hash: 4jx6EXQhbefzVsskhUYOXoXxrxUb8CxFEYfTlZeZuSU=)
16: YnRIz2LAVm6T1ngHwYknchOMZ5g.roa (hash: O08Dnht2tycilQ0sCxxQOH4+isy3TkZ0CpI/HxIUNRM=)
17: c7D8z87seThahzJGV1xxzUC68yM.roa (hash: lEtNJalbVark+w9kQtFPEtaaKlnnHtxsb3MXywog3UE=)
18: cMVqOn9_O511UMJeh_8L-Q0ryD4.roa (hash: GPsJ34P/KBtvf2V8PpxfXTPLlIXgJHes62O2Gn8/mMM=)
19: eFpBdg6bsZMOceMMDBSJPbKerRQ.roa (hash: 0CNpt//WjjkQ9s80RqkgFSsUKxYW7IA+iSGJkuAzflc=)
20: gfHF0_9tC_g86XlB0EGuBJeEcF4.roa (hash: dW+/GSUe21Y9vzGs6gA/zL83gMId3e6+CsIQ8ML4Lxk=)
21: kHyeVvn4JoARm1ZgfSsn_4sjUK0.roa (hash: kI7ZNlTpRra3MpODVxn5O1XIoHdEb9TeHKIqmZcOjSw=)
22: oV0JLOMHWgEPodfJD7fettcMDKo.roa (hash: 8byXH6iwa9ptsygTXF7KrIJlXXNBNYRMHn/3mZG+lWQ=)
23: pKdyppPaHYtR-oyAX_dINAizQCw.roa (hash: 0aaYkpeViKdlLjKyoydpc47P1Ji22FZ3Tvk3MaL7ELU=)
24: qv25HuVkGD25YIg_oR2WSTGPtS8.roa (hash: AhkATBPCei80O9bXQPoD49GvTRXEmbOiuSx3aLVtzx4=)
25: rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl (hash: PrzbWWBfMB2uTZnvthOVaFANYLX3lDQ848SF/Da8/NA=)
26: uLFuSxmniVdOOB-xJoPZwASxLt4.roa (hash: FLb2IX6npCXvVAUlOdGVEYczSWz0bZw/0vsaAGxi3UI=)
27: v4E8ct6NaQaC0zYbzvukfpVoFlQ.roa (hash: gmtuefqcnpBpqJUGEwxDDhZb8NTc6oQgtAx5ttlsZSs=)
28: xjnYzgBcenqcxEq_xCvUmgvi1LI.roa (hash: Z9ZiuEMfsOlYoKUCQ/ZjnzpK4neZkRT5jBddWL6d7fM=)
29: yLV7lfd30bAjDnQWLnJQ_McSKtA.roa (hash: LMA6JBfDwM4DNAaRQWUraFrUGqg8Vgx8QA0i7GxUahs=)
30: z8jkcsVGt66_sClw6OoCA4fxiD0.roa (hash: O/OxXPCdKehv6qCJUwydClm29EJLOL6Thakr4fdICZo=)
31: zJiOXGbGwUWAQNdVo8W0kNXtTvY.roa (hash: C+8e5I+GbSwAG5M+lCl7ucBJaBL9QyOfEWbG2V8egMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a2:78:a0:32:66:b3:55:0c:a7:52:b6:4b:b6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Mar 29 02:00:55 2026 GMT
Not After : Mar 30 02:00:55 2026 GMT
Subject: CN=6035068a00c53de9707b08c16840cfb668289e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:91:e5:d6:41:43:f3:85:92:bc:34:96:8f:
68:e6:ff:88:37:90:30:6c:46:73:06:36:ba:60:dc:
fb:42:81:8b:ed:a0:70:d1:89:36:c8:47:a3:ee:43:
88:7d:26:eb:ab:03:9a:64:04:41:97:ab:84:cf:1f:
58:a9:5c:4b:69:e6:d4:49:92:1f:e8:ad:07:64:91:
55:60:11:b0:95:5d:98:10:5f:0e:80:d4:69:38:1e:
a1:5e:ce:e6:b3:4a:f7:09:2e:0a:14:9b:64:b1:26:
67:d1:e5:62:c0:ab:83:f2:5d:07:1c:ad:6a:8c:9c:
2d:9d:81:ed:c3:22:7d:59:f3:97:28:e4:f1:35:d6:
26:db:87:7d:60:a3:8b:5e:6e:49:f9:1c:0c:c9:ea:
8e:19:fa:8c:cb:c7:ee:80:25:76:83:82:93:53:2c:
93:6a:d2:c3:4d:68:b2:ed:e4:6e:60:f0:1d:cf:ec:
6d:41:c4:aa:3c:ac:55:3d:8d:be:24:42:50:6d:8b:
cf:f0:1f:54:a5:12:99:d6:6a:98:cd:30:c1:db:e4:
b2:7d:ab:08:51:84:ef:2a:7d:ab:d0:3f:1c:a7:46:
ca:2b:ab:4b:d9:53:d8:a6:c8:df:b4:3e:c0:93:1e:
6c:47:cf:82:ed:59:85:a8:3a:63:57:4c:f5:1b:79:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:35:06:8A:00:C5:3D:E9:70:7B:08:C1:68:40:CF:B6:68:28:9E:05
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:56:bb:f2:39:94:19:2c:f1:fe:fd:99:89:b4:e8:a4:0b:f8:
a4:80:d6:80:77:09:4a:9c:55:3d:d9:ff:3f:b4:1d:73:88:b9:
24:95:b2:e8:96:7d:8e:89:cc:4d:11:37:64:52:8b:79:be:3d:
af:fa:de:e4:24:97:17:e4:ab:c5:49:cc:b9:c0:43:d3:7b:6b:
5d:21:41:2e:0b:c1:c8:e9:17:59:3d:ea:1e:ef:03:0c:99:df:
43:37:77:48:d5:4e:fa:b8:7e:af:7c:a2:82:b1:87:73:5c:11:
99:ee:62:28:4c:f0:72:10:f5:ec:13:0f:b5:08:29:3b:3e:5e:
3f:83:cb:bf:46:ec:3f:b3:d2:91:fb:e7:15:26:25:0d:6b:01:
28:e8:32:28:b3:9d:d5:bf:68:ae:d8:20:23:a7:4d:4a:55:46:
7a:57:01:be:ac:92:fb:1f:46:3c:61:26:ee:de:0f:d1:f6:de:
97:6e:a8:be:c0:0b:69:4f:27:28:ae:d9:14:99:84:68:00:5d:
f2:6e:0f:31:a9:bc:30:e0:75:27:98:17:76:98:0e:cb:25:a3:
b8:b4:70:7b:10:8e:de:54:92:47:ed:23:6e:10:ff:bb:b5:a5:
19:c0:a8:7f:8b:a1:47:2a:97:9c:c7:91:ee:f1:5b:be:e8:fb:
55:28:ea:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:54 2026 by rpki-client