
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json)
Hash identifier: 4F7nDQEF5ilsrFLdk3uho57ZvRHAUKOEpfnVb/EsJog=
Subject key identifier: 9B:61:A5:E3:4A:36:DF:B3:79:2E:5D:20:14:35:32:A1:72:FB:44:7E
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 019E6BE2F14D616F96D7D7B7F040882BAFB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
Manifest number: 0509
Signing time: Thu 28 May 2026 00:01:35 +0000
Manifest this update: Thu 28 May 2026 00:01:35 +0000
Manifest next update: Fri 29 May 2026 00:01:35 +0000
Files and hashes: 1: 0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa (hash: XeB6K6T8p6c7RwUL3urLh05fa1KeuyMXlU3sgTg6kwI=)
2: 1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa (hash: h7CqqSl2LQjJmhCLF1MeDbbfhgUi7N6nFb/MApYSj04=)
3: 3gai81UGgfLPbQftciy3jGMkOwI.roa (hash: kiaWDVp8FEgRP18QSL61NeSbPNIL/KFNeSuP3Gkl88Q=)
4: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: G1GMLlixCQ7i1xXRjQMUHp3p1DxjxZ6Wy6HUjPtYf24=)
5: C6uUnb-GcnQfqIvL7gX32SouFUA.roa (hash: W8gXCQVnHQZj4Fig+/xRtixgdI9dMwYVfKpFVE38sls=)
6: Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa (hash: qthe4k3qdM7snNafkTyRsJRCRgLD006FLSrfqpvtf/M=)
7: P2DOHQZk6uadyNsFYKTvp0Yljns.roa (hash: drWm8UAEyYp0gk5pD0pZZGlNfBy4kmJrj0xpKvuccbI=)
8: dUz1_BGuEwa1si0sC79DuRXSTMw.roa (hash: EggvRKKO8J9fQom0RkmSKJQOGfA94V2BXYRDmutG/IA=)
9: jG8u0DdMeVDnzAs9ajzk41GxjYI.roa (hash: 2i9+DbG6rnpNrbDbrTa+vcvNqwfsERMCoNQAt/YdO9A=)
10: pMSYP5P8y8eLfNyDEeXV3zc-nps.roa (hash: enJ6YCYyQ+/wl2mffuOqzFyRpZKc2xjCWdqck8SgcXI=)
11: pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa (hash: 2qg2UMxY9Ne99nZ+znUrMGap65SST+L3iSUILMH/2YQ=)
12: uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa (hash: 5GA0c289K1eM0975vFreXvBAvts4XCEq2R0BlZHe6C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6b:e2:f1:4d:61:6f:96:d7:d7:b7:f0:40:88:2b:af:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: May 28 00:01:35 2026 GMT
Not After : May 29 00:01:35 2026 GMT
Subject: CN=9b61a5e34a36dfb3792e5d20143532a172fb447e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:b9:99:c7:88:5f:6d:fe:09:be:d0:e3:b7:
76:06:bc:9e:6d:34:59:05:b1:e9:2a:10:e6:2b:a2:
01:5c:a3:0e:68:22:af:ba:dc:99:1b:dd:83:15:f3:
4d:c0:20:4e:4e:b7:b9:d3:37:28:18:91:23:9a:e2:
65:19:26:bf:8f:c3:6f:ff:5f:67:8b:58:c4:3f:be:
e1:e2:5a:bb:b3:78:7d:66:c7:96:03:7e:93:39:84:
d5:e0:30:28:ff:4e:00:8a:2e:1d:e7:57:f7:01:6b:
c4:29:33:17:90:38:1e:3c:5c:9c:f3:51:5a:e7:55:
7a:50:a0:8f:53:50:28:9e:e4:da:89:a2:3e:fa:f5:
dd:fd:96:c0:a7:5f:92:03:a6:ad:e3:c8:a4:51:07:
74:60:d1:68:46:de:56:65:06:85:70:bd:6b:b1:40:
0c:fd:cb:1d:c2:1a:d3:b4:f4:bb:4a:67:13:f9:16:
f1:74:74:7e:68:62:19:41:f9:ff:8e:bf:cf:a2:6f:
3b:cb:97:18:31:27:bd:1f:e8:25:bb:03:1b:1d:d0:
84:38:54:ec:d2:f5:67:43:fd:ca:9c:6a:7c:ab:bc:
0b:51:dc:20:8e:b3:ec:3d:76:b3:f2:25:43:a8:84:
18:1c:f2:8c:a0:17:1a:38:09:be:04:cd:89:8d:2c:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:61:A5:E3:4A:36:DF:B3:79:2E:5D:20:14:35:32:A1:72:FB:44:7E
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ea:f6:12:01:8e:14:07:57:06:e2:0a:f4:21:d0:bb:f5:9b:
cb:c9:f2:6c:1e:6d:70:a5:8f:35:0a:33:69:be:79:ae:72:93:
ad:ff:c7:a8:d1:d6:62:5f:3a:dc:00:6c:63:13:fa:04:3d:70:
f8:83:1f:82:d4:64:66:c9:1a:02:43:e7:2c:b0:26:95:4c:43:
cc:34:a9:87:3a:c5:f8:2c:60:40:29:89:2f:f4:d3:e4:d7:b1:
0d:a7:68:ef:b1:a1:06:d1:e2:71:32:b9:80:0f:c9:e7:d3:25:
9b:df:77:0b:50:58:14:d8:7e:cf:b8:b0:34:83:fc:85:7b:1d:
21:b7:77:da:0b:92:82:57:5a:6e:49:24:69:41:54:50:4a:a5:
79:67:2f:9b:4b:6d:e2:97:80:0d:0d:01:41:da:fb:5f:38:ab:
1c:fd:52:31:ca:25:1f:72:20:2e:52:b7:4d:42:0b:bb:08:82:
21:34:da:47:59:f2:19:47:ef:13:56:55:95:f8:63:5d:93:de:
59:69:72:20:1c:6c:67:fb:bb:ee:f4:aa:81:ee:7f:c5:fb:83:
23:2b:48:fd:9f:f4:37:a3:ef:74:b4:de:24:93:bf:41:04:fa:
88:29:65:d2:92:74:25:87:55:c9:9f:c8:fa:bf:28:64:b0:8e:
a5:a9:9a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 05:51:25 2026 by rpki-client