
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json)
Hash identifier: 8SeuuEMV8Y8jX5zX5POhW6J3qo9s7vFCq1rD0vKJMqY=
Subject key identifier: 7B:BB:74:93:09:D0:E3:88:9C:32:AF:E8:F7:C4:7B:C9:47:E4:77:97
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 019EB98F9125FE7AAE1AE47B24C994672572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
Manifest number: 0D28
Signing time: Fri 12 Jun 2026 02:00:54 +0000
Manifest this update: Fri 12 Jun 2026 02:00:54 +0000
Manifest next update: Sat 13 Jun 2026 02:00:54 +0000
Files and hashes: 1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=)
2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=)
3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: lZk3pLDycRI7JIDuPDH4E7JKjnOtFHOnUo9TZqQoLW0=)
4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=)
5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=)
6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=)
7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=)
8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=)
9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=)
10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=)
11: HZ7C4ms11ElfIAOCXz2KP1UZQOo.roa (hash: XB0mb76ajFkdDxe5edVo54FP1IvbB8otJuWMuOU3oU8=)
12: QL4XIa93X9j8w6Q69GPbrIm9Txg.roa (hash: q3a41ZI2Ed5MjFN9KCPKVx+N+9H7Kne18XdEvUkqHKo=)
13: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=)
14: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=)
15: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=)
16: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=)
17: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=)
18: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=)
19: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=)
20: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=)
21: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=)
22: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=)
23: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=)
24: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=)
25: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=)
26: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:91:25:fe:7a:ae:1a:e4:7b:24:c9:94:67:25:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jun 12 02:00:54 2026 GMT
Not After : Jun 13 02:00:54 2026 GMT
Subject: CN=7bbb749309d0e3889c32afe8f7c47bc947e47797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:e9:c6:30:ff:e4:40:88:29:24:4c:ca:39:
2b:e4:39:fe:e1:8e:34:bd:16:a3:28:26:20:32:25:
bd:f5:f9:34:8a:5b:af:3f:38:2a:09:a0:00:cc:9c:
6a:2c:f3:9e:df:d3:12:25:fc:90:83:c8:59:76:e8:
bf:ca:d6:ae:b1:9a:e5:09:96:df:6f:6f:09:dd:8f:
ec:0e:be:ff:e0:8b:25:db:b1:b4:fe:f9:32:53:13:
b0:f6:06:ae:cc:56:87:4c:26:f2:16:3d:3a:e4:13:
11:a1:96:ca:88:9f:a0:ca:0e:c1:44:d1:45:15:c6:
33:30:40:9d:db:be:38:4f:37:9b:b0:9f:89:ef:b9:
14:13:d3:c7:95:d6:68:16:7c:d4:79:3e:a0:79:67:
8c:e3:a8:7e:8c:27:ee:f1:72:1b:14:ea:97:7f:96:
c1:3d:a3:7a:61:46:f9:60:6c:1c:f7:89:60:d0:16:
5f:53:bc:94:49:df:5a:82:e7:ab:d4:91:a3:99:2e:
ff:a1:cf:be:4d:bc:95:79:19:c8:03:98:89:c0:a5:
21:23:13:8f:e0:75:b7:7d:6f:2d:71:3a:af:33:b5:
57:bb:b0:b1:55:bc:a6:6d:4f:2b:28:32:5f:3c:3d:
54:34:fd:02:b5:7e:30:ff:51:82:e6:d0:46:5d:f5:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BB:74:93:09:D0:E3:88:9C:32:AF:E8:F7:C4:7B:C9:47:E4:77:97
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:78:64:80:12:fb:fd:fc:cc:20:e2:f8:c8:27:54:dc:cb:fe:
29:18:37:7b:8d:23:18:4c:dd:fd:26:be:85:68:b2:a9:97:8c:
08:ff:bc:ac:ee:c5:52:33:db:d7:d2:c4:69:a7:17:e6:c7:3b:
75:b6:ef:9a:09:d7:11:bd:94:62:33:9b:19:f4:d5:8e:39:35:
66:b2:b8:3b:0e:00:54:d7:f5:b8:fa:1c:22:33:2d:c9:01:15:
4a:8d:ad:a4:52:bc:51:03:40:f2:76:5f:25:30:a0:ae:1d:83:
04:fa:ab:a7:14:3c:5d:96:95:d7:73:e1:88:69:2f:cf:bb:74:
ba:04:20:4d:c2:8a:20:84:52:8a:8f:52:95:b1:7b:5a:6a:34:
b5:39:f8:34:27:cf:b1:b6:ae:46:41:71:7c:e1:58:9e:4e:91:
d0:3a:75:93:5d:9b:3a:3c:e5:9a:ba:9d:20:91:f9:4b:18:24:
ee:ec:5e:18:ee:2e:c9:d4:9f:47:d9:1f:3e:93:27:7e:db:1c:
76:3e:70:cc:e0:4c:aa:10:98:c2:29:fc:46:bd:9a:51:4d:03:
d1:de:09:34:e4:79:d4:a4:c8:07:c3:20:5b:05:de:78:f7:55:
08:9c:7a:b1:ff:a2:2b:a5:22:d4:44:54:11:e1:a7:f9:cb:0f:
77:2a:af:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:28:02 2026 by rpki-client