
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json)
Hash identifier: uCFM3iP0d5aD7Yq1gATMVg5nKQv9vMKBrLqLfHfSEoo=
Subject key identifier: 15:93:81:7F:55:02:95:F3:3E:3B:0B:D0:3A:92:5F:77:5C:ED:AD:37
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 019CE636307ABEE9F0AE9D7936F9F8DC6527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
Manifest number: 0C34
Signing time: Fri 13 Mar 2026 08:00:36 +0000
Manifest this update: Fri 13 Mar 2026 08:00:36 +0000
Manifest next update: Sat 14 Mar 2026 08:00:36 +0000
Files and hashes: 1: 3XxaxeuZ7iM0ebsgQ6e4nE8tq1Y.roa (hash: ZHQvqc3AjnvJ4i30CY2+IHpSDOtKKcn94Zv5aIxu/F8=)
2: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (hash: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw=)
3: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: WkloWivf9JiAiYClgbuoW+Y58LOPI2J4opwMfaqjIPo=)
4: 5hEpXm6JhvNCBMohzU0WFPWcKWc.roa (hash: 5apiiJXUanfecSLX+wSn16e0ImKfrAKnCBH8X2xdMts=)
5: 7HoJjRsw9_yGsPOoQZOg5iSXzM8.roa (hash: wOK3QkIDyuyuhwElcyAXXhM7VzIujoUrpG6d1AXTVD0=)
6: 8ox74_3b54ZfTc4DeQETb8PsUPY.roa (hash: vj2+zv5BVQ43SpJ3ePtXZ5AYs4y6XvVrTsGHlyhgZT8=)
7: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (hash: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI=)
8: EINmH16ST6OUnY1UpUrXyjquvLI.roa (hash: vwKYSQYNUUKZRTfqbJNmOaG0AXH1wXYAB9jnHwduhJ0=)
9: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (hash: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk=)
10: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (hash: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k=)
11: TrG4pnKU9a83MBBasyD0Ivn02bQ.roa (hash: Z2HeK8ZrgnND3BzDzaG6qvWsR0AG5jzPVRskgeF9nrE=)
12: UHt3t85lrKHcyjienOyacQwMwos.roa (hash: hY4NRwA9EwRYqsnV0/TdPTzMBwj14qwILJc+qsHefLY=)
13: ZMww3s4SgUbcv1vXaQXxI5rF2As.roa (hash: tdO0PjMgmNl+4sBpkXgoSewTuzECcJf6zwmM9qa8uWI=)
14: Z_dqpDR46U8a06PlLNjM5vLBW6g.roa (hash: 9eLcbAW7bFjEoS4sJ/flUUOf9W/Q/QeXHH/Nf8GqO7E=)
15: _82cHPWdD8U7C1sniheBgC2F7fY.roa (hash: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko=)
16: avB3BJTEosYtGqAqX_I_e46zMIo.roa (hash: tQdZzTA0pjh0uRVc3g5OMEZULnG07QAexhOO4lWbwiM=)
17: b756xL9Ohc4j-N7yuoOMTmSfzg4.roa (hash: e8kS2C9m/jMicLDrkmKtaDWY53H+r+O/OyqUYKWbl0E=)
18: hEV1AO7cmD8Fxt7_HPntz-NhYa8.roa (hash: 4QBBkQhpKfouENaQ8oOXZecXgb/rwr35/TlkQhonMwY=)
19: irsMyG4o80ZN9Sk8EByejJziQYw.roa (hash: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg=)
20: l5AMFBmHig3utUwAeUoIptYvWBU.roa (hash: 29Taz9FkGiqdp8kzswOfND0kqZeVLaNfps7c+42KXtU=)
21: lj669dX1v9pNSJRiu80sXV0wDEU.roa (hash: a71cJCBEg+tia0cmJQMaQwkbw9fYgnq3IrPLp8Y1TeY=)
22: mug4xbomzaetj7AbqFb1Z7Hzfuc.roa (hash: Im7mIZjfsxeaSqfKSctYOSnWuVRcpLrD0caKVFIE+7U=)
23: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (hash: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78=)
24: qharjoYw5TDEtIf_l3c7aPwXTD8.roa (hash: TEWcqez4B3s/VWobIX7btBqISBR9JER1IYMvOR5OrNc=)
25: rPGOaQT_OmBAJqUyQykV24mLyKs.roa (hash: f9K5lcsoxS9S8VliZjknC4Exxafsx0Xp+rbtKzm43FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:30:7a:be:e9:f0:ae:9d:79:36:f9:f8:dc:65:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Mar 13 08:00:36 2026 GMT
Not After : Mar 14 08:00:36 2026 GMT
Subject: CN=1593817f550295f33e3b0bd03a925f775cedad37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:5e:e7:30:ef:64:04:2b:a2:02:12:06:82:
fb:ec:9d:7d:55:a9:2e:f3:f7:0c:07:1c:d1:f2:fd:
82:40:cd:e3:81:82:7d:b9:51:8b:e1:4d:6e:19:e3:
25:16:d8:77:a6:47:d0:31:d0:12:88:c6:dd:b9:e4:
dc:3a:7d:17:24:f9:0a:4c:47:63:5c:c6:ef:97:51:
8d:6a:72:e1:fb:4b:3e:2d:f5:b8:53:b5:1e:b9:ee:
e4:b1:eb:ae:1b:0a:4c:c4:a8:13:22:e7:23:95:a9:
c8:de:45:20:cd:da:4b:5f:3f:95:21:7c:c2:bc:71:
dc:ed:64:0e:a7:da:bc:83:71:97:11:70:42:97:89:
39:8a:d4:81:a4:fe:ff:c8:79:1c:d3:30:72:f3:9e:
cb:2a:62:d2:8f:b6:9d:95:d3:ef:c6:08:de:55:19:
4e:0c:61:69:01:94:da:9a:ce:84:0f:4b:b0:a2:06:
e9:42:2a:6f:29:ed:55:68:e2:63:77:d1:02:f6:95:
52:85:9f:a1:52:dc:88:cd:77:24:57:b3:3a:a8:c1:
fa:dd:c6:c4:55:19:2a:50:d6:22:bf:10:dd:f5:f5:
44:29:f5:7b:85:aa:05:ca:69:54:6f:97:97:64:b4:
9a:3c:f0:59:3b:8d:27:bf:a3:5a:1c:e6:4a:58:de:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:93:81:7F:55:02:95:F3:3E:3B:0B:D0:3A:92:5F:77:5C:ED:AD:37
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c3:51:4c:31:b1:f4:bf:13:7e:ee:d2:e1:72:31:eb:8d:ce:
be:54:0f:7f:e1:11:e4:44:e7:33:52:67:90:f1:8e:f3:6d:e4:
07:14:99:3b:a5:72:b8:7a:16:7a:74:d5:2b:38:0c:8e:1d:5e:
a7:e5:95:ab:66:7c:3e:f9:71:5e:e3:44:49:b7:ad:30:7d:e8:
0a:f4:98:b9:99:96:66:07:e9:df:90:97:8a:0a:1d:a0:72:e9:
38:95:e6:d0:82:13:d7:c0:22:9d:83:60:d6:b4:5e:26:13:53:
49:7b:16:51:f8:44:15:59:ab:0d:c8:9e:b4:34:03:b8:3d:c0:
37:af:cd:28:92:65:67:fd:eb:1c:b2:7d:3d:0a:9d:36:ee:aa:
bb:7e:bc:fc:8b:51:89:4c:65:a1:38:21:f1:0b:d9:40:97:73:
03:99:ca:d7:89:89:67:f4:27:30:30:e5:a1:44:f6:c4:20:d0:
7d:79:36:e4:f9:2f:93:c5:3d:33:c3:0f:28:74:0f:e4:9c:74:
bd:fb:0a:f7:5b:c4:4f:32:b8:19:4e:20:29:ba:89:04:3e:60:
90:59:9c:f4:06:cd:84:3d:56:9e:9b:db:8c:01:5c:d1:3e:8c:
cc:3e:56:66:78:11:f5:58:e9:de:20:f1:60:27:58:fd:5b:e1:
a6:b5:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:34 2026 by rpki-client