
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: U++rNjOcflcIFVyKM+9xPlsQvCuCPrcEcisKBRfeSVg=
Subject key identifier: 2A:6D:61:1A:C5:B1:EA:3A:B7:2E:A8:19:45:AA:81:D1:1D:7B:29:4D
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A179CC792DDE9E7BD74BAA9D9074829449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 1B94
Signing time: Mon 26 Oct 2026 20:00:05 +0000
Manifest this update: Mon 26 Oct 2026 20:00:05 +0000
Manifest next update: Tue 27 Oct 2026 20:00:05 +0000
Files and hashes: 1: 0G-eLglQO5astEK_2JotMb_4mBM.roa (hash: tqkl2/97KdyMYxkSCjVwYnibP1ZUwHQIiCwlrzieqHY=)
2: 25NsAy6Zb4V4wHw8SuBQtO4YPmQ.roa (hash: SS4nLGek4h+Xt7yyCWu7xQQN6LKOYslAoHoc3QSuLEY=)
3: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: 3JYrrgkuag1rkPkuMQAFieCYaQgvttM/JpXSTtsLqx0=)
4: 52y-0XyWlUrstwPHR7f7adXOIK4.roa (hash: jfCtVZhrqiXyiI7LOyPX6/5Uzc70n8urXJap+PRRJHg=)
5: 6DlgWAr1pze2xwhzVuH9SH83sUI.roa (hash: gbVO2/E/cSyLnCFbipnzOKJO3cIbi/OYiOvNNgSS+Wk=)
6: CFccTSuCEIxalR4ALqPdkAzUO7M.roa (hash: kaoUX+bTmXS7CQqlA/MKZqDGlkdoafsR1N6tmoItSeo=)
7: DIoNrmpQjSgOtSSDaoVlE1M8a74.roa (hash: 8EDhoGEvZWxcOl5QR8SMI35B2oKzz+sS9FfHtqdv38c=)
8: IcS9gzH0eVbJZYVzF-ivAp7O2rU.roa (hash: 0hau0OArhlXEWJAb5CUvyK22h+wU1rPbDc4uf9VrqFg=)
9: Kj0CSZRO7Ttjx8zTQ7TY2lYWk6U.roa (hash: 5ijTFRrYY4N4pS9N+fgT1g/tsE4VuTayoctiYwfJwSw=)
10: M7Qnaao-wDlPyDUa21pW7viJ6uU.roa (hash: Pb3KKeU2RFaohJ/loiF0Yw7/oOqNkzJemldZbia5xys=)
11: NYIUKgptziTmjTuzB89rR5OoJ3w.roa (hash: vBhk29CF4pjp5Kwvmdk02ywPzzfme1nc1O7+7goRrqs=)
12: Q8CsEAtSTanzJY3I7fvSE-uMeuU.roa (hash: AbxzldFhMYObOkio0+jbvaPCEAk722DareoqH/SdcdU=)
13: T2NfzMdsMpViaAkLEjvuKknHJcA.roa (hash: o9QhHh2ECEBAp63dR2QCY67xVjrjcR7RnvJzXzoRqNQ=)
14: U-nn8JCpKkMQjshvCimitPf9fnY.roa (hash: 20p7PvKskZaUFgghv/CK/FqUmTR31mQhhW0SFGwQweQ=)
15: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=)
16: Z4qJ0AuvFG9LwCUujh1SFAyCFEQ.roa (hash: L/2723303TsKIyZTz4LxjhNc7XDzNUykt0wbQqKmi1I=)
17: aVgebze3DGF-KEsMnZC5Ko2CIfY.roa (hash: NfZpKGjWtpW8R47mtlOQxNS8rkEPFNCDlcl++B9KFvk=)
18: fDCstNuWSUWg05RGAGozceSc5Ko.roa (hash: Z0/yaotH7AkmvBiSt0pUmAxXJzD4/hgdwzDVcCLey2w=)
19: g2mq5fXw0aZ88BSIIPCaVM6cI9s.roa (hash: HTPkfWurE/QkJy0L1mUBje2pSgdAEd5QgAQCEntV908=)
20: gjJIOJFd5IfQ5NJp4APp1vRHdgk.roa (hash: 9gSK2v7b4QpK7l7MrKag/rbhrtwBV2pBvh31m2/Cb74=)
21: hg-K2bU7dey2Ydbbw29iErOi8P8.roa (hash: SAgHdm9kDnEuDhbBRM7qrWMJXoWfxU0OsBc08N80B7E=)
22: iPahdVFjnIMLFab7e1hz9AD8mnQ.roa (hash: X5DNApyaL3xMnN7g/7ZqxS0aZOIXDBxHJJjMjs9/8GE=)
23: m88qIfHILGTDwTPNgbSj9kEvyHM.roa (hash: 7kMxZMOiWpHwaTRBYo7hwnOelQgxJVT++YBjDRV6bEc=)
24: tu96yhzm4z7F54bjnr8VnWN9Eqs.roa (hash: feo7BQthjM6f26XPiMCVYowQg0rSQFCcjqZyL9CY1dY=)
25: uYLNQPjAvwZesH3AsdHcFQfXzSY.roa (hash: tAAuDmpu4nqLNQA5hc39QDld4C6F+1xJboUD9Pxzvas=)
26: w5ldQ0CjL0tGIL7RdlldMWQrpOA.roa (hash: QwbB2Dm20UEpXkRwmnRCF3k99p0EBKuROeuhoBVi3/8=)
27: x6TaUDjx_Xkt_2Lw0GlWR57EAlc.roa (hash: m5z3Yg3lZo67vrQykV72uJNnGiIVgvzyPCgBuqRvX2A=)
28: xKKgMBYggYrOzddWnjoXfABzYtI.roa (hash: CRfn67QEd4oVTEk3kHUBSolPZ3Du9hm6IXw4Z34egdI=)
29: zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa (hash: ddUTwFfUFZpRc1ExRHE36LurAQIjxRiZ+75kFQEiqQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:79:2d:de:9e:7b:d7:4b:aa:9d:90:74:82:94:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Oct 26 20:00:05 2026 GMT
Not After : Oct 27 20:00:05 2026 GMT
Subject: CN=2a6d611ac5b1ea3ab72ea81945aa81d11d7b294d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:d1:f1:48:20:3e:d6:e6:fe:1f:6e:2f:36:
36:1d:39:c3:b1:7a:47:8a:ac:8e:a9:f2:91:57:0a:
d1:72:d8:f4:1f:41:bb:f6:ce:f4:d7:50:3d:5b:5e:
58:d4:c5:7e:c8:a2:1d:d4:17:8b:67:4e:8d:9e:67:
fe:8b:eb:ac:40:a4:00:3f:c7:f8:01:42:80:75:df:
87:60:f4:60:82:82:38:44:d4:28:55:19:a4:94:e0:
0d:98:ac:44:32:73:cb:6a:fb:15:34:ff:57:6f:2a:
74:2c:25:d9:cf:38:46:f6:ea:74:54:3e:5d:56:d3:
d3:6b:e6:fe:ae:b4:e8:83:03:e0:bc:da:39:00:08:
82:b7:52:85:11:a3:43:0d:b3:03:fc:e1:87:4f:a6:
3c:65:12:d0:6c:43:7b:f4:ba:1e:9b:a8:bd:51:23:
95:a4:cf:11:10:cb:49:9a:75:6e:35:ca:5b:f9:ef:
30:9f:41:9f:89:e6:36:7e:d3:8f:83:6d:93:c0:94:
13:e2:f9:ba:1d:a5:f2:93:cc:8e:14:d5:18:81:af:
27:40:6f:0e:6e:08:55:32:9a:28:a9:18:c9:4c:e8:
af:a0:0b:67:7f:6b:cc:78:41:c3:52:07:03:48:4d:
ab:0c:f1:1e:43:69:d1:03:8b:bb:2f:1a:4f:19:ac:
35:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:61:1A:C5:B1:EA:3A:B7:2E:A8:19:45:AA:81:D1:1D:7B:29:4D
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:05:99:57:39:d3:13:b4:f7:80:d6:b4:ae:78:ad:2e:3a:63:
b7:31:8b:4a:92:37:3d:d5:fb:60:70:77:3f:0d:bd:d5:91:bd:
1c:f0:c6:16:f8:fc:2e:25:45:9a:52:bb:98:91:53:1d:fa:2a:
8c:c0:84:f2:82:25:d2:ee:3d:ae:77:96:a9:b9:7d:c6:72:6c:
ee:9a:20:d8:91:95:bd:33:30:65:c5:fc:ac:5e:ce:81:09:76:
50:64:fc:a5:05:9c:8a:16:32:70:03:99:d3:94:26:83:64:14:
34:fc:e6:d1:b2:cc:68:22:2b:6b:30:bc:48:46:b5:f1:e2:ea:
03:d6:df:e5:8c:bb:1d:3a:7a:21:53:e2:fb:99:86:bf:12:55:
a8:1b:36:4a:a6:73:09:93:31:68:ea:06:e1:83:f6:cd:48:45:
ca:5b:b7:84:70:b7:83:ed:98:9d:3b:e8:ce:6a:6e:80:61:da:
f4:24:ba:c0:2e:d5:7d:f7:ab:cb:1e:41:b1:39:57:12:86:2d:
88:e7:cc:5c:7c:17:df:f6:1e:5d:bb:0c:f5:99:fe:d2:33:0f:
ab:70:ba:6f:28:6f:4c:66:f2:e2:70:aa:9a:35:71:f0:45:3d:
ea:4d:2d:8e:81:72:ae:63:7e:d0:5e:b8:29:02:89:d4:af:e1:
f9:25:f4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:53 2026 by rpki-client