
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: VVO9cjrcwoSJHtKB/jvAp+eQQXgiJSNP1GL6dbRt4c8=
Subject key identifier: B4:A4:AB:9B:C4:88:AF:3D:5E:47:5A:47:05:83:A9:DA:F3:0D:45:D9
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A08A8D8C780278A42FBC5933369A794431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 1B0B
Signing time: Thu 10 Sep 2026 09:02:07 +0000
Manifest this update: Thu 10 Sep 2026 09:02:07 +0000
Manifest next update: Fri 11 Sep 2026 09:02:07 +0000
Files and hashes: 1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: TVWsOoEwUnwnYjRFAy6v9E3I+C9VvNj7ayndgWsZEh0=)
2: 6DlgWAr1pze2xwhzVuH9SH83sUI.roa (hash: gbVO2/E/cSyLnCFbipnzOKJO3cIbi/OYiOvNNgSS+Wk=)
3: 71WBxVro_Euo75ftGbOnYN6EUc4.roa (hash: k6wuSYIpDhDq8ic6TWJjAZJOYAfdEDpyocKJsXVeM34=)
4: 8MxVvwEohbQmIikgrwper0uymEc.roa (hash: Xz+dhMsydC+qsZLDpjaa9cvEI5H7yFeVKoYAKozIz24=)
5: BKrXZmCPzjDJeoMATTIUCly8RMI.roa (hash: 0jP41FvG8z+VmpVhR+SHdcHSIxObtE+cEfVhbqGGTzs=)
6: CFccTSuCEIxalR4ALqPdkAzUO7M.roa (hash: kaoUX+bTmXS7CQqlA/MKZqDGlkdoafsR1N6tmoItSeo=)
7: DIoNrmpQjSgOtSSDaoVlE1M8a74.roa (hash: 8EDhoGEvZWxcOl5QR8SMI35B2oKzz+sS9FfHtqdv38c=)
8: Dvm1ivM5p4ePpgysDtLtoLHwJ5w.roa (hash: QPVOPL6nSnWbsKxxKr4oQ5BFOYUcMw/3uW2oYvYKLmo=)
9: Et6PnTBJBARsc3IlyKiE8qN-8pg.roa (hash: 5VSWKAXKy2dgal6NA51kMlOzzyv8IixCLBR114HbwSk=)
10: Kj0CSZRO7Ttjx8zTQ7TY2lYWk6U.roa (hash: 5ijTFRrYY4N4pS9N+fgT1g/tsE4VuTayoctiYwfJwSw=)
11: M7Qnaao-wDlPyDUa21pW7viJ6uU.roa (hash: Pb3KKeU2RFaohJ/loiF0Yw7/oOqNkzJemldZbia5xys=)
12: NYIUKgptziTmjTuzB89rR5OoJ3w.roa (hash: vBhk29CF4pjp5Kwvmdk02ywPzzfme1nc1O7+7goRrqs=)
13: Q8CsEAtSTanzJY3I7fvSE-uMeuU.roa (hash: AbxzldFhMYObOkio0+jbvaPCEAk722DareoqH/SdcdU=)
14: T2NfzMdsMpViaAkLEjvuKknHJcA.roa (hash: o9QhHh2ECEBAp63dR2QCY67xVjrjcR7RnvJzXzoRqNQ=)
15: TZaomzmIodYFdWS4xPASiRih7SU.roa (hash: DGb2GTBIONw507iw5JiwGCh82nK9eqmR5vddiYtWS24=)
16: UxHa9CwfyUNcEMddAzjF5IIGwfI.roa (hash: A6K+jWpq319pF8WoU4ihgIYUTFe83gei8E3ozN90KX8=)
17: YI8dtG7lrBLiiMxNXTL5ewUbOiQ.roa (hash: tnbNod3/PGWNY9ZhDTZ5mC5bOBNCTSkE0bF9+gHfzc8=)
18: Z4qJ0AuvFG9LwCUujh1SFAyCFEQ.roa (hash: L/2723303TsKIyZTz4LxjhNc7XDzNUykt0wbQqKmi1I=)
19: aVgebze3DGF-KEsMnZC5Ko2CIfY.roa (hash: NfZpKGjWtpW8R47mtlOQxNS8rkEPFNCDlcl++B9KFvk=)
20: g2mq5fXw0aZ88BSIIPCaVM6cI9s.roa (hash: HTPkfWurE/QkJy0L1mUBje2pSgdAEd5QgAQCEntV908=)
21: hvrECtRtxVPUHDXzjKdAlcyRjog.roa (hash: d5snX7+Hc4RUYD6A+fmRwRD4YilkH7XfRNO8PBtC+DY=)
22: iPahdVFjnIMLFab7e1hz9AD8mnQ.roa (hash: X5DNApyaL3xMnN7g/7ZqxS0aZOIXDBxHJJjMjs9/8GE=)
23: w5ldQ0CjL0tGIL7RdlldMWQrpOA.roa (hash: QwbB2Dm20UEpXkRwmnRCF3k99p0EBKuROeuhoBVi3/8=)
24: x6TaUDjx_Xkt_2Lw0GlWR57EAlc.roa (hash: m5z3Yg3lZo67vrQykV72uJNnGiIVgvzyPCgBuqRvX2A=)
25: xKKgMBYggYrOzddWnjoXfABzYtI.roa (hash: CRfn67QEd4oVTEk3kHUBSolPZ3Du9hm6IXw4Z34egdI=)
26: xKV3kgxBf7UUVRr84bCErhDrc4c.roa (hash: ZYiZ6jRe3+R5IVfA5CRR8v3ck5ek+jMsdDXIYsxQY8o=)
27: zFhfndLDZ7oU0bk0QqqAPVNd3aM.roa (hash: ddUTwFfUFZpRc1ExRHE36LurAQIjxRiZ+75kFQEiqQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:8c:78:02:78:a4:2f:bc:59:33:36:9a:79:44:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 10 09:02:07 2026 GMT
Not After : Sep 11 09:02:07 2026 GMT
Subject: CN=b4a4ab9bc488af3d5e475a470583a9daf30d45d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:95:0c:70:9c:91:1e:1a:b3:f8:00:39:27:
da:53:35:d0:d1:4d:d2:13:63:76:92:a6:ff:53:70:
ca:59:92:53:8b:cd:92:10:b9:fe:9f:e3:e7:46:2b:
c1:30:b0:c8:ac:0e:3f:01:fe:b0:35:8e:8a:7a:9b:
3c:99:35:8d:75:e8:6a:49:fa:f1:56:a5:a3:3d:ae:
a7:24:d9:a8:7d:ce:b2:0d:bb:c8:41:00:03:51:d0:
0c:c0:07:f1:bd:02:7f:18:1f:d1:f6:e2:3b:6a:8e:
db:98:0b:0e:f3:96:e8:61:6d:fa:13:70:67:9a:ca:
f2:74:cd:8f:3e:67:17:32:b6:1d:96:8d:d0:ba:7b:
b0:59:f9:ed:03:dd:82:8b:47:ec:ca:b9:3d:57:84:
5e:72:26:bc:0c:bc:13:38:57:88:91:d9:cf:8a:95:
e6:04:2a:b8:b2:02:89:2b:6c:22:45:12:af:1f:83:
1d:9b:92:98:78:22:e1:b6:a6:a3:24:fd:c1:d3:03:
f4:a6:a2:f0:32:2c:76:e9:4a:a0:4f:7e:b8:e1:90:
75:6d:06:02:a9:7f:97:75:fc:fb:53:26:8c:40:ba:
6e:c0:60:26:5c:09:5f:fe:e6:05:22:7b:15:e0:ea:
6c:22:48:e3:bf:3a:b3:cc:96:4e:65:b5:eb:56:e4:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:AB:9B:C4:88:AF:3D:5E:47:5A:47:05:83:A9:DA:F3:0D:45:D9
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2b:64:af:d1:e1:ed:33:c6:6d:34:c8:50:9b:98:a2:18:bd:
94:ca:c2:35:49:3f:aa:4d:ee:77:96:d2:50:a6:c5:39:5c:f9:
62:eb:d9:ba:86:52:88:d3:95:b4:77:cf:35:40:aa:60:10:53:
25:5f:a3:61:4e:9b:7e:8d:d8:a8:56:28:e9:43:9a:80:56:82:
2f:2a:26:49:3f:bb:5a:3c:f1:b6:da:6e:d3:84:5b:ca:1d:3e:
ca:d9:cb:6e:aa:58:17:aa:5a:7f:06:ba:cc:78:7b:58:d4:80:
4b:34:88:8a:41:39:6c:eb:7a:ad:97:e6:98:27:74:0e:b4:39:
6a:4a:35:1c:02:61:60:4d:8c:1b:bd:b8:2f:2d:f4:bb:83:dc:
36:d3:30:48:4c:b4:0e:0b:1a:b3:6e:de:f5:fa:5e:bd:04:ac:
f1:b8:ac:d7:a9:b7:cb:97:32:23:99:99:a1:53:af:7c:2e:fe:
d9:38:bc:94:72:b9:a1:a4:36:cb:f5:78:a2:e3:6e:d1:8f:ce:
f3:1d:9a:4b:f8:1d:2e:5c:67:3b:0d:44:bb:83:11:87:f6:5d:
2d:c3:3e:08:21:68:f3:8c:54:c9:48:01:ba:62:b2:7c:f6:83:
9e:27:74:49:d7:ba:2e:80:b8:fa:6e:23:be:ab:32:6a:93:fb:
71:ab:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:08:50 2026 by rpki-client