
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json)
Hash identifier: pV76rFBRizXoGKKrsYkNW9g/d2nGFcdqWWxwyZI1ByM=
Subject key identifier: D7:6F:3C:96:8D:99:CE:36:53:C9:17:C3:CD:85:97:40:17:2C:17:E8
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 019CB212B324D715FD1E181096A99248F788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
Manifest number: 185C
Signing time: Tue 03 Mar 2026 05:01:35 +0000
Manifest this update: Tue 03 Mar 2026 05:01:35 +0000
Manifest next update: Wed 04 Mar 2026 05:01:35 +0000
Files and hashes: 1: B5Ns6rWldhEAob3mxJpKyKcm42A.asa (hash: n1DHfqrLmjXkNDAqU/pYWiBza4Za68DkT/EAuiXqfOs=)
2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=)
3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=)
4: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (hash: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80=)
5: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=)
6: etDwmKHRsmxardQ7oN51mJmZIhw.roa (hash: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0=)
7: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=)
8: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: 2rKnP5IcA4qMj1/ScgZaCywCZfiZl1eJjkI4i9TJjb8=)
9: wNJN5eIQFxpTQPR_yflmL8Lctrw.asa (hash: 2uWAVzddog3xAuqZI9xlMQgD8WOzmLiMNlAfNcUz1AE=)
10: xdAiPxtHiSARdy6D1muPHXjJ7bo.asa (hash: VY4TRsfLEX39zBQVtcIxPVYcqXpcy2I5EsQFBkqtus0=)
11: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:12:b3:24:d7:15:fd:1e:18:10:96:a9:92:48:f7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Mar 3 05:01:35 2026 GMT
Not After : Mar 4 05:01:35 2026 GMT
Subject: CN=d76f3c968d99ce3653c917c3cd859740172c17e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:4e:95:2c:6d:24:b5:f3:7e:58:39:f2:28:
94:84:41:31:19:73:74:31:f2:2c:1e:ca:96:81:4d:
41:26:86:ff:52:72:e5:8b:56:da:b7:fc:8a:3f:b1:
40:81:46:64:6a:30:25:62:57:5e:5f:04:e1:19:1c:
8b:e2:44:a8:bd:f4:d3:4d:e5:6f:4c:02:95:00:e9:
04:2f:4d:4e:c7:1e:e3:c5:bd:71:94:23:aa:db:d2:
0b:10:ef:ce:5b:ba:45:a3:4c:bf:5d:74:68:4a:1c:
1d:7e:99:e5:7c:fb:0c:e3:76:4b:c6:6d:91:ee:8c:
49:d6:b0:55:44:67:5a:2d:07:20:b0:2f:4b:e4:55:
3f:3a:c3:cc:69:a7:5b:45:43:36:cb:40:10:5e:fb:
d6:c5:7c:22:09:38:c9:73:67:2d:4e:18:e0:6e:6d:
b5:9e:83:b4:ad:4d:25:10:97:e5:b3:ed:9a:34:57:
1b:d1:5d:0d:f4:21:8d:ba:db:89:91:6a:f9:9e:48:
ef:93:23:46:30:c5:28:e7:db:8a:67:ff:d5:cb:8a:
69:29:a2:fc:97:e8:b5:55:e5:bd:6e:9d:8e:36:77:
0e:b9:26:d3:4f:c1:c4:5f:41:4c:2e:9a:04:8e:08:
a6:eb:54:e5:c7:20:6b:f6:b5:6c:fa:e5:39:1c:c1:
8e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6F:3C:96:8D:99:CE:36:53:C9:17:C3:CD:85:97:40:17:2C:17:E8
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:34:d3:ca:7f:d0:6f:97:85:ab:09:24:9e:2b:5a:93:81:3e:
13:3c:22:87:39:85:bc:43:55:1c:5d:10:4a:9a:82:59:75:04:
ba:39:8b:2b:ef:2d:b9:84:dd:7c:a0:37:1e:f8:a3:86:f7:6c:
9b:fd:e8:0b:62:75:c4:e1:3a:8f:21:d2:e9:12:33:db:34:0b:
16:8b:62:a2:c6:ee:a1:e9:3e:5a:c8:c0:30:e1:0a:57:eb:2c:
dc:f2:fa:28:e3:50:c6:e9:bd:db:d1:29:5b:46:01:f2:85:ff:
f9:ae:3c:74:b1:1d:7a:ff:f3:79:ea:e5:e5:ea:87:21:a8:a2:
26:e8:d5:fa:ac:00:60:50:dd:e5:33:9c:89:a1:93:2c:9f:b6:
12:35:31:9a:8e:c1:3e:b9:db:de:c6:08:0e:6d:e5:b0:b6:24:
3d:84:9f:d6:1f:09:a8:7f:ca:5e:45:cd:ae:76:69:c5:ea:eb:
33:d9:8e:fd:28:a4:29:17:ae:d0:0e:80:c1:54:41:df:21:de:
08:a7:45:2a:dd:43:59:fb:b0:70:5a:0b:60:87:1f:9d:1a:fc:
5f:47:57:8a:50:2c:2b:79:d4:8e:70:19:7a:56:ee:39:1f:9c:
53:18:66:02:d1:d6:c3:7c:e7:49:8b:04:5f:06:bb:42:87:94:
da:74:19:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyyErMk1xX9HhgQlqmSSPeIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi
YzE3YWIwHhcNMjYwMzAzMDUwMTM1WhcNMjYwMzA0MDUwMTM1WjAzMTEwLwYDVQQD
EyhkNzZmM2M5NjhkOTljZTM2NTNjOTE3YzNjZDg1OTc0MDE3MmMxN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMpOlSxtJLXzflg58iiUhEExGXN0
MfIsHsqWgU1BJob/UnLli1bat/yKP7FAgUZkajAlYldeXwThGRyL4kSovfTTTeVv
TAKVAOkEL01Oxx7jxb1xlCOq29ILEO/OW7pFo0y/XXRoShwdfpnlfPsM43ZLxm2R
7oxJ1rBVRGdaLQcgsC9L5FU/OsPMaadbRUM2y0AQXvvWxXwiCTjJc2ctThjgbm21
noO0rU0lEJfls+2aNFcb0V0N9CGNutuJkWr5nkjvkyNGMMUo59uKZ//Vy4ppKaL8
l+i1VeW9bp2ONncOuSbTT8HEX0FMLpoEjgim61TlxyBr9rVs+uU5HMGO/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdvPJaNmc42U8kXw82Fl0AXLBfoMB8GA1UdIwQY
MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt
NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz
LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzTTyn/Q
b5eFqwkknitak4E+EzwihzmFvENVHF0QSpqCWXUEujmLK+8tuYTdfKA3Hvijhvds
m/3oC2J1xOE6jyHS6RIz2zQLFotiosbuoek+WsjAMOEKV+ss3PL6KONQxum929Ep
W0YB8oX/+a48dLEdev/zeerl5eqHIaiiJujV+qwAYFDd5TOciaGTLJ+2EjUxmo7B
Prnb3sYIDm3lsLYkPYSf1h8JqH/KXkXNrnZpxerrM9mO/SikKReu0A6AwVRB3yHe
CKdFKt1DWfuwcFoLYIcfnRr8X0dXilAsK3nUjnAZelbuOR+cUxhmAtHWw3znSYsE
Xwa7QoeU2nQZmA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 09:15:17 2026 by rpki-client