
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json)
Hash identifier: 68ZAGqEIKyWg2cXOyYZlDSM0cAD/wEFsOGqthCqmg1c=
Subject key identifier: 4C:46:95:B2:7C:AA:2A:DE:46:B7:79:08:7F:E1:7D:25:9B:E3:5B:75
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 019EF8DD4F078FF6530A0542DC3E7836C9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
Manifest number: 1994
Signing time: Wed 24 Jun 2026 09:01:53 +0000
Manifest this update: Wed 24 Jun 2026 09:01:53 +0000
Manifest next update: Thu 25 Jun 2026 09:01:53 +0000
Files and hashes: 1: B5Ns6rWldhEAob3mxJpKyKcm42A.asa (hash: n1DHfqrLmjXkNDAqU/pYWiBza4Za68DkT/EAuiXqfOs=)
2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=)
3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=)
4: QOv9AtzM59S_WNU7KUIEWRfJl68.asa (hash: 6O0jKZ/+i/G9w5+oF5K0c5UTn7UqPYc3SNDvmBucH+4=)
5: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (hash: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80=)
6: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=)
7: etDwmKHRsmxardQ7oN51mJmZIhw.roa (hash: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0=)
8: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=)
9: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: NS4zkExZmwROgATPrC3L13BgrQkJjqMlqt/VSJCjJyg=)
10: wNJN5eIQFxpTQPR_yflmL8Lctrw.asa (hash: 2uWAVzddog3xAuqZI9xlMQgD8WOzmLiMNlAfNcUz1AE=)
11: xdAiPxtHiSARdy6D1muPHXjJ7bo.asa (hash: VY4TRsfLEX39zBQVtcIxPVYcqXpcy2I5EsQFBkqtus0=)
12: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=)
13: yPa1ORKwdYO21oPHsCqaSGK2ss8.asa (hash: rF3Bv82DUAK46dZh7JdvizZgf5EoczF43qjQleVqEKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:dd:4f:07:8f:f6:53:0a:05:42:dc:3e:78:36:c9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Jun 24 09:01:53 2026 GMT
Not After : Jun 25 09:01:53 2026 GMT
Subject: CN=4c4695b27caa2ade46b779087fe17d259be35b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:41:e0:8b:93:0a:01:a6:43:56:1f:7e:5f:
9b:59:9c:dd:3b:4f:21:b9:20:be:de:79:f0:b9:c7:
fd:04:5a:42:88:4a:c4:94:a3:e9:c0:30:f2:c8:74:
1b:2c:08:06:22:7c:6b:3b:ae:3f:0f:e9:63:5e:a8:
8c:d0:12:bf:ca:fb:3f:d0:c0:0a:ee:59:e7:4f:68:
f4:d6:d2:61:5c:e1:83:d1:60:f7:d3:e7:c6:36:41:
1d:88:48:3c:29:88:70:b6:a5:68:de:01:c8:15:16:
b7:59:32:2f:45:da:98:ab:9c:20:13:3e:15:31:cf:
41:fb:15:d9:95:69:5c:65:03:81:57:73:32:92:8f:
24:9d:a6:ee:f5:ab:23:42:09:4f:e6:29:c9:01:28:
d5:60:54:76:5a:08:56:15:92:9f:f9:d4:07:a5:58:
3e:b0:ac:f8:0e:83:4a:04:2e:83:77:14:bb:65:88:
56:05:95:24:85:e9:30:5a:3a:1a:77:66:34:67:69:
f5:43:a3:cb:2f:27:55:79:fa:c2:d4:c0:2d:5f:59:
a2:e0:d2:47:d8:15:e6:9f:94:63:51:4e:54:22:44:
cd:cd:0f:f7:1e:91:b5:7a:7c:6c:61:f7:db:dc:26:
88:f7:a6:61:07:fe:e1:ef:01:29:3e:32:0e:59:76:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:46:95:B2:7C:AA:2A:DE:46:B7:79:08:7F:E1:7D:25:9B:E3:5B:75
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5b:d7:50:bd:d9:79:60:e3:ac:90:97:4b:97:c0:35:aa:a6:
3b:18:e7:6d:e1:b7:b3:84:54:0d:2c:a3:51:d4:0a:f6:75:17:
c8:44:fc:54:50:98:a8:78:e6:4b:23:3b:53:45:52:9b:0b:5f:
e1:08:34:4a:8e:8e:10:aa:e6:69:2a:fe:00:0b:7a:11:25:30:
c8:b8:61:43:29:b0:22:4a:27:f9:f1:d3:9b:50:44:cc:f4:72:
b2:17:34:0f:3d:b7:9b:14:92:51:19:84:94:8b:81:81:fd:db:
f9:78:53:38:5d:51:a5:7f:a6:09:94:60:8d:48:a0:4d:b6:5f:
74:16:d3:13:a8:ef:ba:1a:70:4b:6e:c8:a1:3c:cb:7c:38:23:
4a:af:9f:b9:72:92:66:51:f8:d5:87:83:ae:16:04:f6:95:cc:
ce:88:64:86:e8:ca:f2:e0:60:ce:6c:86:d8:0b:cc:d7:78:ba:
99:02:f2:87:f2:54:16:bd:3a:35:e8:77:3a:d0:46:27:39:17:
47:65:ad:ce:d6:48:66:94:1a:ba:bd:27:b3:c8:24:12:ea:22:
fe:ba:53:0a:3a:24:c9:41:98:f2:0e:6a:83:36:49:b2:a2:62:
ae:9e:b8:19:01:61:d3:57:47:62:5c:94:57:89:c1:e2:9f:13:
da:35:29:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 18:00:32 2026 by rpki-client