
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json)
Hash identifier: ozfRulKg4VHQo9rtsCJIHaUKcIcXr24bLYtf8cZDS4g=
Subject key identifier: 93:1D:B3:0F:BA:91:CF:99:F7:7B:47:09:5E:FC:76:4D:C1:43:1E:B6
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 019D5F73191DA412E93314B2A225FA25A204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
Manifest number: 18A7
Signing time: Sun 05 Apr 2026 21:01:11 +0000
Manifest this update: Sun 05 Apr 2026 21:01:11 +0000
Manifest next update: Mon 06 Apr 2026 21:01:11 +0000
Files and hashes: 1: 1-Pe2TnywVmfaP-WemWu9F6D1uY.roa (hash: TO2cGriDwgxNlyLdj4bg8MbV1G1jK45ogoJF4793fSo=)
2: 1cuv-12cm2QhTHJFihj8rVlWS38.roa (hash: bcoEGOaQcgkLD12rX+LR5QgbfI3SBiV6QabZt9HzI0k=)
3: 2V5uX7zz8rLZM3EIe_aMe1EFHf4.roa (hash: L4MUyeDgRyRa1SAE3WijwMUBcPHzc9BZm/cEJ6tCJQ0=)
4: 60RghjJR7fbMZmTjDd1goDTxFO4.roa (hash: FTGk3AHz/GL0pHnXXED/nhsF8Ezap2Jkso8Zx9XbdsY=)
5: 7v01OOv6lsa5SDVTbq2sDUyqghU.roa (hash: 674pqR/ZC6RweHjRad+sALRIi4soda9NrCU2Y8CRUAk=)
6: VeUDemYMUkamvLNvu71jm8kXCWQ.roa (hash: sDlj2eIeTmzMHoHM8lIyD6YCl1o4NeFPnKRaymevkd8=)
7: ZMcpzSwF8sfXNSwmkOe8TDMBSJw.roa (hash: +y1O8tgMcUGxxeeg9mLZswZb6MR8jtPoqrvAjwcYJzU=)
8: bcQk1dNiHStablJSpfOMgKvzyB4.roa (hash: vRaLHdtxEoTI3K0Ud0h8BsRxBaZPY4lVipsFC/qsS/8=)
9: eEv6Dzp18N3mnwft_tpFzD3jA9s.roa (hash: Bu5vlAgH4Sy8ybAbPwvMy42MlBplqri0XGE/ouWApbI=)
10: exX8D204pUSMlQDRe6-0vKudRw8.roa (hash: hw0brhXYOTSxVJVmx1MBXDRVxmLR1RsTQRFAr9ka18U=)
11: jCzBcgQ2ecHLxm36fGHNj6MQZAY.roa (hash: pXkAi/m1GNEU9RCztBpU/RufugyhkhNnDbgVYNdhfJo=)
12: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: VGryq+bLxImMDwR5l53+0ykDx0uRAw+uhZzt+EzOxCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5f:73:19:1d:a4:12:e9:33:14:b2:a2:25:fa:25:a2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Apr 5 21:01:11 2026 GMT
Not After : Apr 6 21:01:11 2026 GMT
Subject: CN=931db30fba91cf99f77b47095efc764dc1431eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:60:ed:97:71:4e:cd:ad:49:a0:4b:61:12:
d6:db:7e:78:6c:b4:ed:7b:78:da:93:2b:1b:8a:2c:
58:99:6c:1a:ae:ee:67:e2:12:a9:8b:5d:bd:97:a2:
e8:9e:88:ea:cf:80:8b:f2:59:9a:1f:47:7f:83:f5:
6b:6b:db:66:8c:e0:8e:5f:e6:c3:fc:4e:5a:d7:b4:
e7:03:7f:70:8d:ec:39:01:8a:3b:71:6c:97:0a:f0:
87:51:41:ae:6c:98:4b:ec:02:0d:a5:d1:2a:93:1c:
24:44:dd:02:61:fc:19:05:a6:34:a1:b8:76:a2:82:
d8:9a:8c:c3:12:cf:a9:2f:75:59:3a:72:15:9c:6a:
75:58:ea:00:68:68:5a:cc:6f:25:e2:1f:c0:b0:98:
f0:1c:d5:6e:f9:f6:80:6b:dc:bf:9f:ff:29:ef:b7:
36:b1:ae:dc:c6:c6:56:e9:16:1a:cc:9d:b3:4f:f8:
22:88:6b:64:d9:71:13:71:d3:0b:15:1a:56:4e:eb:
38:16:ce:55:e0:6f:3d:1c:a5:26:ae:e6:c4:4d:97:
e1:a8:c1:fd:87:e6:a3:c1:f5:c1:cd:ed:4d:7a:a0:
70:c2:5d:37:cd:c2:43:10:27:a2:5b:13:68:bf:9d:
69:09:a1:89:3d:85:da:16:2a:17:9b:95:fd:f9:c2:
88:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1D:B3:0F:BA:91:CF:99:F7:7B:47:09:5E:FC:76:4D:C1:43:1E:B6
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:94:79:27:3a:f3:e9:19:df:0e:e2:68:29:ea:92:ac:a9:65:
f4:11:72:42:b5:ab:91:3d:2f:d9:a4:27:94:1b:3a:94:1e:88:
f7:0c:4f:af:9d:8a:de:a9:48:e2:7e:fb:a3:26:52:28:95:e7:
c7:f4:33:1a:c3:68:df:f3:9b:95:f0:be:c3:f2:c5:15:d4:86:
3e:5a:3f:0f:54:90:7e:50:40:40:a8:ae:68:c3:3e:c6:e4:22:
ee:34:41:04:b7:f6:83:cd:78:61:d2:23:8b:b7:68:bd:e6:19:
bf:ba:42:c4:f5:54:7b:b4:bc:c9:09:da:5a:b7:dc:1e:3c:4a:
af:b0:dc:b9:34:30:50:bd:40:48:04:c4:87:85:2d:7b:70:78:
f7:50:70:d7:38:6a:0b:f0:76:c2:28:4a:4c:f2:78:c4:78:5b:
9f:c6:a3:86:c2:d8:08:50:f6:c0:89:54:3e:b2:26:10:37:4a:
db:11:33:84:13:8e:d2:51:b0:ed:e0:1f:47:20:b1:3d:19:da:
ae:9b:f4:66:2d:a3:61:d8:5f:79:0f:09:3d:4f:85:7a:e9:2c:
02:17:4b:99:fb:b6:05:fb:08:be:f7:fa:33:b5:b9:75:9c:51:
64:2a:51:aa:50:0b:fb:0f:8a:f3:e2:f1:e5:f0:38:a4:38:f8:
64:96:bb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:25:12 2026 by rpki-client