
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json)
Hash identifier: SjZMgilihw2gmwAAc8K5ptPGAUr6YBiv2/ovqFPXxpI=
Subject key identifier: 2A:D3:86:D4:FE:4B:CF:CA:0A:A5:DD:CD:0E:35:F7:C8:72:F7:C7:8E
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 019CC5D0682048A64C1481A1C3DAF72B29F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
Manifest number: 1619
Signing time: Sat 07 Mar 2026 01:01:35 +0000
Manifest this update: Sat 07 Mar 2026 01:01:35 +0000
Manifest next update: Sun 08 Mar 2026 01:01:35 +0000
Files and hashes: 1: 1u23_XHmiJhjqy9S76sw3BzP9Ww.roa (hash: qDjQXmy6brh3hQItl8JxTdLVuqnZ3WF2FKz/Ualn8KI=)
2: 4KkUHNuHp_WUlcLV7ZmT-IELGLs.roa (hash: X02pU+wDvS97rZ0D42UQvqF9JhNnpzwkrnlhuhnewxY=)
3: An-h4kooPrBUGMT-6Nj0QudqGKE.roa (hash: 4VG1kUHyYf9yb01HKQwY97RZCAJU3VqeDAxr07wG4w0=)
4: DKJJrcnX3RnXlCDTnb0QnF9ph1c.roa (hash: FBpHgtUQjl2CKc1kAMv5YEG4ocTTbuqpzf8/LW2ex4k=)
5: GOgAejJFsLbsIoSjyXa89DsOln0.roa (hash: n61wmUPLOUsceRZoHaDl1wjd6NYSJP+7XllQ62IBWVA=)
6: JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa (hash: J8o+5Ee3eNiQKRGdXJdghD9ZXv8Izb9VeieBzPJF1ak=)
7: L3AHD1nIaJn-Qkxqjxi4waU1okM.roa (hash: MqsTHnRn4vzlkUHWrFaXq9Uo9UAjzsK7URiYSvcgf8k=)
8: NY2MX1mgk76QbEK78KfRCv9HXlc.roa (hash: n052UQO+ldLs19+3y0B7Wj4/DIUQ0nHDh3aGl0cSB9U=)
9: NgMsux-odmw_2otfxo6fwQPz6nk.roa (hash: acZbMbI5ZnLhauOT05TvSrJPxsUogE9hJcD3gMOAgYQ=)
10: SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa (hash: LwIG+mDSylEHKB/dZoPmrJsG/6vCNLIoKeokQAgcByE=)
11: XdIic6TtMnHLSFKPt0NIgYA3BZE.roa (hash: Hz8Dp4xvPL6d1SZb+xVGL2Fnk7Ii6zPdDdS2xRff/c8=)
12: bFtTO9kUoK7V5nLLHjzqVj2iOcU.roa (hash: jJC/VOkqkEwdX7ejcOTbfcTesLG6OI5LMSL4JFJb9Ek=)
13: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: bwyR26RvDOLuXRp481TU2UVK21unWKcuW95jNAbEzCw=)
14: mDj4POXBo_BA8ao0TEZHTmOo46s.roa (hash: Y2b4Ei43NJZ9dDiKlYc7gN5osX878buWXGf115YzawI=)
15: nFYGg4ZIP1H9kzcY434jAerp2kU.roa (hash: Y/IgWysEh1nmKw0nLD81dJWu3QFpKM+9pnP+lyeoZXo=)
16: obFwaT_4MZtX-dKod3UGli-Mmuo.roa (hash: S1tcUGtkx7R83UYo2rACVKW3cgPV5XEnzrmsW37TA/Q=)
17: y2mTo6HHgH1hIKjXLEt22HvPvrw.roa (hash: YRXm/TWE2LnDq+SOmryX5rTG96P5ANXEnONR2xUrL80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c5:d0:68:20:48:a6:4c:14:81:a1:c3:da:f7:2b:29:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Mar 7 01:01:35 2026 GMT
Not After : Mar 8 01:01:35 2026 GMT
Subject: CN=2ad386d4fe4bcfca0aa5ddcd0e35f7c872f7c78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:d6:cc:93:1b:cc:ad:7b:1b:e5:97:d3:62:
a5:25:ec:99:df:cd:6f:f3:9f:d3:0e:fa:7d:62:25:
ef:23:8b:8f:8e:0f:ac:7c:c6:f2:a0:ec:2b:a5:08:
e9:a7:2c:e1:af:e2:65:a8:11:b3:ff:92:64:6e:0a:
db:21:41:6c:0a:7a:f9:e8:16:2f:4c:59:08:00:a4:
2a:92:58:08:51:dc:76:2d:88:96:c1:78:31:3c:68:
95:09:c6:8b:c6:19:11:a7:3d:00:0d:0d:1d:da:3e:
bf:d1:64:ed:d3:2e:80:48:eb:cc:6b:2b:39:df:b4:
8a:93:2d:d3:fd:39:ec:15:17:01:a7:2d:a8:af:fd:
ad:9d:6a:d2:a3:22:d8:ce:ba:97:53:1f:0e:9c:a2:
3d:d6:fe:80:d5:1d:a5:97:f6:c4:0d:0a:19:31:84:
b4:41:2a:61:8d:32:13:6a:b1:6d:e7:4b:9b:ed:e3:
b7:d0:cf:39:ee:2d:8e:f1:18:c5:1e:55:49:a8:5b:
c6:d1:c0:e4:89:27:d1:4b:25:49:d2:ae:eb:25:5b:
34:6a:36:d4:9b:56:65:24:1c:39:7d:80:d6:c9:ee:
66:ed:27:1e:b5:39:3a:23:3e:e5:1b:9c:8b:17:90:
c7:0f:47:11:7d:58:dd:19:20:1f:79:35:9d:13:a8:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D3:86:D4:FE:4B:CF:CA:0A:A5:DD:CD:0E:35:F7:C8:72:F7:C7:8E
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:aa:35:50:3e:a7:c8:1e:d4:92:51:fe:b7:69:b5:78:2c:cf:
f1:93:13:e5:86:27:fb:7a:1f:30:3a:35:fd:6b:d8:39:ae:fc:
9e:07:bf:02:0e:b5:9e:12:1e:88:a8:a6:e0:ff:80:f3:2e:a1:
0a:a9:22:7c:9e:89:8a:00:d9:33:79:8b:5d:0e:62:fd:a1:b0:
f7:4e:f2:6b:6e:bd:df:c2:70:b5:ad:fe:82:5c:51:2a:f6:ec:
b3:27:c3:f9:23:f2:76:e4:6a:93:89:e8:c4:a9:3f:6c:ec:79:
c0:34:de:0d:1c:75:30:0d:4f:23:b4:2e:f2:36:19:1d:0c:28:
98:4c:fb:8a:ff:d9:32:84:55:af:8a:52:bf:bb:25:aa:de:d3:
0b:89:af:57:b0:86:5b:d3:bc:a8:eb:8c:8a:ce:c7:27:f4:32:
26:02:ac:9f:c5:d2:f3:61:93:66:7e:f4:5f:03:61:7a:86:7a:
e2:8c:cc:0a:4d:af:9a:3a:0a:00:d9:73:f2:0e:4b:6e:f1:31:
8c:7d:8b:81:68:5a:ee:12:97:a2:79:1c:d7:34:5c:3c:8b:bd:
80:01:c6:4c:9d:11:9b:e0:fe:8a:6e:4b:64:61:f5:c8:fe:17:
05:96:92:96:21:16:7b:67:e9:ed:78:c1:6f:02:e1:d9:9e:ac:
21:a5:d8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:36:41 2026 by rpki-client