
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier: kvbFhzh0I7rwRLALg+ODidzkF8BcaueUcr2IBFBTHPI=
Subject key identifier: 15:1F:A1:27:8C:92:5B:63:DB:44:E9:CC:8C:75:E5:44:3F:B0:A8:1E
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 019CB6CA780F4BF8B22431E1411F6DD71DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number: 116E
Signing time: Wed 04 Mar 2026 03:00:48 +0000
Manifest this update: Wed 04 Mar 2026 03:00:48 +0000
Manifest next update: Thu 05 Mar 2026 03:00:48 +0000
Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: LAcAmG0Fn7QwS+by3p33iKnrOZvxsVkK9MT2o0Jj97s=)
6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 22:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b6:ca:78:0f:4b:f8:b2:24:31:e1:41:1f:6d:d7:1d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Mar 4 03:00:48 2026 GMT
Not After : Mar 5 03:00:48 2026 GMT
Subject: CN=151fa1278c925b63db44e9cc8c75e5443fb0a81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:c2:76:a0:99:65:38:37:55:d8:5c:23:33:
c8:f4:77:0c:07:bb:d7:bf:40:5f:8b:60:38:d7:f6:
f8:d4:3f:39:ff:44:e4:75:85:97:f0:57:a0:9c:1e:
1e:48:77:91:87:53:12:a7:a6:15:29:eb:06:fd:53:
59:5c:19:1f:85:31:c1:ac:e9:5e:a2:45:88:ed:b0:
6c:e4:a8:9d:a1:af:e2:13:e1:71:8f:70:d4:93:aa:
4d:a5:19:b9:31:5f:83:72:3d:b1:71:9e:49:81:c0:
99:4d:b0:82:f4:39:4e:56:c6:3c:04:ee:e5:af:37:
ef:8c:c9:8b:9b:45:b8:d7:20:55:35:c6:96:1a:ac:
b4:25:cc:ff:a1:3f:17:9a:de:eb:5a:00:8d:67:04:
aa:d8:cb:cc:14:5c:9a:aa:95:ff:9a:3c:8f:11:cf:
d3:bc:b3:96:ef:13:d4:d2:1c:b2:c7:7e:3b:15:35:
5c:60:1b:9b:6b:67:63:bf:27:d3:5f:fa:d4:b0:d0:
b0:65:f9:25:15:d7:cb:76:27:5b:37:5a:7b:a3:6b:
2c:f7:8b:da:76:42:dc:cb:45:0b:ac:80:9d:2d:7d:
84:ff:d5:41:cd:d1:fc:6f:3e:3b:9f:f1:8b:32:7a:
55:70:86:2a:6e:54:74:f5:a6:39:85:a8:8a:e9:a4:
ed:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1F:A1:27:8C:92:5B:63:DB:44:E9:CC:8C:75:E5:44:3F:B0:A8:1E
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b7:b8:af:c3:fa:4e:ce:66:a7:af:1f:d8:f7:8d:ca:8e:26:
d2:57:a1:45:12:d6:81:97:24:4b:09:c6:ac:94:7d:ae:e5:ff:
17:5f:a6:6e:14:0f:75:b9:9d:31:22:43:91:c2:4b:18:28:60:
e2:7d:ba:a0:3f:48:34:64:f8:ab:a5:f1:c9:f7:e0:c5:6c:9a:
48:c0:4c:56:b5:b4:1e:a1:a7:6d:f9:ec:82:e4:7e:7f:f7:25:
5b:4f:ba:45:52:4c:6e:1c:68:f0:26:4c:40:34:c5:28:a7:ef:
48:83:68:fe:88:87:d8:69:b5:d2:32:2a:fd:da:d7:8b:92:20:
20:b1:cf:61:64:70:7b:c9:ba:e5:3f:7e:f3:dc:83:ad:7e:26:
f5:cc:57:78:02:58:35:08:7c:c3:82:1f:3d:4c:e1:3e:4f:c5:
87:49:3f:c5:1f:50:19:15:a2:dd:ed:07:9c:ac:b1:61:76:62:
78:05:f7:b9:e8:78:a9:72:84:25:fd:8b:99:84:27:23:52:8c:
9a:3e:cb:63:6c:5d:3f:fc:4c:79:2b:11:97:e0:68:61:ae:9a:
d9:43:74:85:31:39:b1:80:95:18:10:18:30:d9:da:2f:e8:80:
ba:eb:19:8c:5e:19:14:b5:00:3b:33:f0:74:5b:6f:20:ef:2e:
7b:d8:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 05:16:33 2026 by rpki-client