
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier: rOdHOnesYhVVZhsS+Gt4taoXNpzB9Rr1jPvOTCZpipk=
Subject key identifier: DD:70:CA:3B:88:2A:C3:26:9A:B9:0D:7E:66:6A:5B:36:38:53:7E:F6
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 019D32631B0E2224CADFA5039506D1A58867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number: 11AE
Signing time: Sat 28 Mar 2026 03:00:48 +0000
Manifest this update: Sat 28 Mar 2026 03:00:48 +0000
Manifest next update: Sun 29 Mar 2026 03:00:48 +0000
Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: MQTHwHQ47fQPdny4lPsatedx26NlkRuQLcl2vrJteMI=)
6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:1b:0e:22:24:ca:df:a5:03:95:06:d1:a5:88:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Mar 28 03:00:48 2026 GMT
Not After : Mar 29 03:00:48 2026 GMT
Subject: CN=dd70ca3b882ac3269ab90d7e666a5b3638537ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:fa:2f:66:54:c6:e6:96:9d:7d:80:f7:7c:
e9:69:2c:26:55:db:23:55:df:f8:b0:87:c6:95:2a:
ea:d9:dd:6b:7f:97:be:a6:d5:c7:5f:db:11:49:b0:
6a:90:e8:0b:48:f3:f9:48:07:59:68:c2:68:aa:63:
ef:e7:57:4d:6e:3c:5d:f8:e4:63:85:0b:f6:5a:b6:
3d:dc:a3:f9:4a:93:92:50:1e:7c:21:ff:24:fc:4e:
34:ef:29:45:ec:52:fc:a0:0e:91:13:48:48:9e:32:
79:e6:f9:bc:6c:95:6b:87:ac:0b:e6:a3:c6:33:12:
a2:db:ca:7f:6e:98:95:d6:e6:07:2d:22:65:e4:22:
bd:c1:4b:39:22:9d:ec:cc:4c:2a:72:62:83:61:26:
23:a8:74:8a:74:db:d9:81:eb:14:c7:fc:61:3d:f5:
85:ab:72:1d:fb:38:67:cb:0a:20:0f:0f:87:22:59:
01:73:6c:46:d9:cb:e0:2d:cd:48:1b:12:11:47:82:
04:a5:0e:92:ab:63:9e:10:52:f1:75:86:f6:fe:e8:
4e:de:fc:e2:03:82:34:44:47:36:03:27:cf:07:7a:
ff:e2:f0:e9:83:1f:d0:55:b1:c1:f9:2e:ed:ee:7a:
b5:e9:19:8c:26:0e:aa:d1:59:ac:21:4b:67:77:3f:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:70:CA:3B:88:2A:C3:26:9A:B9:0D:7E:66:6A:5B:36:38:53:7E:F6
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e7:68:61:1f:b2:1a:d8:b2:eb:22:08:f6:f2:2f:d2:68:01:
26:33:fa:ef:36:a9:23:17:0f:22:69:b9:09:38:4d:3a:ed:21:
1b:65:33:34:06:67:6e:e7:88:34:50:59:76:73:63:20:17:a2:
49:aa:ff:21:df:4d:74:60:75:76:80:17:d7:40:48:8d:f5:7e:
51:b1:fb:b7:b9:b6:52:a6:44:ab:a4:28:74:57:ef:95:a1:f2:
27:a9:e6:ef:f9:d4:71:4b:91:dd:a1:3c:c6:5e:f5:72:d1:cb:
f2:08:19:fb:30:fb:c7:b5:fd:d0:5c:e2:b6:f4:7b:e6:43:b1:
c8:99:85:70:66:12:37:25:97:fa:c0:98:92:c4:a7:d4:ab:3d:
15:81:d3:0d:81:55:a4:5e:a7:b8:dd:a8:c6:51:f1:ae:8c:42:
57:6c:59:83:7f:51:3d:fb:31:f4:91:1b:86:45:97:48:ba:21:
06:64:35:8a:66:b4:cf:7f:2b:35:f0:cb:dd:d0:ed:08:0d:87:
ba:38:1c:c4:0d:69:4e:25:31:65:c8:bd:ad:33:64:30:0f:2d:
c6:98:5d:66:26:c8:25:57:15:09:9c:f4:3b:1f:50:63:bd:22:
0c:60:b0:80:47:24:6d:8c:83:a3:03:75:0a:13:dc:f3:2c:2a:
bc:81:2a:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yYxsOIiTK36UDlQbRpYhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm
YTYyZDIwHhcNMjYwMzI4MDMwMDQ4WhcNMjYwMzI5MDMwMDQ4WjAzMTEwLwYDVQQD
EyhkZDcwY2EzYjg4MmFjMzI2OWFiOTBkN2U2NjZhNWIzNjM4NTM3ZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDf6L2ZUxuaWnX2A93zpaSwmVdsj
Vd/4sIfGlSrq2d1rf5e+ptXHX9sRSbBqkOgLSPP5SAdZaMJoqmPv51dNbjxd+ORj
hQv2WrY93KP5SpOSUB58If8k/E407ylF7FL8oA6RE0hInjJ55vm8bJVrh6wL5qPG
MxKi28p/bpiV1uYHLSJl5CK9wUs5Ip3szEwqcmKDYSYjqHSKdNvZgesUx/xhPfWF
q3Id+zhnywogDw+HIlkBc2xG2cvgLc1IGxIRR4IEpQ6Sq2OeEFLxdYb2/uhO3vzi
A4I0REc2AyfPB3r/4vDpgx/QVbHB+S7t7nq16RmMJg6q0VmsIUtndz/W0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1wyjuIKsMmmrkNfmZqWzY4U372MB8GA1UdIwQY
MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+doYR+y
Gtiy6yII9vIv0mgBJjP67zapIxcPImm5CThNOu0hG2UzNAZnbueINFBZdnNjIBei
Sar/Id9NdGB1doAX10BIjfV+UbH7t7m2UqZEq6QodFfvlaHyJ6nm7/nUcUuR3aE8
xl71ctHL8ggZ+zD7x7X90FzitvR75kOxyJmFcGYSNyWX+sCYksSn1Ks9FYHTDYFV
pF6nuN2oxlHxroxCV2xZg39RPfsx9JEbhkWXSLohBmQ1ima0z38rNfDL3dDtCA2H
ujgcxA1pTiUxZci9rTNkMA8txphdZibIJVcVCZz0Ox9QY70iDGCwgEckbYyDowN1
ChPc8ywqvIEqNg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:01:37 2026 by rpki-client