
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier: sEvIodaXq8RhAPGkEufAjVYociCgONPUK3QCJpHIh3M=
Subject key identifier: 6D:06:27:B7:45:07:07:2D:A7:9E:D9:14:87:E9:9B:23:DF:96:C8:46
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 019CDF58921FFFCF3B7F72DF298C0008F4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number: 1183
Signing time: Thu 12 Mar 2026 00:00:49 +0000
Manifest this update: Thu 12 Mar 2026 00:00:49 +0000
Manifest next update: Fri 13 Mar 2026 00:00:49 +0000
Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: EKYZ7kjP2K+BY8tolaZAQ4/FAO7xOCsifX1+l9yzpJc=)
6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:df:58:92:1f:ff:cf:3b:7f:72:df:29:8c:00:08:f4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Mar 12 00:00:49 2026 GMT
Not After : Mar 13 00:00:49 2026 GMT
Subject: CN=6d0627b74507072da79ed91487e99b23df96c846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:26:c0:d0:aa:5f:33:82:6c:91:89:d8:b3:
26:90:50:bd:3e:cb:39:f3:6d:31:af:f0:c5:9a:66:
b4:8e:59:d0:6e:b8:40:05:57:10:34:8f:cb:b3:db:
02:db:8e:67:4b:89:82:ac:69:e9:4b:d8:45:fb:70:
96:9f:a3:0b:fb:d6:ec:89:07:eb:a5:55:58:70:1f:
c8:74:fc:fd:82:e4:0f:d5:8e:96:c5:21:d8:37:5c:
81:c7:ac:b6:33:8c:83:1d:8b:62:a6:2c:63:62:ab:
82:44:e2:58:90:52:ea:c3:10:61:97:88:8b:9e:a6:
fa:a8:fe:8d:2f:07:81:40:c5:6b:51:86:f0:9c:29:
d1:bf:b1:32:86:00:64:e1:1f:df:2e:46:29:75:62:
be:07:24:30:83:35:45:b0:36:a5:9a:11:6b:ab:b6:
c3:84:50:18:9e:a7:00:f8:0f:b4:22:ad:55:5a:56:
9a:44:0b:52:62:46:08:47:4b:c2:4d:90:c0:b5:9b:
ec:84:54:f2:15:02:47:3a:fd:b7:c1:4a:e7:53:32:
82:c9:6d:a4:43:7c:7f:ff:c2:e8:79:f7:db:79:ca:
bc:f1:9e:5b:f9:b5:7f:a4:03:59:bb:5f:95:fc:57:
9c:33:7b:83:64:36:25:de:88:44:b8:c3:4a:81:23:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:06:27:B7:45:07:07:2D:A7:9E:D9:14:87:E9:9B:23:DF:96:C8:46
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:18:40:56:73:ac:44:4f:14:f4:df:75:20:4e:aa:fe:3d:03:
89:fe:4a:04:11:6c:06:4c:fa:8e:f8:e8:3c:d9:79:74:70:3f:
69:15:9e:ea:50:9e:b2:a0:f7:fa:03:b0:3e:fb:94:6a:51:c7:
0f:97:3e:8c:4e:23:77:94:92:23:27:2e:90:c5:e4:c4:c9:cb:
9b:09:50:34:90:8d:58:1a:eb:79:21:93:e8:d3:a7:80:cb:b6:
e7:bf:b2:16:8f:e8:a0:7f:77:6d:53:e1:e1:3d:2d:65:a2:92:
93:8b:d9:82:2e:3c:86:ab:b4:dd:b4:cf:a9:e7:8f:b3:d8:ce:
55:a4:a3:0e:55:fd:e3:8f:ec:40:ce:9e:48:1d:71:44:c5:eb:
5f:9f:1c:de:c2:42:5b:78:47:b1:ba:d1:ba:f2:cc:7c:f4:7a:
67:46:7e:1a:84:1e:12:77:39:88:79:ac:b8:26:c3:2f:e5:39:
f4:f4:7b:a0:2a:08:d1:b8:81:74:f5:30:e6:dd:46:72:00:5a:
da:59:0a:a5:46:ae:10:6f:bd:7b:19:c1:b1:e3:75:0b:26:3d:
96:71:a7:22:98:52:23:0e:26:4c:8d:bd:b9:32:e6:be:0f:2b:
68:d4:45:c7:2d:eb:30:a2:ce:3d:de:a7:fe:2f:59:a9:04:ed:
ae:5e:9a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 10:40:06 2026 by rpki-client