
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
File: CAK5XOYjnVJsNa56jizrSK64K18.mft (raw, json)
Hash identifier: PrYsnWhOEDPIBjrO/upITnuWlLFKeqa/c1J9VtydWG0=
Subject key identifier: 2D:65:B9:30:CF:5A:3F:BA:9D:74:C0:AB:22:20:1D:7C:91:25:A4:F3
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 019DFC4DC81C77FC0E13FFF95DF1A1641831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
Manifest number: 1917
Signing time: Wed 06 May 2026 08:00:49 +0000
Manifest this update: Wed 06 May 2026 08:00:49 +0000
Manifest next update: Thu 07 May 2026 08:00:49 +0000
Files and hashes: 1: 1-6AwkgX1FMK4_Ko0mKFcJ8edvm0.roa (hash: tKUozaQ39ea73+P1a3NKi94lOX/X8IQKkspnuFoW9eg=)
2: 14WoekfhkLXxAS06CnB3g-cIjMw.roa (hash: MVYZfQxMUBAoXupy2mGEC8jlMhPeLSN4boghrPq2PGY=)
3: 1We3sM1PJzJjh431T2RewyKy7qc.roa (hash: TwjuUkz+WwHOXiQ9h/horDxuIN/qowEGiYayrZl3rRs=)
4: 1elNs3CyfXMunzQLfBYP-U8K7Gk.roa (hash: w9zovo1S0ml/8Ow1nEoZv1qRbfQBxU2d93NrR4rwVxY=)
5: 1j9DJV9MjnKXa5ixkpjU4rsspH0.roa (hash: TY0mkQwq6+kCeWNBcAhfn8BLNy+gb6Rq0kdAVdbTSV8=)
6: 1mHwjPse8dBa3mTY0ngPxZy2fF4.roa (hash: 0jWnXLeeExEdfigqwPsBPDCzZxgAjAQtznk6zQvb5Zk=)
7: 1sCBBC80-b387uFvyo8gem0qgBM.roa (hash: EMdTPavEe7DHxlSw4p3yZh2opqJKAxl5uGVTTYPAb48=)
8: 1xAY6nf6bhffY1bramdmANJZguM.roa (hash: InOt9rXki+in0THMVeBakB6EoQ9+ZbMyIjr4bHquWqY=)
9: 2a-W31onNiq0P4jZYsOq6cktHKs.roa (hash: piKQ/orqtUMianHlky3opOkohv1nKhRucZj+NR8lslQ=)
10: 3PYp69Isl6VmDKrE8-_c0R_s0QY.roa (hash: 4MhpSOARWnFvB3IeWDhAMEL60atNMrQJ9zm0TOa/gKo=)
11: 3dCExH2cQ3AwBrUhpOwTQZxBr3c.roa (hash: DaT6zSsVgNzssXsoUQLL8dxsy9Ivm2hlBuq9k1+WKeY=)
12: 3lfjDZ_LyMbB8PjRnMxPCrvVikA.roa (hash: lHB/WmiejVwebpUIQdg5G2VpXchvQiJHaJHJxGNpYIs=)
13: 5L5YO6O362HNIylk8JgyA5EYFPk.roa (hash: IZuegZrgDlTtynSC78Vomk2yVDu9mi2qhjUEemSFZl4=)
14: 5bTbov2vGcJbN7vkkm8HHwB76jA.roa (hash: 5QyqxIyT6Sifuoap6r1mophGR/3BA1CE/nr94210ZVg=)
15: 7Xrwmhrg_gk1TSfb5HQWtLeYSyw.roa (hash: jnzYvaFScNPNn/hYq4GU8Vjj7fRUWEERctCQEuyXXJ8=)
16: BOEBBBh-wUY9a-sztOKP9U3lKUQ.roa (hash: itktgNiqDRBYsQDnVyPK2t6X3lC4am+OkFbJtafybJE=)
17: CAK5XOYjnVJsNa56jizrSK64K18.crl (hash: Mp++iorMcD13JO+zN8XegXtYTMoX81kCTgOyXpTF0PM=)
18: DF4qx1DNox0FJE2H-D0ZUTMQcKQ.roa (hash: Y2WFD4vu36lVNJG1rXcR3AVi/f0D3YYRbsZI0ZVNT0A=)
19: EUbcJKYp4l2A_7ZNItE_wS9IkZs.roa (hash: /Sp8zX73TUdqSeWr9V+B4KpQknP4qFgV3pGresv3OHY=)
20: Ec6xx1LGOAqnO3xr8TXlK25WXOI.roa (hash: P5cxezkPKyfNQVX7JIKGSuvktL5d4uVzE/ictGTTWaU=)
21: F6dm6rbFCCa1zY93BjJGyeETnt0.roa (hash: rxY7ve2qQTaZM6DINcyNbHpjuzjA22sFgi08sTK9Teo=)
22: FwZwmrBonBKjGUPaxKOdW9tJPZE.roa (hash: 6AkuMHZSZQWDlZZzrArdItO9G17pQLWA8eR+XLyo3G4=)
23: GmXCp-ryty__BS-cMpg7Kzz_9zc.roa (hash: CX9a+ejz3MuUVit0PYjhdyQyZtSmsfc0Blvt0HfHTTs=)
24: H8YoN4cZRGQKS0rAWtWUFSIVNC4.roa (hash: OMznwq3IiJ/u8ws+4cjxPVNfDGqlT+0CgLV4+JO0kU0=)
25: IB4kpRXfN9uF936LivmcILxsHKY.roa (hash: 5mZKCslxXERs71x3zlgmnZzQrGQsC9EfZx9YdIERIG0=)
26: JODr69-NdaIhqMsgmSCOuYn53H8.roa (hash: +iLXG8g1PiijENvmf0d+SHQHwxyXOPIbtKP03tOoopk=)
27: KVp-X6pskFOLFA64Y6Du-D-F51M.roa (hash: HH/+DRSaTYYGlAkGSve0C9OsQuWiUipWN0YkNPz01Dc=)
28: MwGfkhoVY9yczHNnMmopKOkQDQ8.roa (hash: bMcTFE62Bn8JSiStl6gdzWQDI2iODh7ZXTG2oU+wKww=)
29: NB4xnTAn1RNn-vKgoloy8gS60eg.roa (hash: EZrWgvp/yuFOGkdGh7Bk3VNJiuUHm1vRc0weE8SV8LA=)
30: O1MPhvu4d3pHIkDu0lMOleZog6I.roa (hash: oSY03wl4A0aLdGeJ42G+K8hUDUp93yYUE1W+f4Xtqts=)
31: OuUgPMDiVgWEYNd2BtOVpNrZ6hY.roa (hash: P5f1XjiYANfvf96nSn3cE35oeXR7m62v2srju0CYx4k=)
32: QZKPOW9fdaZ6CFZZuHr5O3FdSo0.roa (hash: w3kv2Hh/xkZB3qu7NtFf6C0ytmrzwo58vPyVoDXMw14=)
33: WU6rhKIDYlOBv_KujW4inrtjlG4.roa (hash: 2rbgw8A9EQVeZV9x2K7KWn9IeU+joxL6h/Zkl0kTa98=)
34: X3OoEc4wVuVwfk_vi-BedRHiVe8.roa (hash: IkEEbLoP+8jmiN0OcnpPt7LEqVzNMYcyeFyPjMqY22I=)
35: XZTw4KFczy0Ar8IqCJPDnCcipmc.roa (hash: T2Q5bH+6BDTYW67ls/KJ2Hzqb6SSUc6QBDh+WpjZUpI=)
36: YSY_txXwMkHdM6rWqITHXWNrMx0.roa (hash: yVuL5VVBfVsU2v5lXPaJcCeDth6XQ1mjX5ArOuZxxDY=)
37: YziHvLlX14Bti0NY0Sx9Yo0T07A.roa (hash: BqFk3R+lISgdo5MfFHtGUi+lKU/wYg9RUvKXdhv9EyM=)
38: ZcIzEiJwYxPPkm7Y7dv9lgoJaO4.roa (hash: JNU/zVs/QkSh6LxJiN5Vq0jrPYqEK//Cnc3GvRNfkSI=)
39: _CFbTUX76fNe5IBcq3MPcZlEtZQ.roa (hash: h74Tfn8ZJCfINzx1IshDwodGNgfiv419Rx5j9paQnPM=)
40: a9Rpht6AbCSSrUCu5Qo0lLFufA4.roa (hash: YbTv2Sx0z5Y5mlyL06fWpp8efAU8mcnO8mEi3/k+h7g=)
41: bR6IrI6IRBWDhHioFM0omeWX7i8.roa (hash: crwSUTpmdjAStqPHzp+6HwQh32ozDg2gBGMop2ftlyM=)
42: cXX9bAZ77mllTc24Rs11ApMBOt4.roa (hash: u6kZlsRKN4vR06ERgmYB+NC0fmg6/3nuEqaSfJpiAHM=)
43: cb0EEAKvHHk6_aqJKin8YWvHIXY.roa (hash: YDpP9XOCMWs39OOIHnBxhZZcAFGUEpXeEqdMZZFTkP4=)
44: d3rejRbUmYFr35-vLeZclqKXvx8.roa (hash: d9vdGuX+pqEbHEeXPkCALX9/MW/hcSbcEnVvwtApLDQ=)
45: dDH3JtUTrsvQnVBKVO7yHBntw-w.roa (hash: mfCB3VeF+mi9XRi1tKveWq8k9D8F3zzZ0DMoRWnR5Kc=)
46: dhTd6pQkdcZtziuGC_DE5cb_F00.roa (hash: LQtyf9un2S8HccFPJLYelD7n40x7iaFSSl5U5VCqaVc=)
47: fFFAMOimUOHtZ0P2EST6cc5eFys.roa (hash: z3O1rdXJNJiP4+IK6Eicrxx0Y0tbtDOd2jjJD9KkLHk=)
48: g1QZJFDUWcI6meJLRY34DSK6DWk.roa (hash: v/SDRfu3pCuA6fUj45FL2i7iRC9I2pKDfIdXLMvFVoI=)
49: iDAdYckwJ-cMfTZQzbOAuVNBPQE.roa (hash: 1/067i3fw6b+0AnVm88M01ZfwqO6rPWe5th/RiPzphI=)
50: iWdn0SfXIARXAoGavF-tJqA__v8.roa (hash: L7H4nDBc7qcTPVHc0qlRD2IQzpDawAZ7Ei6t4itV5to=)
51: jK0B1Odx-DON8kFCWSliovgRtnw.roa (hash: CRAL0nVC/AWRKZs3Mefu2T0wlgwV3ReA6cAR1onshxY=)
52: jmgnzzXKHNWCXs1YUwHet_VC_5g.roa (hash: IuYNZZ+cdQ4E7zjrKhZDgx+d3EvESgb/tI8LTJT2/+s=)
53: kMa3jYCmN7waNwsLMbRxg8toUX4.roa (hash: 8Wv4epjiq8kJysZgLrpdXKcPBVyOj3sbTfiO2uuE99k=)
54: neTZwdUrsvjvhEOVdhB7zsbctJU.roa (hash: 63MePPCn/rJDWdkOz9zyLAtuyWHAkx1hOc5iIXs9UC8=)
55: r1jEpAmwbttHC_NlYHCGTRBo1J4.roa (hash: KNjzSwPg/5u1YZ/73y/8b7ro/20GYgw/rgE7l+oyh+0=)
56: rEm_zkT8RkXOo6rrSI9S5ochz18.roa (hash: rmCUxRvddsYBO6Xa4X/4nPN4nbj09KJMyqWyGAgYBBo=)
57: reWnB99ZgyKfDxLMYCU0eB60oMM.roa (hash: zmOzk6zG/XUr+wMEv4S5Xft1/xA0B0cNXZlAxmFFu9E=)
58: wIzlJythJ95TmQTuoVrNf4UhbHc.roa (hash: UAuTe0NrAW1OWhtqr4YDAlRDzjgT1hn90G7ZXFo9x1A=)
59: yqWqycxDvODXOPVo60dSBqjaSe8.roa (hash: EZtFEMVoeITSA0JZ/DBD86/mXpaTIrHY/lFYqHddSSQ=)
60: zPO2AAYP4fSolIgxQyCrbObDgdU.roa (hash: /PEkT2RqsPLi4LdqtolHB+s3Gvd0guochWMoJPM13nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:4d:c8:1c:77:fc:0e:13:ff:f9:5d:f1:a1:64:18:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: May 6 08:00:49 2026 GMT
Not After : May 7 08:00:49 2026 GMT
Subject: CN=2d65b930cf5a3fba9d74c0ab22201d7c9125a4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:f9:4a:63:0c:74:ed:4e:21:5a:5d:2b:f2:
05:73:3b:37:e5:f9:c2:20:a8:2b:f5:a4:3f:1c:af:
08:62:39:61:3b:94:b1:df:b6:0e:8d:bf:ab:52:46:
46:85:87:72:f6:f1:90:c2:2a:49:01:3e:b2:01:ad:
1f:d2:24:23:f3:5d:08:f3:9b:e6:5c:22:8a:16:b6:
d1:e1:0b:fb:f2:d3:97:52:93:79:f3:99:fa:4b:91:
47:8f:76:64:45:88:3b:69:92:90:72:4d:c6:42:d8:
f9:c2:38:bb:fe:8b:a2:e9:8b:27:74:40:b0:74:29:
5b:1a:de:12:a4:b4:8b:82:ce:5f:39:20:98:80:fe:
41:ae:27:bd:90:53:93:82:b0:d8:ee:04:5a:80:ed:
64:16:2e:f1:a7:fd:1d:9c:02:29:11:96:4f:ec:01:
52:0a:a0:35:55:4e:98:71:64:c1:ce:5f:98:3e:e9:
58:e4:bf:bb:c4:17:96:97:c8:0b:5c:41:79:4b:72:
b6:f1:12:01:e0:84:64:34:9a:aa:39:91:99:40:69:
94:8a:1f:3f:81:d9:8d:d3:18:ec:e1:74:01:f0:18:
e3:ab:4f:3d:56:ba:e4:29:1e:f4:4c:ef:eb:fd:fe:
62:ce:e6:b3:f9:f3:67:fa:1a:90:f8:28:3c:a3:b2:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:65:B9:30:CF:5A:3F:BA:9D:74:C0:AB:22:20:1D:7C:91:25:A4:F3
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:81:a1:97:e8:16:cd:1f:fb:44:07:fb:9c:f3:d0:92:ec:b0:
5b:aa:f2:7e:cb:fa:ac:b3:db:35:df:5d:23:3b:74:c7:d4:ed:
3d:64:28:6e:35:c6:58:8a:39:d9:53:96:bc:ff:0a:5d:c7:b0:
0e:4d:05:9e:d8:5f:1b:84:73:d5:cd:a6:c1:d6:c9:dd:c3:52:
5e:db:df:e1:39:4e:7e:6a:fa:70:c9:38:22:6d:95:54:2a:a4:
3e:71:02:35:53:bd:33:6a:dc:f6:9c:d7:22:6e:22:e8:71:eb:
d8:24:aa:ab:1f:72:fb:b0:1c:e2:bc:76:87:3a:8e:5f:5a:e3:
c9:64:5f:db:b3:cd:36:17:83:63:6f:89:12:72:71:97:7b:96:
d9:7b:ed:37:9a:c6:e7:b6:08:72:89:6a:49:9e:b7:ad:97:27:
84:b0:67:5b:ef:91:fe:6e:15:95:ed:fc:18:ea:13:78:7d:20:
e9:14:d1:71:83:31:e9:73:8f:6e:65:40:22:bc:89:f6:ce:4a:
e7:d3:ea:58:a2:29:dd:99:cd:16:9c:2e:21:d6:31:72:39:e8:
fe:18:02:42:ba:b0:a3:bf:a7:6a:99:d2:4b:b8:cb:20:67:ef:
7b:13:c3:be:8f:7f:93:c7:8a:79:94:a5:24:6d:1d:cf:78:e4:
e7:89:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 10:08:52 2026 by rpki-client