
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json)
Hash identifier: i9uHwrtSjCaf0U1A7/drUKCF1tr2XkqDyDs2yD0FQCs=
Subject key identifier: 5B:3B:8C:05:25:90:DE:E0:D8:80:D0:EB:DD:D4:52:E3:52:E0:07:02
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 019CE1B4621DC98ABA39A5D3E41F884C9D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
Manifest number: 0D9B
Signing time: Thu 12 Mar 2026 11:00:21 +0000
Manifest this update: Thu 12 Mar 2026 11:00:21 +0000
Manifest next update: Fri 13 Mar 2026 11:00:21 +0000
Files and hashes: 1: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=)
2: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=)
3: 5vGd1hrRUgjw-VsLzTylini_B7Q.roa (hash: sg0Um8p6l1c6gl4UvV5+SwzisrScl+Xsl5xaWUIwQqQ=)
4: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=)
5: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=)
6: QGAJExkL2FvXDViXp-Coxz1ISyE.roa (hash: KqS/q7o4Pi5DS6O8i7jT3UhmWb+gbQp5j9Y+K8+kuI8=)
7: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=)
8: Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa (hash: 11efmsxVKEDPybIj7bqcT7q0gfbmOyOH1LpPDuuPMuI=)
9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=)
10: jk_vo45DTCE6Qch6NeSYYIx2UVA.roa (hash: Y3KIabgiInfNA/NNjT/XlQnKjIR2mWc9rhmGkHb5FNU=)
11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=)
12: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=)
13: pgVasoGtiLKSu7Gip3svipxzZPk.roa (hash: 0SihNtYkT1G6gzAeawF0Zf7V1EZDtwvsDM2yXROG1dk=)
14: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: HzFsm/cDE0FELV7DRzXMz1JbBpDIQWsIDstdZPBHSyw=)
15: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=)
16: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:b4:62:1d:c9:8a:ba:39:a5:d3:e4:1f:88:4c:9d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Mar 12 11:00:21 2026 GMT
Not After : Mar 13 11:00:21 2026 GMT
Subject: CN=5b3b8c052590dee0d880d0ebddd452e352e00702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:59:6a:5d:6c:84:6a:9f:a4:df:25:28:4d:
35:31:99:17:81:22:4f:1f:25:97:c6:a0:f2:90:22:
e0:f0:7f:60:a2:d2:32:b7:ad:73:5f:a7:a6:1c:ef:
34:a1:14:c3:ca:5b:98:93:f8:fe:53:be:57:52:1f:
13:21:f4:80:c7:c8:b5:7e:e7:a3:67:96:35:80:ed:
ae:14:53:53:f0:38:ba:d9:46:0e:f8:38:6c:33:cd:
c6:46:a1:12:28:6c:d7:ac:89:90:d1:0a:1b:91:ce:
7b:eb:7c:2d:15:81:92:e7:d1:92:bc:ae:fb:3d:7f:
18:a3:83:78:19:5d:d0:c4:df:fa:b4:df:f0:fc:bb:
35:83:36:0e:c4:c1:26:4d:7a:ce:e6:52:8a:0b:ed:
70:2f:32:df:d3:b1:e8:4d:56:cd:87:44:d5:04:26:
62:9c:47:5d:ce:38:d0:ab:e7:17:a5:23:dd:df:bd:
04:a9:ff:00:44:73:dd:72:4f:30:3e:c0:ac:78:9a:
5a:ee:63:d7:2f:0c:49:d4:a3:d8:7f:2b:18:be:ed:
19:b3:47:86:e2:58:ad:d1:52:a5:e9:ce:35:8f:b8:
a7:09:63:7d:e3:49:74:ef:ed:63:0e:30:ac:7e:01:
2e:8f:e4:7e:8d:b0:2a:56:46:21:58:85:c0:18:64:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3B:8C:05:25:90:DE:E0:D8:80:D0:EB:DD:D4:52:E3:52:E0:07:02
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a0:7e:c2:17:00:b9:60:fc:bd:67:0d:1c:14:fe:3a:6b:bf:
be:26:b8:40:a0:b9:fd:5e:cd:8b:ec:9c:e6:26:db:ab:c6:9c:
43:d4:fa:d3:c0:1d:3f:91:f4:d8:52:3a:4a:e3:4d:da:33:e3:
76:fb:e8:13:59:0c:56:94:d1:31:72:00:cd:4d:16:33:7d:f8:
22:47:97:5f:0f:cf:69:ba:3f:dd:11:a0:c4:60:d9:56:ff:58:
ab:8b:4b:a4:39:de:a5:da:d5:e4:ec:5d:e2:10:97:cb:3d:6b:
e1:ac:30:4c:d7:a5:15:79:0e:bc:1e:2e:0f:76:0b:61:55:85:
f3:20:11:d1:7a:40:27:cb:34:7c:25:3a:82:c0:82:26:da:f3:
41:e8:af:bc:9f:6f:32:8d:c3:95:72:4b:1e:15:f8:1d:d0:b4:
3d:23:ed:1e:86:9f:2c:ed:bb:ca:50:ab:a5:8b:85:8b:d7:e3:
2e:5e:9d:7d:3f:ed:65:9e:e0:60:ba:8b:40:44:50:54:9e:e7:
ed:d9:cd:f3:b9:ea:d6:bf:71:1b:2b:16:c6:12:dd:2e:82:ab:
af:65:5e:72:89:43:ef:5b:bb:65:39:50:be:80:58:a6:33:6c:
12:5b:85:7c:98:1e:44:6c:cf:4b:83:4a:e6:4c:b6:72:af:31:
e1:77:19:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 20:40:22 2026 by rpki-client