
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier: qlI/zm54roX7DimNdZbJhTpa2b4XsDsccvCf4V1v+QQ=
Subject key identifier: BC:23:75:71:07:21:6F:14:49:E5:D8:02:D1:A5:1C:0D:FF:3C:49:75
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 019CC82BA780766EE4653852DDD3D7E38C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number: 138E
Signing time: Sat 07 Mar 2026 12:00:29 +0000
Manifest this update: Sat 07 Mar 2026 12:00:29 +0000
Manifest next update: Sun 08 Mar 2026 12:00:29 +0000
Files and hashes: 1: 0-d96R17ltUSy8fr0RUugwI-BVw.roa (hash: T+9pJSDxipOo4VQ90dksmKw5tDBPPo/BiqzTM/apWGc=)
2: 1RkuJiMIA6c-YKXkOiXgVUr3tk0.roa (hash: VMbTIDUnS0rJprZQrwM8fOUQBhB/Ygv1jHJEt/ApBqE=)
3: 6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa (hash: NZX54zdIf0Wm5ZnYmNdMli+Cz2MVmUZnuyAev1D/9/E=)
4: 94VCH5-yUsBwicojbjgImHgRoJA.roa (hash: JkHlAtKE0WPUSQeAnVh91wdkspZbKJDK7LSBm6EyhHc=)
5: BFdJc-7yBxarSw_UwCSCI2_nZzY.roa (hash: Mfwh/Ri4oMFWHDOwaf0KLrBxq/7lyDjZHbminSO7kww=)
6: FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa (hash: JZ21wYzfPfkSwGCQh1OtjrZna2xAaeFagGp1aClwZy0=)
7: GQwQ4NJBvyg0S5cirOINdsK2QUo.roa (hash: hPCA2eD/WAsZM79tgjhqtOTZx90myfRAeK+dN2Vg5Wo=)
8: GWOMCgc6frfuXzWmR3iYp-MVmSA.roa (hash: Anj9LGw2xp0TmbMPDVVyvGqohtYkFBACqEE6N9Y1dWM=)
9: KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa (hash: FJXGRBaEUrnNNyE8GBPLymN44URpQA1gYBmnWCwP478=)
10: Opa484uAlsVB9CtOuyZoIiqmIy8.roa (hash: 6u4ASe0ldiNjEJ3vKFZgisfLG676P+RimGMZcC3Ur7M=)
11: Tx9FMpngkKKRbOgn_YsDb4v7X18.roa (hash: BOevx6RbQLerHQQRMHC1Yu0hT6Exer/t3dYk9fLXFik=)
12: XpQW9Vko4NnnhhqSe6YnUmv4WzE.roa (hash: 1hl0BmRk0nZLkQjPQnXw86SjORpjVK0UnQhzFB2uADI=)
13: YjIsM4Uno7ILYs53JtLji9bmdRM.roa (hash: T20Rm6nai402HDN+LFukerdCiUhxMnqEcLW4G63DHyI=)
14: _QfreQ9EqD9ss46rDX_UENkjJZk.roa (hash: zfUdwflwTagWZ9n75pKYGfQVwgMmnMON42g7fWb4fZ4=)
15: c585sEb31KrksO5MlyuNt-hfuHU.roa (hash: fJ78hp+mIYgaOdDbv0g//N4rP8oKIJRANU6rLFZmpT4=)
16: e0CW_4oZRrryGAZlyRnhpcoXNPo.roa (hash: 7QHbtai0zkaLG8Cn4EhJepZwZsFysU2qR4KGXEevHnE=)
17: kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa (hash: yP3N4xFcOT8W3j9k2ZJ+fBiTsgbDKcU1wngastwJJcc=)
18: qOxZbeQcH3nmMujSCPVKvHl_hII.asa (hash: ASwjCTML65AJz8INpKtIJ9HsxUbvMPMUPCfyNp/UqwE=)
19: qu9muxyupj11J0vkCGd6UL4_YU8.asa (hash: ma8CUett5NKo6WA/WUa9lgNux61RUdveClhcObpC3iI=)
20: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: ZHuN4s7yMe2RhAJdLP47VOfNI94ev6bd7GAoz/BkPOI=)
21: xIYF8mI26v6vzxb3X_nxcD6q9Q8.roa (hash: f2x35r/ZRXZy2klzCvK8jZiQ1j2C+y+64vR3ljojbc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:2b:a7:80:76:6e:e4:65:38:52:dd:d3:d7:e3:8c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Mar 7 12:00:29 2026 GMT
Not After : Mar 8 12:00:29 2026 GMT
Subject: CN=bc23757107216f1449e5d802d1a51c0dff3c4975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:1a:60:84:93:71:c3:5d:30:c2:09:9b:04:
8f:27:4d:36:74:47:04:7f:b0:98:75:5f:23:73:25:
98:ee:7d:02:d6:02:b5:a6:bd:ac:86:96:2f:8d:25:
6c:f7:04:ff:27:78:f7:74:80:69:09:a3:88:ae:24:
cc:6d:5e:30:6f:34:48:b7:d5:01:64:b2:80:0a:f6:
b7:50:fd:b8:ae:75:bb:09:b7:4b:61:97:e3:46:66:
9f:a5:25:b8:9b:d3:1a:0e:a0:db:7f:f8:24:f7:77:
9a:39:4f:76:83:d9:89:d4:a9:14:50:f3:59:77:ec:
1c:ed:64:c9:c2:42:26:46:08:43:cf:bf:ea:5d:c9:
7f:4f:b3:66:f6:af:1b:5a:f8:2d:d5:bc:b3:bc:25:
dd:9d:01:97:7b:97:65:48:bd:46:80:4a:08:3c:b4:
7d:53:ec:cd:6e:7f:cb:0a:82:62:d5:2c:28:89:c1:
c9:67:e5:09:0a:a7:a3:d4:01:ee:62:82:93:4a:f0:
25:68:66:d1:fb:31:ef:1c:d5:f4:61:47:0d:93:a6:
91:d8:7f:1e:6b:f5:a1:fe:ee:ab:42:6e:e1:2e:bc:
35:0d:9e:2b:f4:a0:00:3a:b8:5e:ab:2a:4c:af:6d:
58:0e:26:8b:ed:99:35:ca:b8:2c:bf:e9:e0:c9:61:
f5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:23:75:71:07:21:6F:14:49:E5:D8:02:D1:A5:1C:0D:FF:3C:49:75
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c2:b6:da:d5:10:de:42:fb:3e:28:cb:99:1b:66:57:55:b7:
81:cf:89:9d:5e:32:3a:05:49:5a:a1:1c:df:4b:d0:9f:19:49:
18:04:b8:8e:50:5f:6d:c6:09:e8:0a:c8:05:9b:0d:e8:f8:15:
95:38:4b:f3:58:94:c3:10:33:ae:c8:91:9a:ee:0c:46:c7:79:
0b:bb:43:ee:a4:cf:01:37:c1:6d:5d:08:80:48:93:cc:f2:af:
5d:98:e4:2a:1e:eb:f9:d3:34:ba:21:8e:11:30:33:bf:f4:8c:
e7:43:a7:4e:ab:c5:0a:85:86:7c:2c:3f:d5:30:ea:ce:e9:31:
27:b7:2d:14:5a:22:d5:31:02:e5:bc:4e:0f:11:a4:14:a4:8d:
a9:53:65:e3:4a:4d:0b:b6:b2:b2:4b:82:ef:ba:fb:27:16:04:
12:b2:af:b3:5d:4c:6c:84:72:8d:91:19:0b:eb:84:a3:9e:00:
82:a7:1c:19:2e:76:cc:36:a2:f8:0d:79:ca:52:7f:c4:e3:23:
e6:77:75:c1:df:c9:74:d4:a6:71:5d:71:32:5c:26:2e:bc:cb:
85:24:33:c0:97:c1:1a:c2:9f:a0:e9:81:3d:c8:e8:73:ac:da:
90:26:c6:40:3f:3f:5c:3f:19:14:42:2c:42:a9:80:8e:89:66:
86:d2:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:53:16 2026 by rpki-client