
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
File: Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json)
Hash identifier: j34+uisqVTIYFDrBU7oGrGQGhUVrfFpAdo46p3JPtj8=
Subject key identifier: 17:E7:66:B7:66:A4:C0:7C:25:77:FC:00:2C:42:CD:08:1B:0F:96:B1
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019CF8E18F750E895C50289FA633367D766E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
Manifest number: 0C97
Signing time: Mon 16 Mar 2026 23:00:57 +0000
Manifest this update: Mon 16 Mar 2026 23:00:57 +0000
Manifest next update: Tue 17 Mar 2026 23:00:57 +0000
Files and hashes: 1: 0SKuPZPHgx0DuZsSA5jf1vAaZOQ.roa (hash: oJFIU8Cu0N2S9/wG/IfXoDuZ2TzeSG92c58fXMAz65w=)
2: 1WFcAkubK0j9tuvoOEpKw8rrMZc.roa (hash: US4FVafwO24GeaH/vI2owb0qrhh125+5+tzixj9zkLg=)
3: 4YDvutSU0UmPrwnDFoLiKufwEY8.roa (hash: zJVa6p9/6hu2WbxRpiJdGV1n058lDV+uyqxwOAwNowA=)
4: 4hgz4QMM31Dnzsk16v76ApMHw1Q.roa (hash: uTIYHBVMNL1a8dqc59Xavlk6v2XFQUwkIp5IXWbQIxQ=)
5: 6CzQRMn6GnwsVxYiA_23IYKMeoo.roa (hash: yTq5lptLiZc3PV2A2cnpwYQvB925u7nVJPs/y3zGz+4=)
6: 7H2mFDg6qfXpVYnxbXn0fEFWELs.roa (hash: J9Hxga4uilgUHWboi+rXmCtEsrXocnGU8yxF/NAwyo4=)
7: 7xz9ZtbXj7qhOrWl1asjKBlzz1o.roa (hash: al7m3r3hlQECrtwI9lRqdu9jwLTy7M0zSKzMUXGbBvQ=)
8: 8c8fo4MttyJv5SLRbDdRYu1xnic.roa (hash: 1vjbMqaT77+AxTSiKxSoxcqnrNY36Cpct9YPE7m/ttQ=)
9: 8cSFy7Ko1nag59SAcofvgS4Nnmg.roa (hash: IveoawDTw5t/FsiNYzrV2ir2XqSXTfIr+SxjBonLcNI=)
10: 93Dd5LlqoQp6iKYdx6lcOcDR9oc.roa (hash: AJlYL2EFP/0kQaoDXjXnYGJqco+B4D+CiQvUKCb/WIw=)
11: 9w8n7TtHePHsLOfepkD5dQlDWpY.roa (hash: QNQ16n2FmGQi82u0p2e9PUzGlGzw6yfmOHXwlBjHsbQ=)
12: DPy9szbNMOQKof88htrB5gYXHg8.roa (hash: KpMcLwZt2U9k9KODAobx45vqz6G1VYYTX/rJeTqqTFA=)
13: HcULhPVBvVigoye4t6FA-KQWO9w.roa (hash: hAIwfnXvBlSldAfdYYWFGxIbO3wQO108WhCVpchVN6Y=)
14: LwRV0I5aAABSv2rkP0tPW4FRNzs.roa (hash: koEQn+aNjm6TSUwuZfgQBvNwwQjzXH0iVoRIHsH/lmI=)
15: Om-Yq1ZGRM1IIUjBT3G8r_WH3vI.roa (hash: NbN2DC3J+/IORMxUWXp73u1pYhmDVgIteGSJjaWkIyM=)
16: OwtGWChxCNtRyJj6ElbibxId-aQ.roa (hash: ka/36kkAkjg2s/fwE4e37YvaQAs87ErAmYuEuoZciXg=)
17: PCm2Il224mWbxHMgp2-whFWp5Y8.roa (hash: li5I0uPh7E9cKNVsRWXspiiKnjbCYQjxIQb8POSntgc=)
18: PCzr-8pfKu6Wr6hFTTQ8eQU8TPI.roa (hash: UsJVbDBJ3BYi/wLg7BLlATz/hycpIsDhQ1LAnNbDRWA=)
19: QJmnWjrF5SckYqXHMQVWx6L7kxc.roa (hash: ZzvvSvqGh3FCeEYQX83Fju97+ka1cm0UIM/Bcb7Vjew=)
20: RUng57NMoW7ac1B2TzLtvUsBHXs.roa (hash: bXdd060UNM819brDZVY/MNr90jZYyXFvlUoD/+9CalA=)
21: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: yWY03/+yDYGQ2JVNe879rQT9yKEOyqN5rtyQbJccJPc=)
22: TDJgGMkZLrZ81GbvZCeAhhBMKFY.roa (hash: 6e5HzejThUKP+KfqmBRD2KB/4LGOct53fiIiefsSVx0=)
23: Un_KUA4UW3mBwqWIrQ2hRgrwqJ8.roa (hash: H+8IU6Ec/C7W0gUzGWdPCX/2d2iav4ezOCEab5gRvr0=)
24: W_BCOjmAdkWfODZ7bvZ_1VEo820.roa (hash: aAqSVSwbC6esRzER14YmpKx6m+Lo1g184jMJRY9Bonc=)
25: Wx6ujnx5V9SmWdGZ7fl6JX-A-ik.roa (hash: myAFROxX49mA8li5Tx07MgNtYqh4WpPg6VTHZGCCys8=)
26: Y9-xxrcFnsxDZauuv568t-PFy6A.roa (hash: xIyIZR1hVpjqPtioz/biAZM6H7ey8FMbjIcIVI3aaQQ=)
27: _F5w43RHV6dx3R_wQAV5wzUAHzc.roa (hash: BxgPa91m82H9cRlL0aKlQX+98I+Jq5YFGlS8SucX+mo=)
28: _IfucW-In1l5Fz3tjcTrBT7FS9I.roa (hash: 0d3RCOf/PgnlqbIN8XSmRiR9HJQfbIKvyOIHy7stdzo=)
29: djSIdX2gTX0MCxSL5llsn6i5hhM.roa (hash: fcqxImDjDHGTSuae1yCoZlPJZwU1d5hw+ezJF6PZbRg=)
30: eIpleKuOfZq1bPfCT2L77KdKRYg.roa (hash: czjz3eTpWUJaPaJtmnQVcyeyF+Dq4AtmQioUJnZMjK8=)
31: eSFc-jrx02A_dWByF1qGRiDKKWw.roa (hash: I6Kx+g6HRJvl92E2ZUTTlvthedWJjMU1Cjwr0YGI0s8=)
32: e_F7Xbi0XqAy8Omhy8vQyDQa9No.roa (hash: oE2eMUbGUqjLN7domDF+Is0SbYEsjgkb9FJzi5XwtZw=)
33: eiaI1-hJNAgrmp0gE_umAxWn1sI.roa (hash: 0+nXI30Kx9KhbtXb4L+JY50O7XiXe8UjeNblohyYrj0=)
34: epL-6pVwzhIEf7qPG0idZwvRAaU.roa (hash: PUOL+WHkVofoMPu8K9ZuIn3mIvtNQi0EbJERGXzRSaU=)
35: epUEByvctUQFdD6x8uykLVw28K4.roa (hash: mbKHV+YI3RW2KrL8/aMhBlFmfvhswGZcacqDnNW/6l8=)
36: g5P1CePj7Ig3Woj5axzABAMb-Fs.roa (hash: /SHldXpCq9rbN+oRz89QqyP1fUqetjOkr2DsYsUd4t8=)
37: h-GPzjeo3pqIKqWAgrNe1kVp3Xw.roa (hash: VkUy1q7rwk/bJY0kmudHR01ERlqKVDpha+69blCqd7w=)
38: lapBDQIlIdDm8E4XnEd-bMW2ILQ.roa (hash: MgQdaG1666kHidH2vRjUNtiAJVGqpfkJRhC7xtWbkDs=)
39: ljJZC2hEpJ5Azrtf0iqlzINfN74.roa (hash: 5Q5VXrZNXtx66LR6yEa6nurEugsz3hLaJZcfv1xig+w=)
40: oBbHZskBgePxfPA6yXAa9qsZaJ4.roa (hash: HMrh2dCkL1N2+YwCmiHFoho2RWsT9N7Z2PNHtiVeXho=)
41: ou98WwPXDlrEW3eM0KZKlXxPjU0.roa (hash: e6aNXSypQBdMmCLoYi3x6Uu9rY0X9chBD/3LiPy1/5c=)
42: pcwBdWeogQWKGBKaJvlkeUygt1Y.roa (hash: FyjOSrsEYcBQx6MNH4viXYO5bDrfzFXdgEpostcNkrE=)
43: qjLMBAbC6C2Qi8uRTUP5yrEkfoY.asa (hash: 53AqSfnCOo667DHb8w2oqtwcLknCSxXAHJeADmD+v3g=)
44: sMjP0DwIRUv_f7qQQgRGf3HaTWA.roa (hash: DgS24JG1c/l8UCWAl1zW8utqR4YjdbEUYY2s38b7VVE=)
45: siv7eihEdKW_ap7AUDG7_39jUmI.roa (hash: WFYLo+dkgFW4+MbeoyoZaYOFmKk3TOwdJdQSzSoQ9SE=)
46: tbVX_nBTaE5VNov1rsfXFt2f7SU.roa (hash: rfYnZjKJQ0wuXUnU3TmEpEijE4Fpnxn/YL0Ur1YiogQ=)
47: urL4Mc4DykB_e6TYmMEoYhi2954.roa (hash: gfx7b8/If2mHd3qPOzceO0clF1lE+PE3Ji80UoFnGp0=)
48: v28XBIDcOIWawnqoBUd5lqyUYxk.roa (hash: WxydDKnqf++ZAuoc5GMUeeHtdm5DstgCBzp6r96AGOg=)
49: xRZUDhx7ihJfUObQvwoPd_wjCIE.roa (hash: CaizEiyOxtBDcQtuUG7hvPJywCQ5SLbLXz2o0r0E2ec=)
50: ySNwW6swWEy9g206lS3TF8Hot7Y.roa (hash: 2G2m7gXWJPeDJ1CaSCcPPIj5TE8F3VNFo+mX4zQe6WU=)
51: za88ND0OSXOKBDkHlXDSgAc0j-o.roa (hash: 3SNDrnhjIHUyQtYp1P1Obkb/xEBrgav3aCIr/q2YN6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 19:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:e1:8f:75:0e:89:5c:50:28:9f:a6:33:36:7d:76:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Mar 16 23:00:57 2026 GMT
Not After : Mar 17 23:00:57 2026 GMT
Subject: CN=17e766b766a4c07c2577fc002c42cd081b0f96b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:e3:6c:42:c2:6d:27:5f:a5:58:9f:ca:ac:
55:39:b4:d7:19:65:65:c0:c6:04:9c:1b:e1:4a:4d:
1d:59:14:1c:f4:ee:d7:ab:9a:53:a5:6a:ec:0e:41:
52:86:6c:bb:c1:1b:ac:2e:f5:d7:8b:48:41:0c:57:
78:c0:eb:1c:e8:74:f9:ab:86:9a:f8:4b:99:77:d1:
53:e6:3f:45:38:67:2a:f9:7f:fb:b7:f9:b1:a0:27:
b1:65:3f:b3:67:01:05:7b:37:0d:39:f0:b2:66:9c:
fa:a3:18:de:f6:4d:de:8f:ba:9b:ab:9c:a5:a2:91:
0d:c4:b0:8b:2e:7e:31:63:d9:d6:06:b2:5a:80:87:
10:17:39:c6:f4:d1:ee:5b:b9:70:56:ec:6a:71:27:
11:3e:57:b7:1e:08:1c:ca:5b:e5:01:e3:46:75:c5:
08:84:a0:62:49:7a:24:90:ff:68:da:c1:a3:ab:ac:
b0:c5:02:8e:aa:d8:4b:98:8e:0e:ba:d6:7d:9d:7a:
a7:58:6a:e8:e6:66:ab:e8:58:21:16:bb:f4:29:c1:
9e:7e:90:bf:e2:44:0b:9e:9b:53:68:7e:ac:e7:20:
b8:ae:19:bb:b2:f1:f4:22:ae:2f:0a:61:ed:a7:d3:
e9:8d:ad:c6:38:cb:09:89:de:ce:65:4f:2d:71:9c:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E7:66:B7:66:A4:C0:7C:25:77:FC:00:2C:42:CD:08:1B:0F:96:B1
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:21:6f:0b:1f:25:ed:21:81:eb:9e:9f:68:74:c8:a5:b4:8e:
1c:7d:16:0d:43:4f:d0:ee:eb:7f:7b:3a:ef:33:7a:c6:0b:ce:
35:2f:8f:7b:50:29:46:aa:b2:34:d3:74:26:d2:89:ed:76:8f:
e6:a4:29:7a:fd:46:c4:23:e8:48:cc:cd:84:c6:fb:ee:3c:6c:
63:00:7e:9b:56:df:c1:11:c1:73:6e:7e:37:30:77:f7:c7:4c:
50:b0:87:ad:9c:53:df:12:14:34:3c:51:b3:da:ef:c8:e0:20:
21:66:86:27:ce:cc:56:04:06:a5:af:ad:bd:07:b1:7b:2e:93:
fc:e4:52:ae:03:36:94:a1:dd:4f:79:8a:9e:65:80:4c:f8:e0:
d6:db:38:63:a8:32:0a:bd:5d:93:5e:fd:44:7d:48:9f:83:41:
ce:2e:06:fe:ca:99:73:30:cf:b2:a6:c0:b0:90:b4:48:a6:71:
0c:d2:d6:61:f3:42:24:7f:43:c7:f6:48:9b:3c:be:a2:3a:69:
42:1b:a5:52:b8:25:1b:fa:10:b5:9a:c3:1d:27:0e:ca:f4:8e:
86:8a:6e:b9:2f:b9:5c:91:52:dd:d8:82:bd:1c:ab:01:a0:7b:
8d:4b:46:d7:69:fd:62:80:c2:a7:4b:81:2e:6e:42:4d:70:d2:
c0:52:a4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 03:57:36 2026 by rpki-client