
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File: 5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier: dWaDu9jP0si7e895zAYmug5MzukvrsHUydPdLto6byI=
Subject key identifier: 0D:88:4C:CB:C1:8F:DD:58:86:84:62:4F:F1:ED:6A:C8:67:6B:E3:D0
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 019D197F8653E91D4669979A034BA5AF965D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number: 1899
Signing time: Mon 23 Mar 2026 07:01:21 +0000
Manifest this update: Mon 23 Mar 2026 07:01:21 +0000
Manifest next update: Tue 24 Mar 2026 07:01:21 +0000
Files and hashes: 1: 5-klHAcjuib2_FofmnEGi_QZtBo.roa (hash: MgJJh9H/jXeBJcDEupeJ7ZVHU2fjFH9Kd5p1q+gOEoI=)
2: 5T6muliVBW8fS-8i29q4TfjPKww.roa (hash: tQ3qJO54TZ3cHoxqFq0bCzVKBXdLkF5Xol5mChz7hcM=)
3: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: ucViBytmDZWempdDirdpCOJ5GlqWsPI5j7gVpe5spA8=)
4: 97PhypZv2zu5_OJfA9RRiy48R8g.roa (hash: nIzEQ3BbMqorKqduXDknSy/VPwO4KFszJMOCHH7kKrc=)
5: BPQtimnpXi0to5PJq-7OXT1p6Kg.roa (hash: PekLxUPS5x993K7hJZTV/uCUzvBB2o6IwRQlq0KNRsM=)
6: CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa (hash: moNzp9N4VIrR1YCZjmlUZKwlRY+vy/jtfRsH+cwJ3Is=)
7: CNXwsSf4_4ESwE7Z2tHMnF1t0fI.roa (hash: 6TNmvaRAq+/xsichI9upjJiUhRz6TxFS4gf++ifnQHM=)
8: IvxIJlsusGINjyd7ChcDCT4l6As.roa (hash: zyUdft6I0UPWxcrLYXWhMDg+rjyI8hIE2YfsToF0boc=)
9: L6vphMwfNSBNvr8n1Lq9ZQF5mHU.roa (hash: oMpak7/xlmg2k0Kw2nNqPLD2SFclHDjV9oFak9G23Tk=)
10: Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa (hash: 9RcrwO2pLiY7IHYvOtx1yuwN7Rb/p8KIBf/Lu5xB6g4=)
11: QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa (hash: KB/jxrFMK5gxklmy0S1tcQXJ7NAaIcgucGRfgVGUTL0=)
12: R0firsytRcLjGnGFeTReX_mJsTo.roa (hash: ZELUdwpvqbd6r7PVB+5YZQ5dM2v9c5GEjwWTQyZ4GD8=)
13: RxxmdBVq18xBTu5txmqjYwtEcpU.roa (hash: 0qKhOj0Lxs9GMhc9/OQQ5tOrCNAxGZ18Ve40BFZyMVU=)
14: SLxM4-QYW5vdBWKJN_1LSVWNQI8.roa (hash: 8/pZhmkiqWxucVdJO5fLGO+U3cowY5Hypcm03HRtJoA=)
15: TxxrVfz2u2F0xUEANYlHvUuyeVI.roa (hash: 0f/+WR0UOyysTWAKgWWvmTz3+3MFbGsdfLPYHRKrVL8=)
16: WoXz8LEgluCQDtouES2_1t3quKQ.roa (hash: NFO0YmWMko3tEX8tTvzsRFbcyphfVpUnLsRfBg6EMBw=)
17: X3CxDxdArCain-hHzMiYZG7wqTY.roa (hash: VGIBYhWyA0ZSidIn3eUOjZGeUibcoLiE0Nr0g0fgtac=)
18: aTXtQ3Z2K6TSE6KNWgBdEr8tXhg.roa (hash: ayQ15/oxxjtoAl0GHDbaT1Ld3ENYq1g1s6ZPtUrE0LE=)
19: gkqFAdULp-MSlNo8ljKdmzxNnW8.roa (hash: MUtCuN0kNobHKk0C/st+dCMUhmlNlDPz4Sloa+o6ysc=)
20: p0LQmmHi2QvQtDWz-XJ05OkVyok.roa (hash: jYOqdXjJ1djt3waBPEAnIDBEUk//W+EO/dGl6v18IuQ=)
21: wPrOTLIMFBa9xSPd967CbqnruOM.roa (hash: V3ywu5M8hUS56cV276Qc7nvD0rqUdNAgudSMZjJuzUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:7f:86:53:e9:1d:46:69:97:9a:03:4b:a5:af:96:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Mar 23 07:01:21 2026 GMT
Not After : Mar 24 07:01:21 2026 GMT
Subject: CN=0d884ccbc18fdd588684624ff1ed6ac8676be3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:89:d3:13:61:79:ac:f3:22:e9:11:26:ab:
9a:e4:5d:99:64:a5:62:df:27:c0:f5:90:41:c5:dd:
16:24:07:8d:da:07:e1:0d:9d:46:89:6a:97:25:9f:
f1:b0:2b:64:69:20:9a:cc:22:39:e6:83:45:7f:2d:
0d:96:58:ad:d9:d6:d1:66:3e:c0:e7:60:3b:6f:4b:
5b:d8:be:02:08:37:1a:a3:c6:d1:9f:f5:a7:60:4b:
c9:03:0c:0f:bf:bb:fe:13:82:61:1f:ad:65:5f:8d:
87:28:90:6d:96:00:4b:80:ed:49:f0:d6:f2:10:ea:
79:80:57:1d:26:09:29:29:91:ac:6f:4c:e0:09:3f:
71:e0:32:1f:76:61:4e:99:04:6e:88:bf:93:d8:11:
03:c2:31:66:34:86:6d:e8:6c:b4:60:6f:23:a3:43:
27:66:b9:6b:37:17:84:ff:f0:e2:db:8f:de:ee:d0:
55:13:f1:8c:34:00:c0:2f:06:b7:22:27:33:70:2c:
8e:82:ab:10:65:2e:a7:e9:ef:b5:be:50:19:76:09:
1d:48:b1:86:14:7c:82:d9:91:9f:7b:c2:cd:76:97:
2f:b8:1c:6c:6d:1d:7e:c2:bd:8b:f6:de:74:43:70:
05:e4:cc:d6:76:97:a3:8e:11:53:ae:f1:fa:da:c0:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:88:4C:CB:C1:8F:DD:58:86:84:62:4F:F1:ED:6A:C8:67:6B:E3:D0
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ae:bc:0f:81:02:35:18:66:cc:f7:27:0a:fe:79:5b:4c:5a:
b2:21:be:6e:cd:9a:73:af:d8:8e:de:ed:57:c2:8b:39:13:7f:
cd:f1:62:44:22:ec:08:0c:45:6b:d4:7c:98:6c:54:17:80:e5:
38:3e:1a:8a:c7:b1:04:14:95:dd:52:9c:8b:69:7b:4d:0a:56:
db:d8:64:11:74:12:c2:e0:ee:7d:09:fa:c3:33:7c:c6:ee:92:
08:d7:6f:19:2b:32:4b:05:59:44:e5:8a:b7:13:97:ec:3f:9f:
45:2c:28:a0:cc:64:2a:7c:ce:ae:a6:b2:12:8a:f5:81:77:57:
86:23:f8:74:b5:30:cf:73:e5:fd:03:d1:b6:54:be:ae:e7:c1:
3b:e5:74:c6:7b:3a:5d:47:bc:87:99:8f:a3:99:f7:54:e6:1c:
cf:6b:49:c2:fa:43:86:ef:df:9a:df:50:34:ef:a8:5c:3a:b4:
0b:56:4c:c5:66:69:ce:65:b2:89:d2:35:c6:4c:8f:da:a6:79:
99:3c:6a:11:16:4d:50:f0:f8:9b:b7:63:41:ec:e6:1b:cd:1b:
bf:7b:5a:a6:e6:ac:cf:98:d0:df:04:bb:af:30:1c:ef:bd:3d:
e3:5e:3b:68:56:cc:b2:0e:9f:95:1e:90:7e:34:2c:a5:e1:15:
dd:c6:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 15:48:56 2026 by rpki-client