
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier: 33S6VKRvXEZ+OIoKUhBRo/rpI9YC/IpFawxhu2IxLC0=
Subject key identifier: 81:24:26:B1:20:6C:33:82:D6:D0:D1:BF:9B:C4:A7:A2:75:3A:C3:78
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 019CBF60222C4BBB4601661FE9BC83C7F080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number: 114B
Signing time: Thu 05 Mar 2026 19:01:14 +0000
Manifest this update: Thu 05 Mar 2026 19:01:14 +0000
Manifest next update: Fri 06 Mar 2026 19:01:14 +0000
Files and hashes: 1: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=)
2: AHDv73qMQL9wbDKFTRsjL6r00oQ.roa (hash: AVkBVXP0K0ecnq2H74GPC3d5N3jhZ95iI/h0cjx0eMI=)
3: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: 1TYc0O2wm0GPpxAAn1e+ZMwpe0MvMD0AmJnlWhb4goE=)
4: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=)
5: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=)
6: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=)
7: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=)
8: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=)
9: MDkr1mPINhLWlbE7zVQDBRRtERo.roa (hash: rKzUC6Ga9NHbbH+PBR/UbbD9eWJNxuXrWwtzpzRiJgk=)
10: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=)
11: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=)
12: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=)
13: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=)
14: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=)
15: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=)
16: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=)
17: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=)
18: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=)
19: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=)
20: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=)
21: qABofJud5u1thFUHFuMgR1s31kI.roa (hash: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=)
22: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=)
23: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=)
24: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=)
25: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (hash: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU=)
26: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:60:22:2c:4b:bb:46:01:66:1f:e9:bc:83:c7:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Mar 5 19:01:14 2026 GMT
Not After : Mar 6 19:01:14 2026 GMT
Subject: CN=812426b1206c3382d6d0d1bf9bc4a7a2753ac378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:e8:60:b5:7a:b9:37:7a:6f:a7:92:93:33:
d1:eb:5d:0b:8d:2a:d5:05:37:8f:a6:8d:30:3d:19:
e5:a9:b8:e9:ab:3a:a1:51:aa:c1:d2:1e:e8:30:23:
e0:67:8c:a5:f8:0f:09:81:89:41:04:60:6f:c0:7c:
84:af:c6:f4:cb:89:0d:51:a5:4c:c6:f4:92:14:fa:
f1:ab:f3:40:35:e4:1f:12:9f:1d:24:55:20:0f:b1:
d6:ff:f7:23:fa:ba:36:db:07:ba:77:48:99:7b:0f:
e7:7a:ac:20:43:e5:14:9f:68:19:28:b6:4a:e3:13:
b9:19:47:ff:17:77:3b:21:61:f5:61:4d:17:fe:cc:
01:28:85:88:f3:3b:c0:86:cf:4e:fc:a8:8a:ee:71:
b2:54:b3:fa:d2:f4:4b:d1:0c:f7:1a:9e:28:d0:d0:
7e:14:76:ba:b8:7e:50:37:a4:94:3a:47:d7:bf:0b:
54:c3:18:a6:86:8c:6d:90:c1:d1:25:08:d6:7b:4e:
6d:f5:65:18:ac:cc:27:17:9d:d2:ee:ad:1a:9e:48:
50:32:46:4e:19:aa:10:d6:db:58:3a:e6:f2:9f:79:
2c:5f:63:55:27:dc:ed:aa:88:4e:81:0b:da:36:11:
f3:08:0e:3d:da:a6:65:f2:c2:f0:cd:67:64:a8:2b:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:24:26:B1:20:6C:33:82:D6:D0:D1:BF:9B:C4:A7:A2:75:3A:C3:78
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b9:13:c1:75:0f:15:00:fe:63:05:d5:aa:de:2b:f7:8a:ec:
12:e5:7c:b2:64:b3:3b:96:d5:88:fb:b8:1f:04:34:04:dc:d1:
2d:ce:07:0e:f2:24:06:1c:18:9a:46:41:91:87:20:5a:db:9e:
98:7f:8f:51:86:ae:c4:80:23:4a:f9:0d:a0:92:54:90:e5:1a:
0b:7f:36:82:3d:a8:54:88:e0:ed:49:d2:70:f1:f6:9e:8a:61:
6c:ec:94:9a:51:c5:1e:24:53:eb:0d:68:1b:bf:8b:72:d0:7c:
a4:da:b0:a0:2f:97:d1:cc:ff:59:89:14:ae:d0:42:7e:4e:06:
80:52:99:18:56:42:80:4b:e9:d9:cd:cc:02:b7:20:15:37:f9:
cc:51:62:27:b9:8e:08:cc:4c:69:7a:3d:5e:42:8e:66:5b:98:
bc:fa:52:d2:5d:84:69:24:27:9f:b8:11:5c:84:eb:ca:04:1d:
74:7f:0f:98:7f:73:d1:73:a1:b9:85:02:2f:d8:d8:66:80:37:
fb:55:dc:67:37:ab:2b:04:2b:c0:fd:60:15:18:a6:83:ea:76:
5a:7e:d3:2e:d1:a5:c7:06:ab:eb:70:a5:68:81:0f:e9:18:89:
7f:9b:0b:70:f2:09:0e:c8:c3:fc:15:20:05:be:9d:62:99:fd:
e8:13:b5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:04:52 2026 by rpki-client