
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: P1H55EqOj67ZnFtK1+YpB+0A4XSkNfPQ8g4XaimKxG4=
Subject key identifier: 97:90:91:87:94:A6:4F:D5:9C:B1:61:9A:04:D0:B2:0B:0A:1D:52:F9
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019CA079FE5A9D0254E30F2D75F8673E11B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 1543
Signing time: Fri 27 Feb 2026 19:01:15 +0000
Manifest this update: Fri 27 Feb 2026 19:01:15 +0000
Manifest next update: Sat 28 Feb 2026 19:01:15 +0000
Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
5: 5lQ9rixfmqRXxii30JKkmR03sr8.roa (hash: iF1NyTDi0aWK3rGC4FTsYT+Tf9o3Dfjcwz99TIaRhHY=)
6: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
7: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
8: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
9: E2F8QJnesLz_AJ_idudS8beXQtA.roa (hash: Du6ux9WA5KEGcJVYYMPZ9Mo1WXuEbp8iOUzzcljxT9A=)
10: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
11: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
12: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
13: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
14: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: MGcWEWpphaW6iQJec0UsJ8Z8aWKOHhHdsWJxwfUq93U=)
15: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
16: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
17: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
18: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
19: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
20: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
21: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
22: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
23: lX5sl-Bs9YPPelSQB3cgwK9Lslw.roa (hash: mnJpBrQabQ5UZ897yJplacc4MCQhCl2/8KWX6EqeD4k=)
24: niUr6FHPmgY6CtuAz4gWdWka0MA.roa (hash: IuoDMTxSe/qrJgdwIn4nlwn1wmvo4BWmMWaqX2zRdbA=)
25: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
26: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
27: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
28: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Feb 2026 16:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:79:fe:5a:9d:02:54:e3:0f:2d:75:f8:67:3e:11:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Feb 27 19:01:15 2026 GMT
Not After : Feb 28 19:01:15 2026 GMT
Subject: CN=9790918794a64fd59cb1619a04d0b20b0a1d52f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:7c:33:dd:19:95:50:6c:df:0f:39:c9:0e:
56:c4:cb:5e:85:3c:54:12:61:9d:94:c2:8a:0b:d1:
eb:40:70:0c:11:32:15:4b:f1:ae:83:30:35:94:c9:
3a:dd:03:2a:87:ae:7f:83:e4:cc:4e:c2:66:e4:b9:
c3:7c:3f:35:fd:32:17:6d:18:ad:8d:75:41:a0:3b:
73:ad:64:21:d4:53:c8:9a:cc:28:5f:a9:a0:53:c5:
bd:c2:2d:64:ac:ce:6b:13:c6:52:7d:d0:cd:2d:72:
9e:62:22:fc:4f:f2:14:06:04:66:6b:5f:ea:2b:08:
e4:09:77:ee:46:98:40:d9:c6:88:9a:06:6a:f3:32:
47:76:50:52:ae:7c:50:de:e6:cf:04:a3:34:4d:e4:
c0:a4:26:b8:d8:b1:5f:65:f6:4d:bf:10:4c:2d:83:
4f:a4:ef:f2:a8:a1:1f:37:33:ac:e1:5c:fe:66:bc:
ef:87:37:d9:42:ec:e6:1f:77:4b:2a:81:d7:7a:2d:
d3:ad:d7:3c:73:d7:02:1b:f2:95:f5:ea:a2:90:ec:
2e:4a:ef:4f:c7:d9:29:11:1b:02:b8:ec:f2:25:75:
17:90:22:9c:cd:44:1e:cb:d4:aa:d9:57:b2:a5:ad:
9c:b2:d1:15:8b:e7:ff:12:02:bc:3e:89:da:94:9d:
8f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:90:91:87:94:A6:4F:D5:9C:B1:61:9A:04:D0:B2:0B:0A:1D:52:F9
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b9:d3:c4:30:9b:9e:72:0d:3a:8c:24:75:b8:98:3e:5e:6d:
47:4f:cb:09:a9:1f:27:76:ee:91:05:08:7c:cb:e1:1f:5b:5d:
72:99:03:72:92:1b:cf:69:17:43:bc:ed:03:d4:f0:d7:d8:59:
a0:02:c0:27:6d:ca:12:65:85:15:43:5c:a2:53:79:e1:08:4e:
64:0f:5c:f9:2b:a6:f1:a4:b2:c5:2e:87:f9:c1:cf:41:7d:42:
05:26:29:02:1c:2c:66:de:69:43:38:1d:6e:7b:92:b9:b2:1e:
f7:4b:cb:e6:64:51:ab:49:22:2b:02:73:67:c1:a4:f9:33:04:
64:3d:00:64:d5:de:c4:dd:f9:17:e5:d4:b7:39:a3:05:c7:09:
72:6a:2b:1b:cf:fc:b6:e2:0c:5e:53:0c:10:2c:51:d6:9d:bc:
9f:a9:71:7a:14:bc:75:ad:94:52:24:36:52:b5:a8:ce:b5:ba:
41:66:66:46:85:75:4f:c8:26:25:b9:a4:c8:f6:51:f6:ca:9a:
73:48:18:09:38:a7:6b:12:ca:53:df:4f:2a:45:b6:c7:c1:ed:
a6:4c:61:de:5c:4d:a2:98:d6:70:86:cc:69:86:37:d2:04:63:
b6:ba:16:45:0a:65:c0:8a:4d:6b:99:8a:f6:d0:5f:18:1b:17:
1a:91:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 01:46:06 2026 by rpki-client