
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: 5rzOTVe4LC6PQOOnqwR+exOE6vZInB5WwM4mAgaYei4=
Subject key identifier: FC:EE:23:EF:50:C2:AB:AE:66:86:6C:EF:01:FA:AF:E4:08:9A:03:72
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019CF50487FC0E4AD3A1FE87F5A1378577F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 1570
Signing time: Mon 16 Mar 2026 05:00:40 +0000
Manifest this update: Mon 16 Mar 2026 05:00:40 +0000
Manifest next update: Tue 17 Mar 2026 05:00:40 +0000
Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: v40cwP5Y3u8Rh8rsBA/obu+fIUlKgSCqnpQ62ynXS7Q=)
13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:04:87:fc:0e:4a:d3:a1:fe:87:f5:a1:37:85:77:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 16 05:00:40 2026 GMT
Not After : Mar 17 05:00:40 2026 GMT
Subject: CN=fcee23ef50c2abae66866cef01faafe4089a0372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bc:ec:a9:dc:dc:41:5b:e7:f1:e8:8e:8d:6a:
1c:22:c1:c7:af:88:d4:60:c9:fb:7f:46:8e:e0:54:
fc:11:9d:88:c6:f5:37:31:ca:dc:5c:05:fc:b2:96:
57:bf:e3:66:79:9e:11:1a:36:d7:cd:bf:30:ef:42:
0a:c7:13:70:36:3d:6f:46:a1:7e:d8:be:2d:88:20:
86:11:e7:98:29:d2:23:cc:a0:37:c3:e0:1b:6f:9c:
a9:89:bb:b9:92:29:b6:8f:9a:91:ff:e4:78:d7:05:
a0:c4:90:5a:41:23:62:3c:4a:18:b4:d3:71:12:6d:
6b:e3:24:ce:0f:9a:57:3b:b9:a2:8a:06:f9:7f:e1:
37:a6:a7:10:70:f3:2f:82:25:85:68:71:c6:21:d0:
6c:52:f7:9b:c9:d0:75:fb:26:a3:bd:53:3a:ba:a9:
2c:c9:8e:39:d1:04:73:84:86:00:8b:91:84:f1:65:
af:c1:b3:89:cf:67:22:92:63:be:a7:f7:1a:7f:d2:
f2:66:18:a4:2b:00:0c:0e:06:0b:21:99:ec:ad:7d:
79:65:42:80:35:8a:47:28:88:3c:f4:41:8d:8f:27:
61:76:a9:ea:d8:6d:ff:fb:14:b7:e1:75:06:93:1f:
32:c7:d0:dd:ab:a1:13:88:83:c3:e9:3b:52:2e:00:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EE:23:EF:50:C2:AB:AE:66:86:6C:EF:01:FA:AF:E4:08:9A:03:72
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:be:46:5f:e3:3a:b0:6f:b5:22:ce:48:85:c6:ce:cd:ed:88:
a9:3a:c8:34:80:42:77:5b:24:d1:94:42:19:8c:13:7f:3e:b1:
b2:70:31:98:6d:a9:0a:c7:dc:66:8c:ce:09:87:9b:ec:d4:7c:
0c:7e:c9:a7:82:30:cf:f1:6c:8f:d8:12:d8:19:04:d3:2d:75:
4f:a6:a5:20:41:ba:b7:6f:f4:01:dc:cd:4c:3b:ee:11:b6:08:
6b:53:ac:5f:f7:47:46:3b:0c:b8:eb:17:ef:39:3e:62:b8:5f:
7b:10:c2:9d:7b:08:85:5b:eb:4c:19:4b:36:c7:cf:90:db:bb:
d8:4e:fa:4a:c2:cc:88:8e:22:15:50:f4:ab:fa:1e:62:43:ee:
8b:b0:8a:47:37:ba:4b:dc:d8:b1:32:43:73:44:b9:ea:50:98:
52:b7:8e:c6:10:56:af:8c:e4:b2:3a:ba:58:b9:13:bf:44:53:
67:c1:ed:0e:0f:98:08:73:2b:88:10:5f:28:58:a6:56:7d:0f:
1d:80:51:e3:a0:c0:bd:1d:af:4d:0b:f1:85:98:c4:d1:16:44:
43:79:88:7b:f4:15:b8:46:d2:d9:84:50:10:f2:55:7d:95:31:
3f:77:00:78:e1:c0:85:3b:24:73:b7:8c:9a:e8:72:69:44:ed:
3a:bc:30:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 14:07:33 2026 by rpki-client