
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier: C/4yFytZdVLkmboe0Fd6V4YEz002c+TISGbB1JlAHYk=
Subject key identifier: 07:E0:0E:91:EA:59:9B:25:79:B6:E8:91:77:1E:0E:99:5F:DD:F2:B2
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 019CEF02470F8E5E91852C7516F25811A9C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number: 1084
Signing time: Sun 15 Mar 2026 01:00:29 +0000
Manifest this update: Sun 15 Mar 2026 01:00:29 +0000
Manifest next update: Mon 16 Mar 2026 01:00:29 +0000
Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=)
2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: VizoBhV85bpn3IeiMAqWlOkk4XckBhYdwFfbfz6823s=)
3: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=)
4: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=)
5: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=)
6: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=)
7: QojlrQ9a8Sf-3OscCFSF9lKZeL0.roa (hash: 5zZB8tcLmgJvpKxRcJyw89w0k3VioDwJSjfpHcGceEg=)
8: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=)
9: jFHWQVied9oZQfm4vhIvSC4eiV0.roa (hash: dr0KfgCKcAC1kV4SsWObX5dDQnEh0pKNGg0bXRatP4I=)
10: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ef:02:47:0f:8e:5e:91:85:2c:75:16:f2:58:11:a9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Mar 15 01:00:29 2026 GMT
Not After : Mar 16 01:00:29 2026 GMT
Subject: CN=07e00e91ea599b2579b6e891771e0e995fddf2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:17:ee:7c:ae:61:8a:97:be:15:33:18:4a:
e7:c4:17:82:e4:6e:28:49:e2:5f:dc:03:07:f9:c4:
46:f5:90:2c:83:41:2a:4d:79:0d:b9:06:71:58:3f:
74:f0:3f:ed:d2:10:fc:94:ca:c9:1e:a5:bb:8e:01:
38:e8:e0:2a:9c:c6:b3:2d:4b:f4:28:a0:eb:06:35:
e7:e3:92:f0:41:e4:f7:3c:7f:53:5f:47:6e:b7:2d:
74:a1:64:21:0f:45:8b:aa:02:85:8e:15:41:8d:45:
26:16:60:5a:bd:da:31:20:7a:30:12:dc:c5:0e:be:
fb:59:9a:7d:27:c5:11:e9:4b:e1:d4:17:16:36:42:
7d:8b:49:50:90:22:a7:66:be:af:11:1a:cf:9b:15:
c7:82:5f:54:4b:28:40:4c:40:06:dc:84:3c:13:e1:
25:ee:11:77:c0:c5:f6:87:91:ff:1e:27:9e:ce:f6:
93:4e:a7:62:af:bc:d6:8b:d2:72:fb:5f:c1:78:1b:
0a:02:0c:79:20:b2:88:fd:5b:d6:5c:25:a0:c3:d0:
7e:66:93:08:f8:16:cf:ec:9e:50:4f:2b:83:16:aa:
2a:34:c2:ae:92:0b:10:4c:50:d7:76:40:86:90:12:
75:2d:f7:87:45:bd:a3:c9:95:19:0b:3a:79:2d:4d:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E0:0E:91:EA:59:9B:25:79:B6:E8:91:77:1E:0E:99:5F:DD:F2:B2
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:44:07:37:40:97:e4:4c:be:e8:4f:58:4c:b6:9f:9f:74:1d:
73:be:45:30:15:2a:16:7b:f2:f1:b8:55:4c:6b:db:d4:a1:50:
a5:6d:7b:5c:b3:66:84:62:13:a1:e6:ed:47:55:6a:26:26:90:
16:04:e5:6c:ab:fb:f3:7e:a8:c0:96:31:09:af:f4:de:4e:a0:
84:db:a6:98:45:ef:7d:97:bf:17:20:7b:d0:e0:5c:0f:bf:df:
81:39:ad:23:d8:77:bd:a3:b0:9d:ea:b2:4b:e7:69:7b:0a:9c:
6f:64:25:0c:de:d6:1d:90:58:5d:8a:2d:15:de:8a:87:a3:e8:
73:2e:57:6b:f0:1b:cd:23:fa:5d:61:79:45:af:11:ee:7d:9c:
89:95:7e:ed:10:a6:f6:6d:c9:39:c3:30:51:c3:7d:b0:44:a5:
7d:30:77:13:26:1f:11:a2:d0:13:02:f7:8e:ca:db:55:c9:f7:
7f:bb:a0:6c:86:dd:09:41:37:99:d4:d8:8f:ab:99:b2:d9:da:
4b:01:cc:57:87:ae:64:55:69:6e:46:d7:e4:4f:83:f4:7e:3b:
43:2e:09:d8:52:30:01:b3:0e:59:2c:6c:77:ad:89:6b:6d:be:
c3:dc:7f:84:21:1b:19:16:39:53:3d:cb:0e:cb:ce:f3:00:1c:
22:28:26:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzvAkcPjl6RhSx1FvJYEanDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1
ZWI1NmYwHhcNMjYwMzE1MDEwMDI5WhcNMjYwMzE2MDEwMDI5WjAzMTEwLwYDVQQD
EygwN2UwMGU5MWVhNTk5YjI1NzliNmU4OTE3NzFlMGU5OTVmZGRmMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdkX7nyuYYqXvhUzGErnxBeC5G4o
SeJf3AMH+cRG9ZAsg0EqTXkNuQZxWD908D/t0hD8lMrJHqW7jgE46OAqnMazLUv0
KKDrBjXn45LwQeT3PH9TX0duty10oWQhD0WLqgKFjhVBjUUmFmBavdoxIHowEtzF
Dr77WZp9J8UR6Uvh1BcWNkJ9i0lQkCKnZr6vERrPmxXHgl9USyhATEAG3IQ8E+El
7hF3wMX2h5H/HieezvaTTqdir7zWi9Jy+1/BeBsKAgx5ILKI/VvWXCWgw9B+ZpMI
+BbP7J5QTyuDFqoqNMKukgsQTFDXdkCGkBJ1LfeHRb2jyZUZCzp5LU1MhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfgDpHqWZslebbokXceDplf3fKyMB8GA1UdIwQY
MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt
MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy
LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0QHN0CX
5Ey+6E9YTLafn3Qdc75FMBUqFnvy8bhVTGvb1KFQpW17XLNmhGIToebtR1VqJiaQ
FgTlbKv7836owJYxCa/03k6ghNummEXvfZe/FyB70OBcD7/fgTmtI9h3vaOwneqy
S+dpewqcb2QlDN7WHZBYXYotFd6Kh6Pocy5Xa/AbzSP6XWF5Ra8R7n2ciZV+7RCm
9m3JOcMwUcN9sESlfTB3EyYfEaLQEwL3jsrbVcn3f7ugbIbdCUE3mdTYj6uZstna
SwHMV4euZFVpbkbX5E+D9H47Qy4J2FIwAbMOWSxsd62Ja22+w9x/hCEbGRY5Uz3L
DsvO8wAcIigmmQ==
-----END CERTIFICATE-----
Generated at Sun Mar 15 10:23:57 2026 by rpki-client