
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier: v6+pm/y3W65tBId/hbEU38ibOWXrFp3BK5BrF1dnUIk=
Subject key identifier: 01:10:4F:42:14:54:20:1E:FE:4E:21:D7:DB:CE:4F:C5:6D:93:23:2E
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 019DDD312A7D7FD2C9204160CE26C3E59C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number: 1100
Signing time: Thu 30 Apr 2026 07:01:20 +0000
Manifest this update: Thu 30 Apr 2026 07:01:20 +0000
Manifest next update: Fri 01 May 2026 07:01:20 +0000
Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=)
2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: QLQ7xk6ql/w8p/vrmO6S36FwnEML7f97qUpxNk60T6o=)
3: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=)
4: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=)
5: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=)
6: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=)
7: QojlrQ9a8Sf-3OscCFSF9lKZeL0.roa (hash: 5zZB8tcLmgJvpKxRcJyw89w0k3VioDwJSjfpHcGceEg=)
8: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=)
9: aI7K851ffCc0tWN8S0U8Ns8VJxg.asa (hash: 822VH5CA3fhDgHZR6uAc8SFbxTllR+Bitc8kZBqFSyY=)
10: jFHWQVied9oZQfm4vhIvSC4eiV0.roa (hash: dr0KfgCKcAC1kV4SsWObX5dDQnEh0pKNGg0bXRatP4I=)
11: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:31:2a:7d:7f:d2:c9:20:41:60:ce:26:c3:e5:9c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Apr 30 07:01:20 2026 GMT
Not After : May 1 07:01:20 2026 GMT
Subject: CN=01104f421454201efe4e21d7dbce4fc56d93232e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:99:3e:6f:05:d3:0e:03:59:52:62:86:d1:
ec:4a:39:50:c0:9a:02:1d:bd:6d:9d:5b:47:d8:e0:
ab:ca:96:6f:e9:ac:63:9f:4f:07:3b:bc:b7:a3:86:
85:1e:39:03:80:88:09:73:fb:2a:fd:00:dd:fc:92:
4f:aa:c6:a4:b4:e9:a1:1c:48:44:80:99:5e:6d:99:
fb:ef:4d:6a:af:ab:60:a7:44:a4:9e:24:6b:cb:7a:
73:a1:93:a9:7d:22:5a:2b:66:b8:43:de:a4:01:14:
5f:f5:f3:84:f8:f4:93:47:b4:79:42:64:da:c2:38:
0c:fa:34:b6:67:0e:ca:fa:bc:c6:44:a3:88:d8:0f:
e2:9e:22:11:52:c2:f7:1d:73:17:cb:a2:f0:c7:91:
8d:71:de:01:a0:b5:04:c4:4c:23:6a:b5:fa:79:c6:
d9:17:ff:12:ad:1b:97:4d:2e:61:8d:fd:60:0a:26:
fb:3b:15:91:a0:d5:b7:3c:8c:62:c8:a9:9a:4f:b6:
5e:43:70:e6:3b:9d:f2:4f:7d:92:81:c7:ff:6c:5a:
00:49:d0:d5:b3:ff:3a:52:06:2c:73:84:6f:73:e2:
a0:e4:08:3d:2f:fb:4f:d8:bf:a9:9c:be:5a:d8:a7:
33:4e:d3:53:1c:1d:21:da:a0:1e:9a:ec:64:70:62:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:10:4F:42:14:54:20:1E:FE:4E:21:D7:DB:CE:4F:C5:6D:93:23:2E
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1c:e0:21:70:98:e4:11:4a:86:e7:7b:df:6d:cf:b0:87:e7:
87:e3:3b:a6:ce:71:8a:47:02:1d:60:97:e3:31:7b:6f:45:64:
0d:d3:0d:33:d7:93:5f:c4:6e:d1:a3:96:68:53:df:32:c0:39:
c8:10:5b:f9:e3:58:21:e3:60:c7:3b:c4:a4:91:fb:33:61:cb:
54:30:3d:41:2d:db:f3:9d:ed:20:34:36:bf:d1:8a:e5:13:c2:
c4:5c:94:ab:22:9b:1d:c7:7d:06:9c:3d:e3:c9:0a:4b:d4:39:
ba:58:08:88:c2:e0:50:96:9d:39:67:c0:fc:0b:c1:22:3a:0e:
fe:8a:a4:98:9d:b1:37:9c:53:17:6a:83:64:fb:c4:30:ef:ed:
3b:10:d4:a3:50:bc:c6:12:f6:c7:f4:63:4b:a1:8d:e4:e4:83:
3c:a3:33:0f:12:ab:55:40:57:df:e3:9b:10:df:86:ba:25:1b:
2a:b0:97:43:6c:6d:a9:bf:a3:d0:08:92:d8:8e:89:0b:f4:3f:
63:89:9f:f9:69:53:ab:9c:3d:9e:b7:d3:79:19:49:d1:9a:03:
e7:e2:59:5d:b4:88:68:42:76:01:69:2b:0f:4c:23:03:21:eb:
b3:cc:7b:28:ae:07:4d:3b:8b:1d:3b:af:7e:61:fa:af:ec:72:
71:33:d4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:44:35 2026 by rpki-client