
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json)
Hash identifier: 6HSZM7LMbtWBX/rChqe3ToZs2QNMy3WaH6Kx5eIdQsA=
Subject key identifier: 7F:7C:BF:5F:50:C6:66:1F:F9:E2:FF:39:13:FD:05:0A:EE:3F:61:20
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 019CECDDD8AC28470DD26D9B622D0BD1BC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
Manifest number: 1875
Signing time: Sat 14 Mar 2026 15:01:27 +0000
Manifest this update: Sat 14 Mar 2026 15:01:27 +0000
Manifest next update: Sun 15 Mar 2026 15:01:27 +0000
Files and hashes: 1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=)
2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: BiJL9ixro5jfzwmr3RZLaOYbksv1s6G/qe/Fr4LOt2c=)
3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=)
4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=)
5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=)
6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=)
7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=)
8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=)
9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=)
10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=)
11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=)
12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=)
13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=)
14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=)
15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=)
16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=)
17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=)
18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=)
19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:dd:d8:ac:28:47:0d:d2:6d:9b:62:2d:0b:d1:bc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Mar 14 15:01:27 2026 GMT
Not After : Mar 15 15:01:27 2026 GMT
Subject: CN=7f7cbf5f50c6661ff9e2ff3913fd050aee3f6120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3c:f9:19:e6:c9:14:73:da:fb:69:99:07:fd:
9f:b8:be:fb:9b:55:73:f8:c0:49:85:31:19:7a:4a:
10:65:3a:46:6a:6f:6b:db:12:f0:7d:2e:31:b5:e1:
08:a6:ba:62:e9:4d:b1:a2:59:c0:ea:94:df:84:62:
ea:f6:a6:3b:9d:35:f6:10:06:2c:ae:f5:6c:78:00:
5d:7e:4a:22:a5:53:24:93:f6:4b:37:40:64:d9:d8:
80:18:07:3d:9a:82:87:cd:cc:ad:08:38:8f:69:64:
9a:e4:d6:d1:43:be:68:33:07:c5:0c:47:6c:54:20:
04:58:a9:df:0b:80:0b:71:66:f2:c2:d9:bb:49:77:
b4:39:a4:eb:d0:b3:b8:e6:83:5f:79:72:a4:df:45:
fb:4e:03:9c:ce:a4:bb:66:d1:86:7e:b3:a6:27:b0:
d4:96:dc:85:a4:84:47:54:83:eb:10:5e:4f:44:5c:
1c:ef:3d:94:c2:72:52:9b:72:fa:f6:79:4f:d8:e5:
82:87:59:ce:2b:e4:63:16:99:77:85:2f:c9:92:43:
d8:5b:0b:e7:44:b5:5c:37:72:65:86:4a:bc:9d:44:
80:2f:4e:2c:15:13:f5:79:3c:c7:d2:e2:55:ea:a9:
fb:a1:b3:f5:08:e9:00:c0:cd:0d:32:1b:6b:01:bf:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7C:BF:5F:50:C6:66:1F:F9:E2:FF:39:13:FD:05:0A:EE:3F:61:20
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4d:e5:99:6d:74:41:d3:a9:16:da:ad:c6:94:c5:91:e7:30:
d0:3b:63:34:f9:e0:2d:99:47:0e:c2:27:09:9b:22:d0:b7:14:
94:1e:10:fc:51:88:f4:46:d2:5a:d3:08:66:8b:ce:96:8a:ee:
17:d4:b6:c9:72:a6:a4:ec:62:a2:86:8e:ca:37:52:e2:8d:75:
ec:2f:0c:31:27:d7:22:42:da:1d:08:d4:d1:97:e5:38:67:54:
44:1e:ab:4c:26:92:36:1d:76:f1:d7:07:49:8c:e7:ad:12:f2:
0b:42:b8:7f:ac:46:aa:8f:ab:c3:9c:40:e5:ae:db:b5:25:d3:
d5:59:7a:d9:2d:fe:9b:79:9f:56:5a:61:ff:bd:59:2e:62:e8:
4c:f8:41:d8:4f:77:e1:81:e6:3a:e2:3c:9f:3d:3c:1b:00:51:
e1:88:1a:2a:6b:e0:c9:23:7f:bf:69:0e:bd:ea:08:91:b7:81:
b1:33:b7:31:a7:db:85:d7:13:81:1f:49:bf:9d:13:c6:34:3a:
6c:bf:80:01:63:f2:13:2f:7d:72:66:87:a2:d5:71:e2:44:38:
d2:9b:b4:05:28:19:5a:4a:48:b4:e8:b5:97:a0:7b:3c:df:85:
b1:ef:d7:ec:2d:9a:42:1d:1b:a0:3a:d3:f4:44:45:93:0e:55:
61:de:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:58:58 2026 by rpki-client