
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json)
Hash identifier: OBnXHueqPdVA5ntLUfU1gLQ6ItWFYPY+ZSQ99JVM7JY=
Subject key identifier: 4C:6E:19:DB:B4:04:12:DE:B3:3C:AA:66:B0:8A:7F:03:01:53:54:39
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 019CF94F51C5F5CC5278CBBD560385A26005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
Manifest number: 188C
Signing time: Tue 17 Mar 2026 01:00:50 +0000
Manifest this update: Tue 17 Mar 2026 01:00:50 +0000
Manifest next update: Wed 18 Mar 2026 01:00:50 +0000
Files and hashes: 1: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=)
2: 5xaOtvdRRcRbWJ7RO2zXZTBbzHo.roa (hash: jVjnXKJCmaM69ihXNF4Fvp6wlNMh49T6+g/No1R59Xw=)
3: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=)
4: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=)
5: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=)
6: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: 8Q/HPJPKq75C1IlEFMMD1FJnDMKVTrRbbbwv9lTBq4Q=)
7: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=)
8: giCv_eoabdDGNQ76ze62UyFFjv8.roa (hash: CGWpYFajJaXhrm0XFaoEyMaeJXprNddmqt1FMrWwQoA=)
9: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=)
10: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=)
11: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=)
12: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f9:4f:51:c5:f5:cc:52:78:cb:bd:56:03:85:a2:60:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Mar 17 01:00:50 2026 GMT
Not After : Mar 18 01:00:50 2026 GMT
Subject: CN=4c6e19dbb40412deb33caa66b08a7f0301535439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:b9:49:9a:35:30:da:90:41:7b:81:7c:c9:
5e:55:5e:a1:8a:91:65:5a:46:2c:3a:c2:72:9c:54:
c6:47:69:4f:fa:1d:82:eb:ba:cb:e4:57:56:ea:ff:
40:97:38:e3:d5:a4:54:79:67:a1:c1:0c:20:7d:f3:
8e:8a:8a:3c:92:2e:0a:91:b3:05:17:4d:f1:4d:2c:
7b:be:ba:76:c7:cb:41:22:3f:7d:8c:01:67:d1:8c:
8a:47:df:5f:24:25:fe:5e:08:1c:30:28:40:1e:65:
00:ca:74:e4:43:c5:c9:0d:40:e7:38:80:64:cb:a3:
3f:32:ad:3d:0f:b9:35:77:2b:e4:01:a4:17:84:b4:
79:03:81:4e:13:7d:a4:72:be:b1:dd:ef:f3:2e:9e:
f2:fb:2b:6e:8a:88:db:1b:9c:2a:f3:7d:72:32:b1:
78:99:73:80:1e:85:48:5d:e8:fc:9c:30:17:59:0d:
aa:fd:a2:7b:06:a0:a5:43:9e:fd:03:2d:84:21:4d:
80:c6:2d:4d:6d:eb:5f:aa:e4:8f:a6:f3:74:93:d6:
28:75:6f:4f:53:32:c8:e6:5b:44:af:0a:be:d0:2a:
5c:fb:9d:28:67:71:d6:2c:fd:e5:22:49:a4:fc:8e:
89:b5:a2:ad:69:0e:a2:f1:57:cc:47:f6:b9:c9:0a:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6E:19:DB:B4:04:12:DE:B3:3C:AA:66:B0:8A:7F:03:01:53:54:39
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:91:6a:39:8f:93:55:6f:4b:44:01:d2:6b:f0:d8:51:54:fd:
43:4b:03:de:31:6b:b0:19:c0:5d:1e:47:5e:a2:c4:e1:f1:7c:
6a:2a:1e:d0:79:3e:e8:5c:7a:fe:58:90:e1:e2:4a:b2:f1:33:
82:e0:2a:dc:b6:ef:9f:13:0d:69:df:ce:c3:86:37:70:ec:2a:
fa:6d:69:e3:c0:6b:fa:e4:a2:e8:24:bd:fa:4c:d2:b9:df:b8:
09:37:3e:5b:ee:fa:a9:31:07:99:08:fd:fe:32:76:09:1b:62:
94:06:73:95:4f:59:54:47:08:2d:92:99:36:1c:f0:96:17:cc:
48:5a:b7:36:d1:70:08:50:f1:3b:ad:03:30:4c:6a:2d:7a:ec:
50:8d:0c:d4:65:c9:7d:6e:1c:b5:9f:50:57:8c:dc:91:82:a2:
c6:34:7a:9d:80:34:2a:72:71:e6:94:80:49:f6:6e:b4:fd:30:
e5:66:45:db:d5:fe:c7:56:1d:38:3a:68:65:3a:57:69:18:cc:
62:84:1d:fc:8d:8a:0c:39:9b:1e:67:37:cd:ac:47:c0:65:e7:
49:a3:77:0f:4f:72:d0:b3:41:36:9a:2e:d2:0c:2e:98:fd:fb:
30:86:e5:a0:8c:27:34:57:51:57:76:21:40:0a:ec:34:8e:de:
4e:0a:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 06:04:56 2026 by rpki-client