
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier: jotDBDrxAvFbHSVPM80wi58trD/p+etz21Cl7SQmOMI=
Subject key identifier: E6:6C:0A:62:B4:D5:CC:7F:C9:52:37:DA:AA:42:76:10:74:B8:1A:7C
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 01A08A1F12DBC3051E2B266E697C3AD4E973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number: 1888
Signing time: Thu 10 Sep 2026 07:01:27 +0000
Manifest this update: Thu 10 Sep 2026 07:01:27 +0000
Manifest next update: Fri 11 Sep 2026 07:01:27 +0000
Files and hashes: 1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=)
2: 9D8zRooL7GIRssyQDERj2pjLTEg.roa (hash: ou/519X40RGEgsg6xFxzjP5mJ508RHz7Yy+VOx34VIY=)
3: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=)
4: FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa (hash: tg987J0i644Z+rDUbSmguymeU+9jrpbhpfN7TJ7twhQ=)
5: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=)
6: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: WySMirMxKwMUujN4U5IOM72MqxtobXVFN9Ggr8Yc8UM=)
7: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=)
8: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (hash: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=)
9: Nekk3PxF8fO-rhzaegHvfM_t41w.roa (hash: A1QX31c5i0IexwLkYJODSCPQogKNlG8IRZDo0disb/U=)
10: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=)
11: ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa (hash: rjgdc1W6vPpG3uPNkDBN/qtt12z0N51cOglFEFDyoWY=)
12: Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa (hash: 5x3VDZkeU6jGG2nc7DGajOTETO/SJdxa0o8peRVLzVg=)
13: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=)
14: StqYfznXE-QPiA-TOmLGA4FrAS8.roa (hash: h5TKEuBn2q4c0zbHABA+TvU5nsvIwHYwDNRGaJto+e8=)
15: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=)
16: WBw7gw6osmHy0IqvZHLM8HMfKls.roa (hash: 9skt4Vx5fYnNFz8d3wonj2F4Wujetk0O7qCLQaqmEmE=)
17: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=)
18: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=)
19: aOll2yIzGlTioL_5KcotM1hRg6I.roa (hash: WjZYWFwSah/T1ngfGN/4LLm1yrnATZDAMq581306uVg=)
20: aa15nZfX27ubGWEeb2X5ayBEBXE.roa (hash: w+5MiVWAe1cAGq7vjX3zG5riF68ch5od/IXze+J4XLM=)
21: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=)
22: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=)
23: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=)
24: jIiWE2zJZX5pFl0vy1PL64bE8T0.roa (hash: 2YBMClvraF+AFYCDBE549nteIWo0rkRBKQCVhkycQQk=)
25: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=)
26: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (hash: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=)
27: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=)
28: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=)
29: oKhpIH_BWd5Noqx6eV2DySEcGb0.roa (hash: N7FlWOqyJoex6ZmwsucsTTYLs5nNX4sZKRbn/6c/tug=)
30: pbnN9srlyaf0BgeZnbG7vJQQcDg.roa (hash: W564THz4iqZL14hlu/uRhAEJ9fbzZM3yuaKczKwNTLE=)
31: quUFSSqLC17PWuHw4n9doB2Ldgw.roa (hash: c+mlnrjBfuvxfpOQWD6Qk8yh8Z9jsfAhLNTYgM4TAic=)
32: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=)
33: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=)
34: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=)
35: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=)
36: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=)
37: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=)
38: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:12:db:c3:05:1e:2b:26:6e:69:7c:3a:d4:e9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Sep 10 07:01:27 2026 GMT
Not After : Sep 11 07:01:27 2026 GMT
Subject: CN=e66c0a62b4d5cc7fc95237daaa42761074b81a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8b:c2:9e:40:3c:d7:57:f5:44:fc:ae:a3:02:
e7:e7:e7:e3:a7:f4:73:37:cd:77:3a:92:15:83:3c:
95:4e:8f:64:3c:2e:09:e4:64:fb:8e:b8:5f:5f:b4:
74:26:de:e8:47:54:09:2a:30:68:69:2d:76:a6:69:
f9:8d:f8:bf:d2:6c:3a:b6:f9:44:01:d3:b5:2d:42:
d0:dc:8b:cc:58:2d:6a:eb:c1:ab:fe:cb:fe:1e:10:
44:84:e9:92:c5:34:15:09:30:e9:f6:d6:d4:6c:45:
52:37:7a:b1:f9:0b:cc:ac:79:36:c0:5b:d5:6b:44:
9f:c6:e7:1a:ce:a2:4a:76:0f:a7:95:ef:45:b2:eb:
39:15:e6:fd:f6:55:cd:5b:e0:5c:cb:78:52:9a:f7:
19:ce:73:79:2d:65:76:c8:c3:68:1c:c7:02:0c:fb:
4d:9b:cf:0c:d7:dd:e7:60:d2:7d:f5:81:12:72:be:
9a:c5:e2:03:82:fc:57:4c:79:19:43:c4:6d:8d:23:
2a:74:dd:38:79:b3:0e:e2:bb:61:90:c1:bd:fc:cd:
02:4c:22:a9:18:ea:3f:3e:fd:46:1b:aa:cd:a0:1e:
a3:52:da:a5:d9:4f:0e:98:dd:64:b9:06:69:f6:94:
14:6c:35:a6:46:0c:43:08:3a:ce:b8:ed:58:a1:57:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6C:0A:62:B4:D5:CC:7F:C9:52:37:DA:AA:42:76:10:74:B8:1A:7C
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d8:8c:42:f6:9e:75:ca:a8:28:47:36:4b:6b:59:63:a9:1a:
31:24:60:6b:88:0a:32:90:53:ff:84:c5:0f:ba:30:76:37:b1:
e0:47:7e:4e:06:5b:e3:9e:ae:3f:55:e9:c3:51:fe:2e:a6:5a:
92:f3:09:1b:5c:97:4b:ec:3f:96:6d:88:62:78:84:59:1c:a2:
67:c8:7b:c4:10:1d:a5:4e:c2:87:31:7d:58:c9:61:ee:f5:3d:
74:f0:d5:d4:e3:b0:22:ce:a6:aa:3a:46:d6:63:fc:e4:ee:4d:
5c:e1:29:8a:10:93:9d:23:47:71:bf:1e:77:1c:c4:ad:fd:cd:
de:a9:f4:cb:dc:20:d2:12:f1:ca:c0:c7:ca:aa:c9:e2:7a:2b:
8d:d0:95:6a:35:df:ce:0b:dc:46:62:96:7e:82:3c:47:7a:37:
7c:de:ba:f1:5d:aa:79:c0:ed:34:9d:31:46:07:d8:59:4d:f0:
7d:2e:45:47:6e:3e:fd:fe:2e:d8:e5:c6:22:13:42:90:bb:92:
12:03:1b:58:57:60:c0:75:a1:01:ef:f0:3b:14:16:e9:6c:bd:
e9:0c:8f:5d:94:f5:ff:a9:b4:26:8b:d2:61:9d:2d:fb:1e:9a:
dd:5f:06:17:8f:5c:89:5b:cb:24:63:c0:c4:7a:4f:d9:09:6a:
80:e2:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:46:00 2026 by rpki-client