
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier: 9J6EgtqdNzP+7B7UAE+XvS/lqFo4EybjZyqy2LU2sKo=
Subject key identifier: F8:0E:E3:EE:D2:B6:97:DB:70:07:5A:55:34:FC:E3:6E:F8:DC:88:2B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019D156B1E8D2FF34A423EB0DBC5CBD9F97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number: 14B0
Signing time: Sun 22 Mar 2026 12:00:34 +0000
Manifest this update: Sun 22 Mar 2026 12:00:34 +0000
Manifest next update: Mon 23 Mar 2026 12:00:34 +0000
Files and hashes: 1: 1-TQR8y4sN17E-SWN89qH6JkTzi8.roa (hash: EEpEfvlkIJ9uyIa2Z+y8sTrbxy3qHHgHKhyB/FRPiLU=)
2: 1PIZRMmdZRgI3Wa4_ZzyHe2oYE0.roa (hash: xdWJ3eNp9bQHQv3VXJLaKMRo3GljyMICAdW2Em7ImoM=)
3: 1xo9uRwazGPExjT15gHLTmOfVnY.roa (hash: alhQ3MkblKkYV6C77axeZ7FdHmqDD77jedDHF6Ew1Xo=)
4: 3-5cXi68-qSm19-cw47NGAFOvm8.roa (hash: XrRH7OLHbaRdmy5YCkOe6Qv7KHjP22uCrnuGqMCfIPc=)
5: 3m3HoU697g1riqEN3srKHe_439M.roa (hash: W+y/B+WZ8ZoxlzmraHW+h6RJwPaH/ClX4IbAIXK6nc4=)
6: 4gNMkZwMrrIrONhxPcj5kIxuYVo.roa (hash: U9OfOqXUmG1mXao3Mm0oiv6aXUXy9X2OeaKROUSRnTs=)
7: AJR3ZjQEw3xNx2603rNxTvz_xuo.roa (hash: ZoHn9/Htdy70PIhm8Yqh59EOA15hHtjIaEGcVEgZgoM=)
8: Ah-yE4HGZ3OirKVOmDu8zAhqZTE.roa (hash: E8yorOIrWxqnVYfsNb5/mw8YbBQarLCAuKuOVYATYpg=)
9: AoBRPXbG5pKu5AAvqVysvx9mLiU.roa (hash: O98GwMh4t71nHe2YCs9Jlw2h9chx4Ly2jC1HdVtt8xs=)
10: AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa (hash: pfhtQVDPYLieoSGMbHBUbh6+wfbqsfaBIqLKNtiv5Zw=)
11: D8eGC5ZKAox_KeaP1UljsqAMI3M.roa (hash: dnNXrXfTnRxGm38nI41pfB3chpp2nN/b3F7qqu7zeoE=)
12: Df8y3BfeVMt5ZLw2xy4aecCtU8A.roa (hash: TwViBdIVRcMSXIqZvXA/oRrkj814XWcrMgErtJhOZ3s=)
13: F0ko9p_dX45_UL03Ktzd4OR6o48.roa (hash: ZDeUYGOkL0wPqfJ87AM7peZBWAW9itv89MZgmrjEPPM=)
14: F7x0aSi2_MLwNaDyYuKaGyc_STQ.roa (hash: LB1+XIiMdPu7FCQlcDxyQXa0f+KM8LZC2AuKanD4uQY=)
15: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: W/dTczxsmHcHH1+saJFsy5Emfw462HnzgQCUXbx0a0g=)
16: GxIHXjt6YycYTUa0XRCVghpAj-k.roa (hash: HhhKZCdKN9/SlwUoWfOdsnSeB0lEPNK2Xjfhma7psx4=)
17: HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa (hash: ntuGjaonHQJAiUd1pWH+WmzWne76FiBOK2IOI8INZRA=)
18: Hl5Go-G4ccQPGOPYKgEFRsvuf9A.roa (hash: 6pJYEI2P0iZxmWhHwVcjPdyivUm5nJWXdkev/Q1q4eA=)
19: IMdJWDmtKEmw0EYVAlWAxTlk_l0.roa (hash: prplIaM3PWEhlFcjnviG8bsFClULprJWrb9nQc2Cyx8=)
20: Ie255GVZaYey7rhYagBRzHE7H3E.roa (hash: or7M3EclkAzV5jogXbEouItR69VJgo+P2gUgbnwZ1yw=)
21: Kb5r6kSdEVYykPlUZTI9ro2Sqi4.roa (hash: 0w7m09MypS3A5iD/C8kuw27OA5mZ8qKaPs6ATFK8K1g=)
22: OgGvgzQ7dezw8MDcZi6buKfdUb8.roa (hash: L8eq3es2reZC3hgT7YVcEjNHAAKE3EkZ31nJkzTykBw=)
23: Qu7RabHhMGXo7Jbd-buXK9tQOQ8.roa (hash: Is2zqCObxzxyRTLurzDszhgJjeBbmDneFFkeCf5fwOY=)
24: QwWuwVkdjBz3wZdsSno-CI2Yiho.roa (hash: xPUqXofpXXjvDkyqf3+rVR/DoKofd8E7P1jA4t/JQ60=)
25: R5tvCe0yrnM86VrHIuRfz1LTt-M.roa (hash: as05R3UNSvXGTL4W9RvrUX7POh9FNO1TNlRUnR2EAUs=)
26: SEeFiz3tStXW9I-MWDoCbj05WJc.roa (hash: 3Uw2Tnxk96aTwjIxD4+rHbo4Gs/ginuifw8bOJqsGy8=)
27: TlswaEkjGyIFhX9xWdZ6EbegUsU.roa (hash: pzxA5lbFhF5KkSZqcy0U7Lfc21E5mQXr6TmkOaIuhGg=)
28: WFoSqC14BpVH5Cb6k1CJ43Kw9To.roa (hash: JnRiMfd9nwg8jtq238kZzEHpNqXF/fwnpcdjfaQN5R0=)
29: XktNhibRI0-PzcETN2KpqeiB7yU.roa (hash: ub5KLahjRSng7WQAYOkZYLUuIHH+I9Wig1Tcpx/w0X0=)
30: _1agZbDchCwDGrkWbgBDrxVhKeg.roa (hash: Y7QBeAqE66w4+zXwDaoCJTaeXdMPw2WR9F/QcsrFnTE=)
31: cu1ZBl9pTXMoUfbvqV36t7lrydc.roa (hash: PmBmp0oA0bJzrpAjf6rJ/tIcErht7TFeRxDbLDdIykE=)
32: g4HRZQNS12RdmXjLw3tZh-1vYgg.roa (hash: V1AVi93zZNpOWRPKGqDa+P6P4ED/8GSMCZzlTGfN1OE=)
33: gcp8JVoaSaFBYMR0Spw7tSBPycE.roa (hash: EXlX7JSGlYTO8jv6fQCuHBvUsxakUkqSBgk4IVvHb5I=)
34: gf12Uu8Akz7O6ocdD8ZlwFJTd4Q.roa (hash: PyCccM/pMp7WT5yknxMOUGo05NWlo29hqiredCgcI0I=)
35: hM0KnSbGL5YIPkBiWFsQifDO0ws.roa (hash: AtisJ2m9ZKIN0vglh5L6u6PQdFGr2dFMzFl70GeYwMU=)
36: hzFa5HcRt_SuJXTYDbBlnXBrlms.roa (hash: HYZRCL8yIsfCy/2+UYnMYcElAtbPqegy+2PrFnMr9pY=)
37: iiFfwSof-Ppnt5Jn1VyYe6ltGao.roa (hash: jReOXsdFrikOH9PjdRpSIjaDDshA4y4Yh1LFRBqkSi4=)
38: k87TUd7a1kuOcniBzYfnlX8a-W4.roa (hash: cKelYB7nuRbmwJFd5LKfRP7a7BoXOJMN2zYhG4umK0g=)
39: kEHCx2KPnbcZJdbzsy7zH4D1Sg4.roa (hash: bcFxF873MZkpZmOV08T6nkOuQgijfNrZUmktwHDfSVw=)
40: l60G9RtGQQ6DxTnY-7uGdBT18E0.roa (hash: 7f3s+Mq0G+/ok4ZNqNp75Xktxw69L98MKsHRcjmDKdA=)
41: n56eK2wrfpQJh1WUgYk7UXNHpf8.roa (hash: QM9hkPMKejFTGopGuAo0TpNNNmH+bNsiSe7g4tXyQLg=)
42: nQiqXkgEvGy0Ub5bywiIxfiK-B8.roa (hash: Xvjwpfsbr0oWLkmoWen3GJer1ZgTzw4kmXxrwYKGkNo=)
43: nRusnjyVlPOUWGzXuB9NY-6sv20.roa (hash: A/FjYrK1itnVBNQUvd3X2LZZ5EuY9pjPUFuiUVmHNl4=)
44: oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa (hash: KwxVldnlFQ7swrf5zJ4tkIkoluJnRIq49ZF/vvuzGEk=)
45: q96A3McnMMNWIVoYFNvAuHtU8JE.roa (hash: ltIrllUkwOoE3ENAiSDBzU5bAkZQAxS7OaSzZdN6v10=)
46: rjitowNgExd3EKmyTmQyMbODtUQ.roa (hash: Tq2i9bTs44ic9Q8EU6ujlmcQqAWYCYHNOE79if/NLMI=)
47: tce9s_lTJFcWc3lfojqUgt8cKSA.roa (hash: hE1WQM2phDZchQwUsmVoGyxt4pfcKaKaEiXcV0znh8I=)
48: vnB0ZCvUzeI9LmFJIT8XX_aRpEY.roa (hash: PwD9rUXHKPRtFfN7AB48A4lXtdzXP/3YnqLj0nuj6qM=)
49: xa9xrZNhkrb1go6zH6OKw-38u0I.roa (hash: 3ps/xuw6rQo0GiTBuWC3tdYfVBGy86dcxldZD3sHZwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:15:6b:1e:8d:2f:f3:4a:42:3e:b0:db:c5:cb:d9:f9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 22 12:00:34 2026 GMT
Not After : Mar 23 12:00:34 2026 GMT
Subject: CN=f80ee3eed2b697db70075a5534fce36ef8dc882b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fa:89:f2:6e:63:09:aa:8a:2d:21:02:70:26:
d5:50:2b:7d:b2:ff:07:97:92:dd:7e:1f:6e:32:92:
2a:bd:fd:84:58:e3:2a:79:5f:5b:1e:ab:71:a0:9d:
f9:c1:5b:cc:58:5e:2e:39:bf:ad:92:d9:91:0a:78:
b2:c5:4a:50:a6:34:9e:36:7c:3f:6e:82:aa:01:84:
b7:5f:3b:93:7a:e8:c1:ac:e0:0b:b0:ce:ca:3c:b1:
aa:87:18:c1:fa:9c:83:05:59:70:c0:ac:e6:8f:9e:
8b:7e:e8:ca:d3:bf:80:41:e9:3c:14:f6:cf:ca:e2:
6f:05:98:b8:3e:17:bc:fe:d1:a5:23:b5:e1:cd:68:
c7:fa:6d:12:e5:19:d6:99:9d:19:fa:fe:ad:0a:f1:
13:33:b5:92:c1:41:c4:2f:00:9a:d5:f1:b2:25:94:
4e:05:15:a8:b1:f4:2b:57:b7:15:09:4e:88:f1:9a:
3f:4b:ba:7d:2c:23:d3:7d:8a:47:8d:82:48:10:84:
92:93:0b:a8:0d:78:f0:b7:47:69:a1:c3:05:9b:dd:
41:b9:ad:9e:a4:6d:f4:35:28:43:5d:14:e5:c9:fc:
60:fb:e1:88:b9:72:ec:d6:bf:55:2f:68:69:d4:a6:
f4:d9:bd:8e:c9:d6:e6:22:d3:f8:ea:89:fc:d5:13:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0E:E3:EE:D2:B6:97:DB:70:07:5A:55:34:FC:E3:6E:F8:DC:88:2B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c1:08:59:6d:e8:eb:a2:f1:0c:a0:3d:fd:3e:de:2b:a4:86:
85:ee:10:dd:2e:33:dd:12:c0:77:cd:c7:38:58:0b:bf:28:a5:
ce:02:ef:d8:c9:be:49:0b:98:fc:77:a4:bd:3f:7e:6c:32:47:
c4:8f:4b:20:73:06:6b:b9:d4:8a:53:73:22:4d:9d:8e:b0:ba:
a1:d9:5b:b7:0f:f6:c2:30:2d:8f:00:6d:ba:28:ba:3c:5b:78:
84:e4:65:1a:9d:3a:fc:27:8a:34:ea:1e:bc:21:09:16:ef:17:
c9:a2:fa:18:45:2c:cd:d5:8d:9d:e7:4c:06:65:7f:74:ed:59:
d4:ba:dc:70:bb:d8:bd:da:0e:8f:23:58:0a:c6:93:83:56:93:
59:fb:01:17:50:bf:2b:a5:46:fd:d0:b2:1c:1c:bd:37:a7:b3:
3b:aa:2c:d0:8e:1a:ae:5b:43:0d:a9:75:f2:9f:64:1f:f4:2b:
62:f5:fa:fd:6a:44:ac:c9:22:04:94:5c:90:d3:81:dc:4b:86:
30:8d:8f:ba:04:75:9c:09:95:c3:8b:94:8e:60:b7:46:9d:38:
4c:b5:28:6c:4c:16:41:14:cc:f4:f4:c0:29:db:3e:32:08:63:
cf:6c:83:b5:20:03:bd:31:d2:39:83:f4:44:47:b4:02:d7:30:
b6:a7:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 20:46:30 2026 by rpki-client