
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
File: F5MB3Mf65PfOAeSYenfLgqM2q_8.mft (raw, json)
Hash identifier: RyuUPTydBOAYw1Q/A6LIXqJBgzyfMzxwxXf7e2CgXks=
Subject key identifier: 95:BB:E4:57:04:F9:3E:4F:DC:F6:F0:73:9C:49:05:13:AB:33:1C:E9
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 019DCC73EEACA85778730C88CD9473025813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 01:00:42 +0000
Manifest this update: Mon 27 Apr 2026 01:00:42 +0000
Manifest next update: Tue 28 Apr 2026 01:00:42 +0000
Files and hashes: 1: 0b2Y_TFi325_qAaDcpTOLuo2kM8.roa (hash: eq+kVSonnTsg5zU+yYXvgfEY0yYpnHaoQfvw3IwYP9o=)
2: 19XE1MZt9El05XiFyoyirSQO8Og.roa (hash: K0GnyCrTYbCy5svSya9FNfUCSmfyBQup99xOtC538KA=)
3: 5mKgFekCnX9KKHG8uIFOfOVDCpA.roa (hash: kagBXZBwsp9ju+8Y236dOevCM6wVBUEfu+L4XYQKWOs=)
4: 5mrROA1nPeZEKPvP1vAH1dcYCJQ.roa (hash: WeADaz2og2TiVj3DILmRGEhyBsochEmeKdyy1jS2RO0=)
5: 8CBjXV1Euzd0TJ_xOm83xsriNTo.roa (hash: AUXa1rbxS/VOzcFcsvfHQOzcJHZKyWVctpZEmvR9KwM=)
6: CEEsHEMV5-0YMLvmKnh1E_kY_bk.roa (hash: ZGRxIApdLw1b2BnlO2g6ex4oNWlcZiOScsJNlmrDOvM=)
7: Dmgkf-oAsEboJ_KojenOGEstbLI.roa (hash: 8mR9GXde4rysiXgwr5zTh1Xz4PyJUVeH12dm6X6Egsc=)
8: F5MB3Mf65PfOAeSYenfLgqM2q_8.crl (hash: Lm79GkjW2Th1U3N8EJjlhYOlhST8WrPHuEM1pH/i1Yc=)
9: Fg4rHW1_FlNII_ioYNijYnqmMqY.roa (hash: fG/yspbJeL7KGcwUQD3gQTj48zf549RUV9KM9TsNIo4=)
10: FyRUGre7oijk4X5ntW2vJPLDaJo.roa (hash: nAwQuGchCFa8ArqRc8kldlDa74iiMYaMzhlCrlcSiJg=)
11: IlaCVZwdzo2L79FH58WbKtT4V30.roa (hash: KKIIdRPRAJ3cKsdeSGy9UyhMBJlNzkzU7RcPH6+9dx8=)
12: K-bDHt82voK5usEqFt7OS3Su4j0.roa (hash: sQv6jtPhiTIhJJU8h8nRxjvZ0djkuKfK6NCVBtdlPGQ=)
13: N2sWHSmbIsvTWoltMydI9-BAqXc.roa (hash: yjcwh1uIjEMcOQTev4RTyInZjAxP+wJLc+YJsfKivH4=)
14: PEjMqFrWXV-5hfhY9s6zJRFd2po.roa (hash: +g1+aMmROmPeR9JEZeJxOSIXTx9x9/vKAraDYVE9uUc=)
15: U7giNgrUcP-qBlYkj8UBbFk4DY0.roa (hash: +Ov0Rs8SVXiwE871NeCLU7Jscp3nrL2mjX5Pd7s9BDI=)
16: WXP1dhKTD-tpUI5f2lcS1HGmaus.roa (hash: z4FKoB5128C4uQI5KAcKXYpRHFuXZ2OIB6ZBXHyRWK0=)
17: XUUckoSuUv2EJgJ7PIO8adk16ks.roa (hash: tzSd8b46wrKHHj3JR9ZXkqNjIIpHpcM89O3eCBiPmtQ=)
18: ZkC2pwU-vPobHR1P8hXvgZXL8EY.roa (hash: pcXXf9QMivd0yS9HgvJJGrM6faRZOPkvkq2lP0GBt7Y=)
19: aMp0V4PL8w44FxXQP-etN9_hYOo.roa (hash: 65e9Re1FyZ6049CQ4//RB0p5ITeSPSFB5r8ZkRNu6iQ=)
20: b8LAd20uYga5CAyINdwZQSnOKKc.roa (hash: 9PtHHoA5QiSyKYeV0G+AJF5tDVH6ReK4IqK5XpMnzqk=)
21: isx9aJTgF4G7gpPj-KWdwudLkLc.roa (hash: koR3eD7JpX6pHcqx/HGtKH5HWHko5m10EufOOt+hqU8=)
22: l7sPlKE0g8_he7VUP3EUxcLwR5Q.roa (hash: 2M714ykbHRhOH7K8rnbtUxumLueRPVWuC2ymghKfS+0=)
23: muf1o8olsU8BpUy1Ss-ye78uW-s.roa (hash: QgRb4jfYwp6/aNNsfX1wwZ37AVq0LKioTTxMPAiv9fA=)
24: sma7gxezgUSvu4eYWzh5S495W1M.roa (hash: ys9+8ktLmuL+larZU8FsKrc+g1675fU+dfoV2RSaq8M=)
25: vwD2HyomKkaT-vHvylHS0ECmZCs.roa (hash: cOjuf3H1s1lEQYR3PKyq9B+/qB0Rf8B47PeoC1zjTjY=)
26: xCglQDPKbMH2trVVcidURc2tQsQ.roa (hash: DYXKMMfArmYFnaOjpJ6T03u7dgR1AN5CtyE7pr19zKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:73:ee:ac:a8:57:78:73:0c:88:cd:94:73:02:58:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Apr 27 01:00:42 2026 GMT
Not After : Apr 28 01:00:42 2026 GMT
Subject: CN=95bbe45704f93e4fdcf6f0739c490513ab331ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:8d:c7:4e:f2:22:56:97:53:1e:2e:8a:ab:
d8:3e:71:fe:39:68:61:4f:e2:ee:09:1c:95:8a:1f:
b4:86:41:c4:a4:07:f1:b7:9a:c9:21:23:6b:3d:4c:
eb:ae:15:d2:f3:49:c8:1a:48:db:c3:5f:22:d2:1f:
f5:b9:e2:d4:25:2c:2b:20:39:98:28:72:a4:89:f5:
bc:47:58:42:67:af:f1:fc:8e:ce:fa:20:6f:25:f4:
19:47:96:9a:d8:39:08:27:17:cd:b3:02:b2:0c:61:
de:8b:77:40:43:0f:dc:0f:6c:f9:3d:35:53:84:1f:
a5:b6:79:c3:27:09:d0:1d:05:33:bb:a0:3c:7d:a4:
6d:5a:3a:70:96:ce:a7:5f:9e:73:0c:f2:f0:79:3c:
97:b1:fd:af:b9:18:6c:5c:39:0a:9d:d7:ee:82:96:
3e:47:e2:41:18:a3:84:d4:bf:2f:53:78:24:ad:79:
bb:68:b8:09:d9:4f:87:70:97:02:5c:04:72:f1:1e:
05:2b:78:44:fc:4e:de:4e:0b:db:85:42:e6:0f:0d:
6c:c1:62:9e:33:4f:85:db:ae:d5:40:6e:af:32:09:
80:f4:49:b3:c0:33:52:03:9d:cd:0d:ca:c5:73:fb:
7a:c3:e8:aa:14:7f:b2:cc:e2:54:a2:01:70:89:48:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BB:E4:57:04:F9:3E:4F:DC:F6:F0:73:9C:49:05:13:AB:33:1C:E9
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2d:4a:7b:21:c5:87:2b:cf:c7:f1:f9:3a:1e:7c:89:8a:bc:
5e:61:41:60:04:e0:c6:4a:92:ac:5b:71:6c:76:e0:75:10:87:
84:6e:dd:60:38:64:88:e3:6e:da:f1:75:84:82:f9:74:ff:c0:
8f:7b:1c:69:71:87:b9:4b:50:a1:7a:10:5b:f2:2b:7b:06:6e:
ea:7e:a1:06:71:76:7d:1e:d4:05:b7:8c:03:fd:cd:02:59:de:
54:c8:5b:c7:7a:5e:64:45:c9:bc:76:5d:d5:13:fb:89:73:c9:
4a:71:a0:fe:a3:5d:68:aa:38:62:d0:1a:48:bc:63:da:00:73:
aa:19:ea:2c:39:ca:35:e9:3e:cf:05:7b:56:15:80:31:7c:c5:
3c:35:7e:ef:91:eb:83:d3:04:04:34:d9:7a:b1:01:f8:f5:04:
d2:e2:cf:21:db:aa:d1:b8:2b:bc:e9:c3:56:6c:62:21:74:fd:
eb:e8:7b:f7:8b:40:2d:99:6e:a1:96:90:f2:21:eb:0f:fa:ef:
cb:bb:a6:9e:a8:90:f7:02:9b:e4:8a:04:8c:46:74:e5:d2:6f:
c2:10:8f:d5:ef:58:12:af:60:7e:ec:bf:3c:84:c9:0f:74:ce:
75:f3:3b:9d:03:85:aa:0d:2b:fa:33:9e:bc:af:56:0d:76:8c:
dc:4c:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:43:01 2026 by rpki-client