
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier: cn9eDCBLVQdS9AWitKFe1/RnzFx3MgYIxgoFcd48+0M=
Subject key identifier: 8D:D6:2B:D1:58:4A:05:B0:F6:54:DE:1E:EF:64:A3:4C:DE:19:D8:32
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019E2926F2D8163AC8430FC304E6CE224098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number: 1965
Signing time: Fri 15 May 2026 01:01:18 +0000
Manifest this update: Fri 15 May 2026 01:01:18 +0000
Manifest next update: Sat 16 May 2026 01:01:18 +0000
Files and hashes: 1: 1-ygVXvpX3v0iELiClfnmQNYwGyE.roa (hash: X5he1s+27okfT854bA2DHGCg/8azuLS5wg9wh4BAYOk=)
2: 81IrEqThFJ71oZltC7sydtXNojo.roa (hash: tEfEiIXn9wfKX7SvDjdARvZLxRgzMJ/S8JlSOukelog=)
3: AMQlobx9HParaeDL7T0v3tR4_mg.roa (hash: DvsmpIh8xvNvja7LOYbDo2D2JDk07c51OKvsQR0zZ1A=)
4: AXyzBE0tybxRg9_jdKm4jNHR7bw.roa (hash: nfQgADgYeSKYxfzdRmUnB0z2SSRcFjYrl/PLdcFMeDw=)
5: CP1-ZWFt3LQXYmFLwdbDKA6-btk.roa (hash: hFhoH59R3e+GZod8NYfc3YpX1Y6SV4cXhI67xJcoHls=)
6: JxJo9qALLP7eJJE5vuTtbxNKarg.roa (hash: HkVv74vSVM+BvE4aRbMZl6E3E6sT2RpvFk2i93TTTiE=)
7: X7CBYKuwZavOmFbf8xJJDhABAJ4.roa (hash: XXFExiGUxJHCf32+M8YXjA/DO0qOOWZKBpQs4MlsYQo=)
8: _BfUEuTWI4mH7z3tL2xj4fNLk8w.roa (hash: PZxV1RVfs2NX+n/RPHStsER54mLHjvguw+Y+i8qfbk0=)
9: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=)
10: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: u1q/fMpJd+nm/GlHLVmBHS6uSLZoArpw2vwTt7ctbVI=)
11: bplXSiFsGP80TRfwY9VPJGWee2c.roa (hash: l3qY0C7QFTqXEk+k6M4Yxnd2Mw57O7Mb+BBGWXTpW80=)
12: de2lwVssf8rnTbV-vrGaj_YNofM.roa (hash: X+D652oMPb3y57iVvUCNT577oF8mBPxjOL994t6GNZs=)
13: fxuyMV_7iGJ5rjIPhk3y0WiOc-Y.roa (hash: kZWQ/Ewlc4WMwycM0JTInlzSOn7k6IqfaiPaxpvk380=)
14: g4ShtOVoK1sOm96RfSspdLumCvI.roa (hash: dbDK/BecQeIz6Zb33EjyuQY6S7PvjAP+A9ZP96sRxE8=)
15: h-Y3vuHtstMczMPDuyieMPJjs9o.roa (hash: TBowUvcmel8h6H/tmXuS0hO6VydyD1MZRfUo6Mz8K4k=)
16: qo7ie-ZCOxr3kULK0wr2-czci7A.roa (hash: tjSzYVU1BPWM+eWE8epAD1zQp+0FNjjYVtJc8ORfDvE=)
17: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=)
18: vELnjGZG0HPMMI6eyVMJCb07tlM.roa (hash: hBZn4JkNx5C+fP4A7VfhJIdgWEeaLDhsZs+aBB3PMpI=)
19: wRsmJd7CIJgwynHO3eDWK5E65EA.roa (hash: Is86hG9/O11lh+0TSiK7Jnli8yF4j5q5FW3grn/LkD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:f2:d8:16:3a:c8:43:0f:c3:04:e6:ce:22:40:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: May 15 01:01:18 2026 GMT
Not After : May 16 01:01:18 2026 GMT
Subject: CN=8dd62bd1584a05b0f654de1eef64a34cde19d832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:4d:07:66:f6:a4:fe:7e:c8:96:c0:2a:2e:
49:12:3d:ef:5d:d6:e6:2c:9a:a1:1e:09:67:36:e1:
96:be:b4:03:b2:b8:05:69:ab:14:27:b2:d9:b6:c4:
76:93:4b:c6:d1:2e:8b:30:6c:0f:2c:cc:16:4c:7c:
6b:59:36:f4:1b:8d:33:62:b2:84:ad:35:d2:5b:12:
bc:de:cd:6d:54:cb:d6:e4:24:a1:ba:73:d4:18:38:
85:06:5b:0a:93:c1:da:46:f7:7b:07:30:a3:08:ea:
01:7a:c0:2b:33:9b:4b:47:d5:39:20:a1:fa:02:e3:
f6:3d:c4:cf:3a:be:06:dc:62:35:1c:05:9c:ab:3b:
93:b2:1b:b1:0c:75:95:05:3c:fd:47:74:d8:89:30:
54:14:b2:ab:a0:6c:8d:27:d0:6f:64:e0:6b:9b:00:
b0:7f:08:d0:57:75:e4:25:6d:8b:4c:7b:86:cd:e4:
14:d8:56:c9:fa:52:13:ef:2e:9b:0c:c3:e8:0e:9a:
0c:26:4e:2f:7f:bd:10:b1:5b:9e:86:bc:76:db:13:
8f:d2:61:f8:67:8f:8d:5e:a3:c8:ee:ce:49:26:93:
6e:f0:d1:c9:70:e6:4a:a1:0f:d7:97:a0:d3:11:af:
e0:80:51:c3:bb:d3:bb:ce:19:e9:a5:43:fb:97:33:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D6:2B:D1:58:4A:05:B0:F6:54:DE:1E:EF:64:A3:4C:DE:19:D8:32
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0d:30:2c:96:39:a7:cb:24:d3:b5:fc:d7:8d:a2:9d:86:87:
ea:e1:c7:e9:e6:68:86:bb:50:d2:59:25:e5:16:93:db:51:a2:
2c:07:af:79:00:d4:be:ad:6d:db:2e:b7:71:e7:88:c0:ed:3f:
c3:d6:ff:72:4c:16:e7:73:23:3f:0f:70:41:4d:c6:8f:b0:b9:
c0:66:64:a2:25:95:b8:d8:15:a7:b0:1e:26:82:73:6a:01:7c:
d8:65:6c:b1:83:95:f7:b7:b1:08:e9:a9:f5:7c:09:2d:66:78:
ac:e4:99:22:29:b9:21:54:15:7d:72:1a:0a:30:64:be:8a:3e:
e0:8d:bf:cd:05:89:e0:60:1d:20:6f:3e:21:a0:b8:20:3b:c7:
97:68:0a:90:8e:2d:43:62:7b:db:e1:22:ff:d3:be:4d:c7:38:
e3:53:42:cf:aa:28:bc:14:de:07:1c:d3:ea:06:17:05:43:ce:
7b:ad:35:d3:5e:bf:01:84:5a:03:bc:ba:f8:53:c7:59:0c:12:
8c:e6:56:ec:0d:19:61:b0:3e:6b:ca:d4:17:f7:d3:53:41:d0:
07:44:b5:e3:e0:1e:59:8a:9d:bd:5b:77:14:a8:7a:96:ef:63:
7c:28:19:09:89:a2:fd:62:80:89:15:8f:be:82:36:88:d6:2f:
bd:86:37:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pJvLYFjrIQw/DBObOIkCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjYwNTE1MDEwMTE4WhcNMjYwNTE2MDEwMTE4WjAzMTEwLwYDVQQD
Eyg4ZGQ2MmJkMTU4NGEwNWIwZjY1NGRlMWVlZjY0YTM0Y2RlMTlkODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5pNB2b2pP5+yJbAKi5JEj3vXdbm
LJqhHglnNuGWvrQDsrgFaasUJ7LZtsR2k0vG0S6LMGwPLMwWTHxrWTb0G40zYrKE
rTXSWxK83s1tVMvW5CShunPUGDiFBlsKk8HaRvd7BzCjCOoBesArM5tLR9U5IKH6
AuP2PcTPOr4G3GI1HAWcqzuTshuxDHWVBTz9R3TYiTBUFLKroGyNJ9BvZOBrmwCw
fwjQV3XkJW2LTHuGzeQU2FbJ+lIT7y6bDMPoDpoMJk4vf70QsVuehrx22xOP0mH4
Z4+NXqPI7s5JJpNu8NHJcOZKoQ/Xl6DTEa/ggFHDu9O7zhnppUP7lzM06wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3WK9FYSgWw9lTeHu9ko0zeGdgyMB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmA0wLJY5
p8sk07X8142inYaH6uHH6eZohrtQ0lkl5RaT21GiLAeveQDUvq1t2y63ceeIwO0/
w9b/ckwW53MjPw9wQU3Gj7C5wGZkoiWVuNgVp7AeJoJzagF82GVssYOV97exCOmp
9XwJLWZ4rOSZIim5IVQVfXIaCjBkvoo+4I2/zQWJ4GAdIG8+IaC4IDvHl2gKkI4t
Q2J72+Ei/9O+Tcc441NCz6oovBTeBxzT6gYXBUPOe601016/AYRaA7y6+FPHWQwS
jOZW7A0ZYbA+a8rUF/fTU0HQB0S14+AeWYqdvVt3FKh6lu9jfCgZCYmi/WKAiRWP
voI2iNYvvYY3Yw==
-----END CERTIFICATE-----
Generated at Fri May 15 09:51:16 2026 by rpki-client