
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
File: 5_iBQBq6zIjJQf33QPGrFTbwXbo.mft (raw, json)
Hash identifier: kHFVLq+R6lTGxrS6G8oceF5BmPHaDPHobF3YHOImAfE=
Subject key identifier: 4E:58:B7:70:BF:7B:7A:14:B3:85:D2:75:D0:E5:C3:BF:54:19:1A:7F
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 019D37527643BCFFDAB28DEA9380FF0B2839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 02:00:44 +0000
Manifest this update: Sun 29 Mar 2026 02:00:44 +0000
Manifest next update: Mon 30 Mar 2026 02:00:44 +0000
Files and hashes: 1: 1-Qt-mvUucZQjwB8U285sYZrYHhY.roa (hash: oTz2PzT1afjZiR5FRSLxm1w+VehAPUH7fAGIbljalfQ=)
2: 3jVe3oWfFjGA0bFkAickXDhiBTk.roa (hash: /B1hbyZvITPy4r435troyRlK46+NdXGVMqL2hC0atuM=)
3: 5_iBQBq6zIjJQf33QPGrFTbwXbo.crl (hash: hkW0M3oShf/e0fLDdrYVLVCx1fgs/K81JL2CtlJEqWo=)
4: Aihm1qpAzPTqrcFPKmaVyaxgJyw.roa (hash: ASIC86ud/gxlcO2WNKgZea3FlMuZAabkWgmYMbXqS2I=)
5: AtVTliHD-CZYx0dPfB89NgsixUc.roa (hash: o1vczZuvSO50vGvwxxhNXET7cnV4aqFg73NN+nlrpAU=)
6: FSTJ8w92afiSz0qI6f5cSEytc7Q.roa (hash: fXpshaRrLltZbsPZ3N9EZgWimcdFJLJ1wWhFL1Fg174=)
7: FpwLO5eh5uZND9Rc9a0NJsEJMlE.roa (hash: ZBw82sV7JoPLg3uztht/b0Wxlmt7VXvzqOWzOlA1JpA=)
8: IZCAUD82f3i2oA0GiMqBNWsoJwI.roa (hash: SbW567nXRMDWSIGCIjwxO7prJ7rI/ygbNehL8/xOQB8=)
9: J-D2QTV5GFe8QZvqLTW_IrUbyNM.roa (hash: smwtAA/DVPMUrh76xjUL7N4+Ou7I5DIwApsogoGYqpM=)
10: TKEpPXUpLU5W_48ie-PShvubSmQ.roa (hash: bAD0eg778WJ8W8W3//5efjy9CNKIBzk/YvQ1TCKllow=)
11: WSeVM2QjU-Reiz76i_drEHhLMPQ.roa (hash: Tq0+teUFn9thhFb6g4y6nyECQZVPt+G+x4oqu/NwuvY=)
12: YYEwV6NICNrszp0tVRq1J0qfnGI.roa (hash: iz9tuV13CkeCtkZoxWE8s2oi5wxkmx44BjW1MshohqU=)
13: aD3ir7gVxlUOm_2sjOyjhFZE8xU.roa (hash: WmqoSaafVJGk4mr4QTxo1ZyjpXHkEKbLAP8ZEUygZf4=)
14: aGZr4wPYNJ6GCVvXrPBVVtalnZs.roa (hash: HR+6hF6C7zyPdJci+gTa+wdqzGllr0dCtu8rPBplNRc=)
15: aVsHGtWZhZ-JjyN_a-C8xGuRXdU.roa (hash: 2CuFc4vVlwTqLaWvwvMaSHaDQsKrWlR1Flh9/F4Ne6Q=)
16: bvJT889kwtQRI_EyLLJFUKRqVAo.roa (hash: jHzzWrrncqh6D7+g/0zcqR17m3gx8mFOPKNKX2W4EsA=)
17: d2ATao2dWyO-rAxWbP6Z2EkoIO8.roa (hash: nerdIRaMGszG2WfY8kmlFia43UIoriRI54MHvrKiwq4=)
18: eY8EusladH4IXC1CHpY8aRyUD8U.roa (hash: 8OQXGxBuu4pTDdv8FmznuoTImi4gnvUuKmWDiou3mfQ=)
19: fNddSduH-zBHCeZuXlSQAQ6yS0Y.roa (hash: HtwbY/FPzHHNV/4s4iZglcvSNHEEMqFZcHSp5PQBTNs=)
20: gH4Vot8lA2imDuEu0OJDp6f8wvk.roa (hash: udS35O/PINSgGsNbtd6Z+QIm1IwNKG0wDm45HGhIkFE=)
21: gR2JJPVeOzMGupRjbCt-uE56Zos.roa (hash: R2uhlPsxDFm4cfja3sJpfXpN7boeSANpTxmZjBct7Nk=)
22: hKRwWCL_6CoBmk8VsIrEXY1xai4.roa (hash: uqoBEgPcDkJFQkJhnCsNAf2Gfqg03lNWyYDwn89PoDU=)
23: iIdAzPtCqikbah21E-K0Mm8FQ_M.roa (hash: lyzsEh3CqWMd20FxkkU5rgZbDHljJ2MjfPiA4AST0rM=)
24: izL2Ca5TO3ZaTibfAH39hMQAMBQ.roa (hash: IS6iJGB8DvxnqW49lmgjGOpqUU7oBgMo/SUW8Kywe3Q=)
25: jwGQmxKkvoMxt0zGNzmgobrPceA.roa (hash: Q9xMi0UBmOQ6J1V4+YgTpk7VffngMdEzFI533VU3vXQ=)
26: q9b78mhAK09AHOXRuQ1CVZhnZPQ.roa (hash: p6FIe/ywSMryeTPTuLflH96Yj9QNG/X6CcvV232N/OA=)
27: sdq4AdKdkJmfHD4HtzVtXtqNZ3Y.roa (hash: 8+R1Y8MlhUsE7oDGi1CtSy7SyzfeAd5bXtWsTvzi71I=)
28: shCVViOjhyXvYhJ9WfX4PMvRn7k.roa (hash: FDJ+fK4TSktfpWeR1yOgVytRac6CpX/nnvsFWazb0bE=)
29: uFn-JtrUy_-916rFpJODXLywoCs.roa (hash: lgxlXCpi2JKwf9CxVmQdcRMsZIfnt5rxVcM6Idk5XVc=)
30: uJKDxtZcDj52wYkdN5YgVbbm_Qg.roa (hash: sUSljUPkGt2IJZimoVojQH+i2T6wSTV1gkUYlZq+bz4=)
31: za3m6PhE_hPH-pcVQtgtjootjOk.roa (hash: STZds7jNIKyzSG0k0Vxd1saxJCfI11wgP3wf9Rn3Hkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:76:43:bc:ff:da:b2:8d:ea:93:80:ff:0b:28:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Mar 29 02:00:44 2026 GMT
Not After : Mar 30 02:00:44 2026 GMT
Subject: CN=4e58b770bf7b7a14b385d275d0e5c3bf54191a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:be:d7:88:ee:7f:7f:60:6c:85:62:69:5c:
0d:0f:01:1d:04:0a:a1:5a:77:18:c9:fd:9b:26:17:
f2:53:8d:56:be:a2:0b:ff:06:c4:8f:ba:6a:65:fc:
0c:76:5f:ed:01:5f:4f:5d:8b:d8:ed:e1:1b:55:a1:
47:97:b4:cf:30:b6:72:84:69:86:4a:07:5d:dd:0a:
f1:07:fe:c7:5e:55:3e:6c:c7:78:4c:44:42:8a:20:
4b:cd:60:8b:7a:0d:b1:ae:47:a6:7e:3d:ce:87:dc:
7a:80:b5:e2:77:ea:6b:91:76:dd:6f:d5:e0:e1:e9:
7f:71:d9:a6:88:4b:61:14:c5:6e:cf:18:50:46:a5:
d4:13:6b:10:34:81:07:13:c4:59:f0:12:80:eb:79:
bc:e9:4c:69:1b:15:47:c6:f2:9f:19:39:cc:62:0c:
1f:e7:23:59:a4:d4:80:43:f3:f5:d9:6a:45:52:99:
ab:2f:89:2a:4c:8a:83:95:e5:fb:ff:56:06:0b:48:
1a:a3:2a:ea:bd:eb:82:4c:06:36:80:12:91:67:d4:
5c:5e:79:82:f3:28:a6:63:24:81:20:ff:e6:88:09:
bd:90:60:11:38:57:5f:06:c9:95:12:34:de:c7:52:
ab:6e:55:d9:39:49:0b:f0:6f:fc:d9:8a:ac:4d:2b:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:58:B7:70:BF:7B:7A:14:B3:85:D2:75:D0:E5:C3:BF:54:19:1A:7F
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:12:19:47:d1:d4:0f:5b:24:f9:25:46:6b:f3:e5:73:bc:6b:
eb:87:58:29:6a:32:27:35:db:eb:89:53:e0:90:93:d6:cc:12:
43:45:83:7a:f4:54:0d:dc:ca:04:13:76:d7:b6:07:81:47:f0:
50:12:e5:ff:14:60:47:67:19:65:32:ac:ef:44:66:6a:15:66:
5b:63:a8:3a:ff:81:41:51:e1:8a:ec:bc:f0:ec:5d:8a:a2:ac:
47:92:86:db:2f:98:2e:60:82:c5:e2:0e:ef:0c:c9:bb:a8:bc:
27:e1:a8:90:a8:1f:a6:d3:41:d4:2a:33:6c:a8:e4:59:9e:e6:
2b:9f:58:92:d4:c9:50:e5:c7:0e:01:20:19:ae:28:65:bc:83:
d4:a0:0d:c1:be:b4:0e:d6:61:90:cd:cb:8f:14:f0:75:e2:dd:
87:8c:e7:83:9d:0e:54:97:f0:c6:8f:25:23:89:41:2c:6a:31:
32:4d:84:b3:e4:eb:0a:29:42:48:91:b1:f6:61:5c:64:f3:1f:
c8:fe:79:e9:74:ce:4a:26:1b:44:35:ab:2a:0c:ec:e2:2c:29:
ff:f2:83:98:9b:ab:75:e7:04:a7:83:67:60:ad:ce:db:08:fa:
ca:95:71:d1:66:9d:ed:21:43:f7:c9:11:08:38:b9:35:c3:f7:
8d:b0:99:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:26 2026 by rpki-client