
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier: Y/Lb4iI/zDAtNjuSvw1YQIijlYXxFKt1oNaNECu1RPc=
Subject key identifier: FB:A6:6F:DC:F1:22:AC:D9:A2:25:E8:D4:4B:22:38:79:D6:23:BB:FD
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019D0E8DB4FA3A4CFF918E5C01B1BEB82CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number: 0449
Signing time: Sat 21 Mar 2026 04:01:00 +0000
Manifest this update: Sat 21 Mar 2026 04:01:00 +0000
Manifest next update: Sun 22 Mar 2026 04:01:00 +0000
Files and hashes: 1: 4nBKrQ7FuSHt16g-Jhb0HZHrVuA.roa (hash: aYoLlFVD8YAsL0de7AE9DSkfD8QMKerYqlj+yg5iM34=)
2: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: goTxkH6raKRFVWnv1P8EJPQT79i7fptfRf0G0w/gr1U=)
3: 9IeVl12aUhba2Emfsn2fBTAFUAs.roa (hash: XK8m1Iay7rzWVYWcJ+cMdfUsonXHcQUc6/GSyCW/CfU=)
4: EIcG2tRM0hEnCUbXBXwn4F2K_RU.roa (hash: CzCHk+1EoYkn3OF7WD2BogtQF0fxYDolBFo6xDdWuh8=)
5: FGXwoit8a4sabQ5C7V91KCVEisg.roa (hash: snmXzF1yCkwjQV6I20Cp2hZS6KrdvqWPo0SPQih8C7o=)
6: Fjwh_xe98NLC_NhYm0MDb-WiDn8.roa (hash: PIt7e72kgyCo74un3u52sqzROHoMmxmWZGgzptnTe7c=)
7: ICSYGrMnvnf78IG-U4_z8_jIgxk.roa (hash: PcqXGcbd3Xoq/GKGzWlEbDkeYUaghyHnlFBBkfXfCeU=)
8: IqXXDZ3GgnjRd1G0jTr1HmAi2zI.roa (hash: MyeVCpdqzkiX8RhyNgrhg2wt8+fZNtCSYjKXeFPq0mo=)
9: LGZXRjlMsd8l00GKR2QE87j1TTA.roa (hash: PaebTCq43309eJujsiliFxMpMTh3T8ONlskEyWdZeN8=)
10: ODgdHM7EjChq_YSS9774P5Z46A4.roa (hash: rb40TvEnd+AdrLvOEOoEZJPQ/zWoQJO/3tdPwyMpcH8=)
11: VhCRfcvEjNM89gcOi0JP5Q7Zclo.roa (hash: w2JGUitloSyikURERlpElaAKN10Q3H4X48EmpiyZxlk=)
12: Z-99bBhSzjJ0Kg9aGobemtBeDJw.roa (hash: pvxDBRck2bWfMsW7dovzPou9uNU8Gr9hr6lVhmhkx9Y=)
13: cZdoFIof6I27GQcjytPY0R3i3js.roa (hash: pRv2+sxETB2uUE4tr3TfMEgzvPUHUWoGW9QMt9CyFD4=)
14: fLhrOgEH14ZtDnY2a-kcypEw4TA.roa (hash: IrBPByCkmrLWzYOki6hhtel2dQO8ugJUMzMYgBXFBL8=)
15: j-latFhScd5PKEr2AScvhG1Bz8c.roa (hash: UhswVaY1Iy7gRFrL9BjrtRDuuM3Z2CMtnSrc6eScFQ0=)
16: j3qq4MvojOFaV3piUARhww5SfkI.roa (hash: 5ZhQV4dh6a6da+ERWvVWZKdaaZu/HC8oF5bb59nJCtE=)
17: kG5r4M7vL0g0ERFaBEW96gIBEvc.roa (hash: kKKMoGzt2uOeJqgdnHsPG56fjNKaGYn/UtCz+xqiuPc=)
18: n3qL0U5O59kTYO8i_VapSoASKmc.roa (hash: tsbQUSxeZLoxmMggAB9U1UA5AvqgQHEoy4fl+w478ME=)
19: n_XEvDYqTMYmcDklyEEQZAapP4U.roa (hash: FRPCi8BHfC2b2LCmr4vX6DGUlH6IkNK9297U+Ab7+bo=)
20: nu2apDqXy-iino7G3nWPhPWkDqo.roa (hash: ixg3Ryv/Bp0pzXwcZFr4U5J1gnEXjS591im7CKO4sTg=)
21: p11TeDMm0uMplq6QnnT6a0h_yrw.roa (hash: xmy1s06ovFLtUr1mbZMaGtqrWwFvo5nSDSbPj7EtqcI=)
22: qAYx45nxlYDnnw3FPj8rqLwYawc.roa (hash: cnuzs/IA+tUXp6BKmh6rTk0mw2s6mh24Bdz+61FbEwc=)
23: r53oyYolcOu-UfgcT_tdtf7-39c.roa (hash: 0h3BGKzWIs5UPZjIeVM1ksoF8ZK9Q6Fzsphmnty3gCM=)
24: s2ybeZT5rNVQIBebgD5HdN1AWlw.roa (hash: QrYBLYtzcPg8r33UGPdDC/yuaM0LspPms6lZA29qbO0=)
25: vG4PNdPCpmsHlpbXODU_YK6E-fc.roa (hash: mX5cRML8Dc4pk4M7hpiHQwZERgzsoyWou0tgh8xR65Q=)
26: wMA9EYd6XnQNkBbE9YqLguhIGv8.roa (hash: 9lZpPveHeBWq4KzHowRRHzV6Laqxgjf+4n1ipLFAM/I=)
27: wMI5BXOT_BgN0uxpsGRRZRnKSkM.roa (hash: Oxrdhr1ss/JbqLMgdIsQwdWtrWAJAiM83gHMKnZe/Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:8d:b4:fa:3a:4c:ff:91:8e:5c:01:b1:be:b8:2c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 21 04:01:00 2026 GMT
Not After : Mar 22 04:01:00 2026 GMT
Subject: CN=fba66fdcf122acd9a225e8d44b223879d623bbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:7f:17:d4:70:06:30:68:da:d4:10:ed:87:
87:44:6b:d1:27:0a:3b:28:99:71:26:dd:c7:17:db:
62:6f:c4:27:1a:73:20:46:4a:a2:3e:ac:5f:7f:f4:
c8:95:f5:78:94:ca:98:f5:dc:e0:42:74:a6:41:c7:
d5:b9:d8:2d:be:80:9e:f9:de:3e:85:84:58:0a:90:
a9:f3:33:c0:87:07:ba:02:ba:4b:9d:12:73:6b:ae:
22:72:7c:9b:2c:88:81:1f:9e:e4:1e:4f:60:fe:35:
bc:fd:ea:b6:d1:6f:99:e9:d0:56:25:3c:c2:ce:fb:
e1:45:7e:34:60:5e:6e:1a:cc:8a:39:62:44:cc:e6:
4f:66:4a:38:a4:b8:ac:4a:1f:d8:ed:93:87:60:db:
e9:27:84:da:4a:f7:31:ed:60:2d:b4:7f:df:d7:7b:
b8:0c:8a:74:24:92:10:35:b2:c7:d2:6f:71:d6:d1:
08:34:04:81:32:25:c2:64:be:51:d7:1e:b4:f5:4c:
6f:78:b7:aa:e1:0b:c8:00:0b:0f:5a:ea:b4:83:fc:
9c:ee:91:20:94:e0:55:68:55:39:ae:98:b6:a2:d7:
0d:a4:52:99:48:f9:77:51:ae:d0:a8:0f:e5:4c:61:
aa:fe:76:50:6f:a4:94:32:b0:3b:4c:e9:a7:54:9a:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A6:6F:DC:F1:22:AC:D9:A2:25:E8:D4:4B:22:38:79:D6:23:BB:FD
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f7:9c:2b:d9:d8:85:12:ce:1e:9a:4c:f8:a7:4a:62:b3:7c:
bc:25:fa:54:cb:5c:11:21:5d:9b:f8:74:e1:5f:af:63:ca:52:
ff:1d:45:cf:e7:3e:9d:46:79:f1:a6:ba:53:f9:25:f6:d5:39:
ca:11:ac:90:a6:d4:e9:72:b9:4c:09:f6:83:75:11:8f:84:d4:
03:54:3a:e5:29:84:90:4c:93:5a:ed:59:3c:00:15:90:bf:41:
44:a4:c9:df:88:a7:3e:f2:7c:6f:fa:0c:84:d2:88:f6:4c:fd:
9e:57:2e:e7:b3:2d:8c:fb:08:bb:b3:0c:c0:c3:21:b7:87:c8:
0d:37:5c:ea:26:dd:9f:3f:00:5b:53:6e:ef:0d:39:82:68:ca:
9d:66:28:e6:42:b1:42:d4:f4:ad:d4:db:bb:26:42:5e:45:00:
28:5c:e1:18:3b:35:40:2f:9d:04:40:ca:8d:67:f0:60:d1:0e:
0d:9a:54:54:eb:0f:43:e2:b6:e0:ef:d3:aa:11:5e:9c:3e:06:
cc:88:84:6f:b0:87:3b:b9:39:c0:9d:4d:ac:6d:27:43:47:0d:
a8:31:37:18:2d:00:26:76:7e:68:07:22:31:64:f6:25:14:a2:
af:1c:f2:60:07:15:38:78:cf:a2:3e:ce:3a:f6:75:14:dd:40:
0c:d8:1d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:14:18 2026 by rpki-client