
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier: 9HN7S99IRJ9XkmslIZ26ewZSvNpbVfnHTQWv+VeXuEw=
Subject key identifier: 59:8E:D1:37:E4:A6:2A:C6:0E:19:20:2F:4D:0A:8A:B1:0D:37:A9:7C
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019CC907FAF9C24B260AD50B2ED6F404E0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number: 0F18
Signing time: Sat 07 Mar 2026 16:01:09 +0000
Manifest this update: Sat 07 Mar 2026 16:01:09 +0000
Manifest next update: Sun 08 Mar 2026 16:01:09 +0000
Files and hashes: 1: 1-1nP27bm3gAzWksm3Aa1woQLmTg.roa (hash: 4vMUg/+4aVf6LxIWRfZOUaawIS1qe+jvPE0nds6yR2Q=)
2: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
4: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
5: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
6: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
7: Z0BON6E806_VujIu13j4rp4udFU.roa (hash: Dg0DZ41kSt9T8YvEtYfHhtMj9H1Pn0HsQ9ZBprqVWR8=)
8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: at58BAZTQ7mp931YLcOQNUURbDGgcHG2JRsQ5Y+4Tno=)
9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:07:fa:f9:c2:4b:26:0a:d5:0b:2e:d6:f4:04:e0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Mar 7 16:01:09 2026 GMT
Not After : Mar 8 16:01:09 2026 GMT
Subject: CN=598ed137e4a62ac60e19202f4d0a8ab10d37a97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:68:9d:e4:ee:bb:ba:18:cc:38:3e:29:73:
cd:c1:06:af:c1:00:61:94:4e:0c:29:1c:0f:1d:cf:
dd:31:d8:32:e9:75:eb:68:fc:0e:f1:86:12:f4:2f:
ae:dd:46:5a:eb:cd:0e:5a:22:f6:c4:e7:4f:ec:37:
83:80:78:15:33:75:80:11:bb:46:80:60:b2:9f:27:
84:47:5c:8d:dc:25:40:34:58:d5:59:ea:7c:6e:17:
a0:84:bd:5e:02:1f:66:60:2a:7a:eb:b1:5c:c9:93:
69:f4:7f:d0:3a:e6:43:b0:39:8f:d3:a4:50:81:63:
c9:c7:6e:c1:d0:4d:3b:18:30:04:66:59:56:32:d4:
c0:57:3a:14:38:e5:3e:7f:78:2d:eb:f2:9d:8e:20:
ea:0c:f6:ee:31:d2:25:3f:a0:71:24:a0:05:74:0d:
40:9f:21:5e:b2:25:d4:1f:be:d4:ed:bf:57:cd:f5:
82:b0:ad:ef:d7:30:60:cc:33:0a:69:fb:40:4b:f2:
5c:48:f3:0f:e0:4d:cc:62:ba:59:e1:9a:c8:6d:37:
7b:63:80:1b:71:bd:5f:b0:ed:11:fc:61:c5:f3:7a:
af:14:58:62:87:9e:2d:36:eb:bd:14:79:51:72:d9:
cc:e6:ff:fa:29:0d:05:56:02:85:fd:27:6e:7e:67:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8E:D1:37:E4:A6:2A:C6:0E:19:20:2F:4D:0A:8A:B1:0D:37:A9:7C
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2e:2a:be:06:b0:7c:e2:e0:c3:b7:da:18:81:5e:f2:de:2f:
da:77:84:a8:38:76:f4:a4:c2:04:32:34:e1:b7:c0:d2:2b:59:
b8:86:82:6c:0a:0a:83:e6:aa:cd:93:6b:7a:19:f8:4e:d2:78:
df:03:ce:14:86:bb:bb:14:99:bf:e1:8d:85:f2:b1:b3:45:40:
58:aa:41:89:5d:4d:79:33:01:43:9c:33:95:b1:5c:56:b5:f7:
95:cb:c4:89:b0:c7:2c:4c:9b:d3:6a:ea:8d:2b:6c:60:7f:84:
55:3f:7d:b2:71:b9:71:c8:39:27:a7:b1:d3:d5:04:43:d5:56:
bd:31:6f:47:a6:85:18:91:de:23:22:d1:6c:59:63:8f:5f:04:
88:57:e8:f4:f5:b7:ac:9e:7c:0a:82:ef:50:47:20:cc:dc:1b:
a7:85:e9:d8:28:77:b3:b3:a9:10:9d:09:eb:01:20:5b:f2:6a:
cb:c6:db:da:51:50:77:a3:ea:36:56:b2:3a:f7:d9:2e:9b:2c:
e9:a2:c5:7d:ee:af:e5:a1:c1:48:c8:79:5d:ee:8f:d2:41:6b:
74:08:a6:62:b5:17:af:4b:ef:b1:af:e1:24:57:d6:99:82:5c:
60:4d:86:38:e5:b1:44:12:f7:ad:0d:9d:78:b0:3b:73:77:57:
c2:a4:35:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:08:46 2026 by rpki-client