
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier: fofntY/2ZbMn77qFt4PvqY6oT7ipDZmJGMVKpoDDjqg=
Subject key identifier: AB:34:38:1F:20:05:72:9C:DD:0A:0C:A1:34:32:1B:98:A9:DB:AE:1E
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019D34F5D9E34841946F4CCFDE6B94123902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number: 0F51
Signing time: Sat 28 Mar 2026 15:00:20 +0000
Manifest this update: Sat 28 Mar 2026 15:00:20 +0000
Manifest next update: Sun 29 Mar 2026 15:00:20 +0000
Files and hashes: 1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: gKPQLuakwMe09321HhHJPKJAZOMUL4Zfbihc8I3tl/w=)
9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:f5:d9:e3:48:41:94:6f:4c:cf:de:6b:94:12:39:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Mar 28 15:00:20 2026 GMT
Not After : Mar 29 15:00:20 2026 GMT
Subject: CN=ab34381f2005729cdd0a0ca134321b98a9dbae1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:17:03:fb:f6:2b:04:c2:79:46:ad:8a:03:
de:12:42:7e:0b:76:fa:1b:14:57:43:21:6c:c5:6e:
9a:1b:95:bd:74:0b:96:c0:96:25:95:80:ef:7a:66:
66:11:4f:d6:29:ad:4e:47:98:6b:46:92:bf:bd:55:
2b:b8:93:dd:dd:91:e0:19:73:43:46:96:b1:f1:d2:
1b:a2:62:ed:4d:17:1f:3a:84:d1:37:f5:a7:47:33:
5d:95:0b:67:06:e5:c4:59:a3:94:d2:fe:d0:ee:44:
bf:13:63:1c:b6:56:89:c4:68:7e:f9:a7:44:27:13:
11:d3:fe:48:c3:6d:bd:c9:fe:9e:37:43:4e:83:69:
a9:81:5e:70:cc:7d:8c:af:cf:ba:b5:a0:94:1a:20:
a3:5f:69:e2:c8:4d:5a:97:72:3e:f8:1e:9d:42:43:
7e:9f:3d:ed:9d:c3:c4:27:28:ee:05:ce:65:42:35:
c4:ce:90:f2:dc:66:63:09:71:3a:01:f4:c0:99:64:
7d:48:94:c9:af:b7:b2:db:70:d2:e4:55:6f:14:4c:
cc:3c:ca:21:09:da:ef:9f:80:f3:9c:69:e6:e0:a3:
47:9d:ed:da:ef:cc:b2:3a:10:dd:87:a8:17:42:7c:
c9:13:94:7b:cd:0d:9f:34:95:2e:c7:39:23:63:b4:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:34:38:1F:20:05:72:9C:DD:0A:0C:A1:34:32:1B:98:A9:DB:AE:1E
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ac:36:95:e2:b0:fa:6e:5e:c4:25:c7:3b:59:e1:ec:21:9e:
fb:4f:00:e8:73:c7:69:ac:c8:88:58:92:92:90:75:01:01:3c:
fc:13:49:69:49:a6:84:97:3c:9f:17:70:04:a9:e0:1e:9f:57:
e2:cc:52:e5:b0:20:dd:6e:5a:1a:23:42:8d:7d:e4:e0:31:ac:
b0:4e:b9:4f:b4:9e:99:bf:0d:6e:a2:2e:ad:11:56:78:b5:fe:
c4:98:bb:29:8c:c2:a5:4a:2e:18:66:c7:db:a2:b2:96:a6:ab:
2b:89:0b:7f:3e:9f:24:c6:e9:c4:c2:0c:9d:77:3e:4a:34:9f:
b1:72:b0:0f:1a:66:a9:bd:62:7a:d6:bc:1d:f5:75:3a:a5:c1:
94:67:74:2f:9c:ec:48:99:e4:43:a1:57:31:48:e7:4b:26:01:
b0:82:00:a1:17:f5:04:7e:86:35:49:fe:3c:83:be:0e:0f:3b:
79:7b:56:ef:2f:67:2e:6c:68:b5:bf:fc:1b:ab:54:a2:9f:ad:
b5:4b:ec:64:9c:51:ca:49:8b:fd:5f:28:0d:c3:15:28:7d:31:
0a:a5:f0:49:75:ab:77:65:20:88:fb:46:a1:ae:dc:e7:f4:1d:
13:0d:22:6b:f7:11:47:7c:fa:3d:89:fe:09:60:20:0f:ec:2f:
e3:36:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 19:33:48 2026 by rpki-client