
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier: ieB2kkRJC+zy8wlwXCIwx+mdRtE0GdCF5i1vL/CwrAY=
Subject key identifier: 41:99:05:FA:34:B8:FE:A6:5D:4C:62:1D:79:BE:5B:3E:A0:AC:22:2B
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019D653DFB4DAA67C1D16C3FD2694494CD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number: 0F6A
Signing time: Tue 07 Apr 2026 00:00:53 +0000
Manifest this update: Tue 07 Apr 2026 00:00:53 +0000
Manifest next update: Wed 08 Apr 2026 00:00:53 +0000
Files and hashes: 1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: 2N+jmmozc6Z+LGS5Fo0JZ1bic9WZD1zL0JOw5yFn4n0=)
9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:65:3d:fb:4d:aa:67:c1:d1:6c:3f:d2:69:44:94:cd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Apr 7 00:00:53 2026 GMT
Not After : Apr 8 00:00:53 2026 GMT
Subject: CN=419905fa34b8fea65d4c621d79be5b3ea0ac222b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:53:1c:7f:64:b6:2b:22:18:f6:bc:50:77:
69:93:a4:30:ed:4c:f1:cb:27:1d:51:0b:4f:e6:03:
97:3e:d2:3f:39:91:c8:a1:3c:98:f9:47:cf:85:24:
73:25:8c:a5:a8:77:1d:54:b1:cf:46:8c:27:93:ba:
95:12:04:10:a4:7f:cf:c7:6d:a1:d7:a9:00:98:79:
ce:c9:85:c9:4e:9a:00:6c:5e:80:d6:5d:3b:17:d3:
c8:ca:43:57:72:01:6f:a8:51:a3:d6:97:35:8c:e4:
04:fa:d1:5b:9a:1c:10:d8:d4:f0:90:20:fa:fc:97:
11:17:88:c4:49:b5:14:85:4c:19:8f:aa:47:4b:f4:
d1:0b:98:7c:cf:b5:81:d6:81:03:ae:db:bc:58:76:
c9:d6:ce:30:b8:66:34:7d:7a:38:50:f4:1d:3d:54:
79:ee:55:a7:95:0e:ca:d8:12:25:ac:2a:7c:ce:71:
06:d3:2c:e1:15:59:1c:55:2b:28:eb:96:87:e9:9c:
c5:5a:b4:fc:c9:36:75:cb:77:68:56:2e:f6:80:7f:
90:26:af:7b:de:e7:13:88:3c:97:4a:23:c4:8d:87:
d8:59:15:b0:a2:4f:e4:51:38:1a:2b:14:05:c1:47:
c3:32:63:d2:ef:14:16:9a:49:02:66:e7:db:c8:5f:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:99:05:FA:34:B8:FE:A6:5D:4C:62:1D:79:BE:5B:3E:A0:AC:22:2B
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:69:9a:ea:94:bf:a2:27:74:a6:39:e5:de:99:11:8a:63:99:
b4:6c:55:82:a1:df:01:a8:6f:e1:2d:c1:49:12:70:a9:a7:58:
19:df:ff:bc:82:9e:74:52:75:54:cd:d4:79:2b:dd:2c:5c:53:
fe:ae:c8:74:a0:dc:1d:a7:9b:f6:76:e5:85:80:81:e6:60:0d:
22:b8:75:cc:60:bf:df:2a:5a:80:2b:ef:30:13:05:06:13:b2:
d7:b8:10:c3:ce:12:41:6f:67:7f:6e:5b:85:83:ad:2e:34:65:
a4:69:cb:3b:13:7d:83:4e:23:fc:25:57:2f:18:4f:00:d4:35:
5e:5f:45:37:25:4a:d5:ef:2b:4b:63:8e:69:bd:ce:54:b5:8d:
a3:e2:80:92:ab:d4:d3:47:17:54:73:ff:5d:b5:64:49:4d:9b:
6b:6a:09:6e:ec:15:ca:5f:26:a3:d3:0a:c6:58:1b:7d:63:c5:
2f:8e:98:45:86:70:35:f9:a8:9d:6e:eb:50:4d:9e:af:31:a6:
57:b8:7e:bc:7b:93:12:2c:06:cc:15:e5:73:f3:94:42:f3:57:
1f:b9:d7:a2:4b:b8:ba:15:22:a2:e3:f1:19:00:7b:c3:f5:e2:
aa:d4:8b:18:7d:93:35:e5:19:a8:96:9c:81:0b:5e:6a:7d:ea:
32:64:98:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1lPftNqmfB0Ww/0mlElM1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjYwNDA3MDAwMDUzWhcNMjYwNDA4MDAwMDUzWjAzMTEwLwYDVQQD
Eyg0MTk5MDVmYTM0YjhmZWE2NWQ0YzYyMWQ3OWJlNWIzZWEwYWMyMjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutxTHH9ktisiGPa8UHdpk6Qw7Uzx
yycdUQtP5gOXPtI/OZHIoTyY+UfPhSRzJYylqHcdVLHPRownk7qVEgQQpH/Px22h
16kAmHnOyYXJTpoAbF6A1l07F9PIykNXcgFvqFGj1pc1jOQE+tFbmhwQ2NTwkCD6
/JcRF4jESbUUhUwZj6pHS/TRC5h8z7WB1oEDrtu8WHbJ1s4wuGY0fXo4UPQdPVR5
7lWnlQ7K2BIlrCp8znEG0yzhFVkcVSso65aH6ZzFWrT8yTZ1y3doVi72gH+QJq97
3ucTiDyXSiPEjYfYWRWwok/kUTgaKxQFwUfDMmPS7xQWmkkCZufbyF8C2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGZBfo0uP6mXUxiHXm+Wz6grCIrMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmma6pS/
oid0pjnl3pkRimOZtGxVgqHfAahv4S3BSRJwqadYGd//vIKedFJ1VM3UeSvdLFxT
/q7IdKDcHaeb9nblhYCB5mANIrh1zGC/3ypagCvvMBMFBhOy17gQw84SQW9nf25b
hYOtLjRlpGnLOxN9g04j/CVXLxhPANQ1Xl9FNyVK1e8rS2OOab3OVLWNo+KAkqvU
00cXVHP/XbVkSU2ba2oJbuwVyl8mo9MKxlgbfWPFL46YRYZwNfmonW7rUE2erzGm
V7h+vHuTEiwGzBXlc/OUQvNXH7nXoku4uhUiouPxGQB7w/XiqtSLGH2TNeUZqJac
gQtean3qMmSYuw==
-----END CERTIFICATE-----
Generated at Tue Apr 7 09:06:15 2026 by rpki-client