
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier: ZX0drgpcUR4xaApd0+fU1QgkD0uG/3Cp6yKEgvveFpo=
Subject key identifier: 06:A0:46:BC:FC:62:30:20:8D:28:D2:6B:B1:6F:A5:72:C5:BF:5C:B1
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019CD87B046098A01390E7FBFAFB1F582AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number: 0F20
Signing time: Tue 10 Mar 2026 16:01:06 +0000
Manifest this update: Tue 10 Mar 2026 16:01:06 +0000
Manifest next update: Wed 11 Mar 2026 16:01:06 +0000
Files and hashes: 1: 1-1nP27bm3gAzWksm3Aa1woQLmTg.roa (hash: 4vMUg/+4aVf6LxIWRfZOUaawIS1qe+jvPE0nds6yR2Q=)
2: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
4: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
5: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
6: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
7: Z0BON6E806_VujIu13j4rp4udFU.roa (hash: Dg0DZ41kSt9T8YvEtYfHhtMj9H1Pn0HsQ9ZBprqVWR8=)
8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: 0n9ogNRKGdWIIbogVVjMmV2OY8Jdjli9brKuEVrS90Q=)
9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 15:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:7b:04:60:98:a0:13:90:e7:fb:fa:fb:1f:58:2a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Mar 10 16:01:06 2026 GMT
Not After : Mar 11 16:01:06 2026 GMT
Subject: CN=06a046bcfc6230208d28d26bb16fa572c5bf5cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:87:ed:d4:9c:04:fb:c7:42:8b:40:64:7b:
d5:41:01:cf:41:3a:3b:0a:b7:64:78:d0:3a:19:5d:
ed:8c:63:71:14:b9:aa:3b:ce:ea:30:69:3c:a8:87:
e5:49:20:aa:a5:91:43:bb:1c:2d:5b:0a:88:5a:d5:
9c:80:03:a3:d4:95:18:e9:44:1e:fe:fb:97:b1:a6:
ff:47:d6:02:48:7f:01:ce:0d:19:69:5a:79:e0:6e:
b9:dd:77:6b:9f:79:62:fa:d6:13:81:2f:a4:d5:7f:
2e:19:45:25:84:3d:ec:19:26:42:4d:17:e7:40:09:
24:78:2a:f1:bf:6b:cd:c9:01:61:19:a7:b1:20:89:
ca:b6:fa:fd:c4:6d:95:37:59:18:98:ee:69:0d:97:
de:c8:ad:99:77:5a:7c:1b:ab:14:9b:a7:f8:fb:72:
20:35:2b:61:88:03:12:5c:86:cc:f5:b7:99:f4:70:
5a:e2:4e:6b:8c:26:33:ff:d7:c1:bd:03:02:ce:14:
a7:e5:25:36:6c:c9:67:19:44:30:15:fa:97:99:f1:
75:2d:8d:23:b5:11:f8:53:0d:6d:53:df:ac:91:07:
96:79:e0:fa:f4:57:10:b1:f2:e9:6a:83:49:df:bb:
78:77:56:92:d8:5a:46:5c:86:d2:40:f0:8d:93:35:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A0:46:BC:FC:62:30:20:8D:28:D2:6B:B1:6F:A5:72:C5:BF:5C:B1
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:dc:2f:dd:3b:8c:5c:ac:91:ec:52:62:70:ed:aa:85:75:f4:
e8:24:0c:b3:14:13:af:65:62:4a:0c:5f:e5:3d:db:79:6f:67:
2f:61:73:87:e2:66:37:ca:34:71:e4:c4:88:6a:21:c1:66:8a:
e5:b1:84:c7:f5:5a:2d:9a:06:c2:45:2d:92:cc:83:63:05:50:
4d:58:70:bf:83:f3:a3:68:dd:73:df:d5:da:8f:3c:db:ae:63:
64:c0:40:0d:87:b9:d0:89:f1:00:a8:e1:7a:a2:6b:7c:b8:0c:
4e:cd:97:53:d7:6b:63:4b:c1:98:32:d6:c3:55:14:df:3d:a2:
b6:07:42:b6:4b:91:fc:f4:d2:15:ab:a9:0a:d6:ce:0d:bd:9a:
3a:76:9f:8c:93:c6:80:de:10:35:68:61:42:9e:5e:a1:6d:84:
87:f4:77:c0:18:6d:49:6a:1b:f4:af:3e:44:74:fe:db:ee:9e:
5d:47:d6:17:6b:4e:61:be:cc:0e:d7:16:1a:a2:86:15:7b:15:
ca:f9:67:ff:e8:f0:15:48:82:21:90:78:05:ec:ca:47:f6:72:
50:76:67:d5:f8:7b:cb:66:96:ae:c3:d9:87:da:17:61:98:c1:
e0:71:af:69:a2:28:cb:d0:14:60:f2:ec:26:69:22:19:f3:47:
7f:aa:a5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 01:12:05 2026 by rpki-client