
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier: rgviVUv4p0I2wyhBQQl2GaicBvEnU4gL0cv5Z1RofmA=
Subject key identifier: 46:CD:BF:C6:5D:1D:2F:2E:3E:EF:FD:5F:AE:E7:7E:DF:B4:7D:76:88
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019C7AEC70F3762230A58D661C272B5CE365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number: 0EEE
Signing time: Fri 20 Feb 2026 12:00:41 +0000
Manifest this update: Fri 20 Feb 2026 12:00:41 +0000
Manifest next update: Sat 21 Feb 2026 12:00:41 +0000
Files and hashes: 1: 1-1nP27bm3gAzWksm3Aa1woQLmTg.roa (hash: 4vMUg/+4aVf6LxIWRfZOUaawIS1qe+jvPE0nds6yR2Q=)
2: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
3: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
4: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
5: Z0BON6E806_VujIu13j4rp4udFU.roa (hash: Dg0DZ41kSt9T8YvEtYfHhtMj9H1Pn0HsQ9ZBprqVWR8=)
6: alg23em52u81qKf3TWMm9rQtp00.crl (hash: 1AwBE8hc+2qPUbXLUbDLHpuflvTZ9C210pkvy7YUC40=)
7: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
8: kEoI4Ub4_OLWE-S0RHTXasx1pZc.roa (hash: bg1mLEhoNQt0f/1o3/ZGweSMPbQj7CpwZeH2NuHMIpw=)
9: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
10: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
11: ydHPynA-WZZzBfRpPoH9bBYJVFI.roa (hash: zUJBbBQ6fg/i/CM/EnQ7Y0w1oc/UoPQfcnnHrN+aTOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:ec:70:f3:76:22:30:a5:8d:66:1c:27:2b:5c:e3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 20 12:00:41 2026 GMT
Not After : Feb 21 12:00:41 2026 GMT
Subject: CN=46cdbfc65d1d2f2e3eeffd5faee77edfb47d7688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:df:a6:7f:8e:b2:91:e9:04:a1:94:48:22:
29:a2:0f:45:fe:27:01:99:22:e5:85:7b:bf:f0:8d:
cc:61:28:80:ee:e0:ce:a6:1c:8b:dc:ae:21:6c:76:
4c:d0:60:47:23:a5:8f:75:00:3b:a1:38:b2:a7:e9:
06:df:59:da:da:2a:b0:54:66:a7:ed:30:e7:7b:e7:
bb:4a:3d:d9:1f:21:06:94:48:96:6b:cf:63:b2:83:
f9:e2:21:a0:2e:45:20:d5:60:03:4c:da:66:b1:a4:
5a:ff:55:18:dc:a2:e4:4a:0e:c0:97:a1:56:cb:b6:
88:80:d2:5d:44:33:91:e7:4c:3d:63:51:80:6d:71:
47:63:15:36:84:db:fd:92:ba:b1:31:b9:9c:f3:4d:
b7:06:d6:96:3a:f7:0c:18:d7:57:8f:c0:7b:55:56:
13:b3:ae:61:ee:91:bb:5c:4f:ef:1f:f9:14:2c:a5:
94:3f:32:a2:fe:b9:63:d0:1a:f6:ea:10:cd:68:6c:
20:4b:82:92:18:67:cb:d1:5d:bc:b1:bc:df:89:42:
49:22:84:f4:3a:4d:11:bc:c1:26:43:3f:b3:ef:85:
d7:61:7d:2b:f3:86:b8:d1:d4:e5:b2:89:ef:b9:c4:
ca:ef:42:61:c5:9c:49:52:99:ab:0c:30:c5:40:ae:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:BF:C6:5D:1D:2F:2E:3E:EF:FD:5F:AE:E7:7E:DF:B4:7D:76:88
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3c:d6:12:c5:8b:e4:31:87:77:6f:5e:7d:f8:e8:5b:e6:f5:
bb:47:c4:59:13:01:5a:91:cf:90:4d:25:c9:ee:f1:f4:3d:ea:
aa:7e:64:19:17:02:8b:a3:1f:81:2f:36:64:bc:02:75:9c:c5:
e4:a8:ff:83:5d:12:c4:cd:b0:f9:2e:75:42:9c:c4:7e:81:e9:
66:22:de:a9:34:38:32:29:cc:cd:67:ce:ce:16:29:37:25:2a:
1c:68:85:2a:d3:fa:c3:e1:f7:a5:09:1e:9a:fa:b8:1c:aa:13:
80:60:d9:34:6f:ea:c3:70:bd:94:c4:02:43:71:93:10:a6:49:
e3:46:d0:67:70:e7:4f:dc:7f:e1:71:cf:5b:24:99:e6:12:39:
cd:f9:ac:59:ea:88:3b:df:54:0a:bf:86:28:8b:3f:d4:07:ff:
d2:bf:77:2f:7c:89:46:29:79:ad:51:f5:aa:4c:1c:58:83:db:
ab:7e:09:b1:89:ea:27:ba:91:c6:64:bf:9d:91:8b:8a:a3:dd:
71:75:1b:7a:66:cd:37:8f:2b:83:9f:57:cd:43:8e:8d:d0:df:
42:25:7f:57:14:0d:56:58:5e:80:af:35:69:8b:a8:0c:9d:8a:
29:3e:c0:2d:44:e2:b3:00:b2:1b:e9:f9:4d:ef:40:ef:b2:5c:
01:48:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 14:02:18 2026 by rpki-client